Privacy Policy

Who we are

This website is operated by Beatrix Meszaros, trading as Pedey Limited (company registered in England and Wales). Registered office: London, UK. Contact: beatrix@pedey.co.uk

We are the data controller for personal data collected through this website.

What data we collect and why

1. Contact form submissions

Data collected: Name, email address, message content, and any other information you choose to provide.

Purpose: To respond to your enquiry and discuss potential work together.

Lawful basis: Legitimate interests (responding to a direct enquiry you initiated).

Retention: 24 months from last contact, or until you request deletion.

Processor: Netlify Forms (Netlify, Inc.) — Netlify Privacy Policy.

2. AI Maturity Assessment — email results and optional follow-up

Data collected: Email address, first name (optional), assessment responses, and calculated maturity score.

Purpose: (a) To send you a copy of your assessment results by email, as you explicitly requested by completing the form. (b) Only where you separately tick the optional follow-up box, to send you a single follow-up email about AI training and related offers.

Lawful basis: Consent. You actively enter your email and tick a checkbox to receive your results. The follow-up is a separate, optional tickbox — we only send a follow-up to people who tick it, and it is never required to receive your results. You can withdraw either consent at any time by contacting us or using the opt-out option in any email we send.

Live events and partners: Some versions of the assessment run as collaborations with partners — for example live events with Mindstone (Mindstone Learning Ltd). If you complete the assessment at such an event and tick the optional follow-up box, your first name, email and assessment results may be shared with that partner so that we and/or the partner can send the single follow-up described above. See the Mindstone Privacy Policy. Aggregate, anonymous results (for example, how a room scored on average) may be shown live on screen at events; these contain no names or email addresses.

Retention: Email addresses are retained for 12 months, after which they are deleted, unless you ask us to delete them sooner. We do not add you to an ongoing marketing list without separate, specific consent.

Processors: EmailJS (EmailJS.com) transmits the email — EmailJS Privacy Policy. Your submission is also logged to Google Sheets (Google LLC), which we use for reporting; for email submissions this record includes your first name and email. Google Privacy Policy.

3. Analytics

Data collected: Anonymised usage data including pages visited, time on site, device type, and general location (country/city level). No personally identifiable data is collected in analytics.

Purpose: To understand how visitors use the site and improve content and user experience.

Lawful basis: Legitimate interests.

Processor: Google Analytics 4 (Google LLC). Data is processed in the US under Standard Contractual Clauses. Google Privacy Policy.

You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

Cookies

We use only essential and analytics cookies. See our Cookie Policy for full details.

Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restrict processing — limit how we use your data
• Data portability — receive your data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time where consent is the lawful basis

To exercise any of these rights, email beatrix@pedey.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled incorrectly.

International transfers

Some of our data processors (Google Analytics, EmailJS) are based in the United States. Transfers are covered by appropriate safeguards including Standard Contractual Clauses approved by the UK ICO.

Data security

We take appropriate technical and organisational measures to protect your personal data. Our website is served over HTTPS. We do not store assessment responses on our own servers — all processing is client-side (in your browser).

Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance of the updated policy.

Contact

For any privacy-related questions: beatrix@pedey.co.uk