Privacy notice
This explains what personal data I hold, where it came from, and what you can tell me to do about it. It is written to be read rather than to be thorough at your expense.
Last updated 14 August 2026
Who I am
Helena DeMaria-Williams, trading as Ops & AI. I am a sole trader and the data controller for the personal data described here.
Address for service: Unit 168983, PO Box 7169, Poole, BH15 9EL.
Email: privacy@opsandai.co.uk
If I emailed you and you never asked me to
Then you are reading this because of a cold business email, and this is the part that matters to you.
I hold your business contact details. I found them on the public register at Companies House and on your firm's own website. I have not bought a list, and I have not taken anything from a private source.
I emailed you because I sell a service to firms like yours and I think it may be relevant. If it is not, reply with the word no and I will remove you and not contact you again. You do not have to give a reason, and I have to act on it.
What I hold
For prospective clients:
- Firm name, company number, registered address and sector
- Names and roles of directors or partners, as published by Companies House
- Business email addresses published on the firm's own website
- Publicly stated team size, services and software in use
- My own notes on whether the service is likely to be relevant
- Whether I have contacted you, when, and whether you replied
For people who contact me or book a call: your name, email address, anything you choose to tell me, and the time of the call.
I do not hold special category data, I do not profile anyone automatically, and no decision affecting you is made by software.
Where it came from
Companies House, which publishes company and officer data as an open public record, and firms' own public websites. Both are publicly accessible sources.
If you contacted me directly, it came from you.
Why I am allowed to hold it
My lawful basis is legitimate interests — mine in offering a relevant service to businesses, and the recipient firm's in hearing about one that may save it time.
I have weighed that against your privacy. The data is business contact data from public sources, the volume is low, the targeting is narrow, and opting out takes one word. I only contact limited companies and limited liability partnerships, not sole traders or partnerships, because the latter are treated as individuals for marketing rules.
Where you have contacted me or become a client, the basis is performance of a contract or steps taken before entering one.
How long I keep it
Prospect data: twelve months after the last contact, if nothing comes of it. Then deleted.
If you ask me to stop contacting you, I keep the minimum needed to honour that — usually just an email address on a suppression list — for as long as I am sending email at all. That is the only way to guarantee I do not contact you again by accident.
Client records: six years after the engagement ends, to meet tax and accounting obligations.
Who else sees it
Nobody buys it, and I do not share, sell or rent it. It is handled by the suppliers I use to run the business:
- Google Workspace — email
- Vercel — hosting for this website
- An email verification service — checking addresses are valid
- Cal.com — booking calls
- Substack — the newsletter, if you subscribe to it yourself
Some of these are based outside the UK. Where that is the case, transfers rely on UK adequacy regulations or the standard contractual clauses, depending on the supplier.
Your rights
You can ask me to:
- Tell you what I hold about you, and give you a copy
- Correct anything that is wrong
- Delete it
- Stop or restrict what I am doing with it
- Send it to you or someone else in a portable format
You also have an absolute right to object to direct marketing. There is no balancing test on that one — if you object, I must stop, and I will.
Email privacy@opsandai.co.uk. I will respond within one month, and it costs you nothing.
Cookies
This site sets no cookies and runs no analytics. Nothing here tracks you. My hosting provider keeps standard server logs, which include IP addresses, for security and reliability.
My emails contain no tracking pixels. I cannot tell whether you opened one.
Complaints
If you think I have handled your data badly, tell me first and I will try to put it right. If that does not satisfy you, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
If this notice changes materially, the date at the top changes with it. Older versions are not published; ask me if you need one.