Legal
Privacy Notice
Audital Consulting Limited · Last updated: 5 October 2026
This notice explains how Audital Consulting Limited (“Audital”, “we”, “us”) handles personal information about business contacts, website visitors, enquirers, prospective customers and customer contacts. It also explains how we handle personal data contained in customer project records where a customer instructs us to process it for an agreed work package.
Browser-only CSV demonstration
The homepage CSV demonstration processes selected CSV contents locally in your browser tab. The comparison and receipt functions do not upload those contents. Closing the tab ends this local demonstration; downloaded files remain on your device. This local processing is separate from enquiries and the website hosting information described below.
Optional local-demo measurement
Measurement is off unless you choose to allow it after a local result. You can turn it off in the demo. If allowed, Audital receives only an allowed event name (such as a sample run or download initiation) and a broad source category (direct, X, GitHub or other). These events contain no CSV contents, filenames, receipt hashes, email address, visitor identifier or full referral URL. The preference is stored on your device. Do Not Track or Global Privacy Control keeps measurement off. Operational hosting logs may separately contain connection metadata under the hosting information below. This operational signal is not a record of unique users, independent verification or paid activation.
Who we are
Audital Consulting Limited is the data controller for business-contact research, outreach, enquiries, customer-relationship management, billing, website administration and our own business records.
Where Audital processes personal data contained in customer project records solely on a customer’s documented instructions, the customer will generally be controller and Audital will act as processor. The applicable roles and instructions are recorded in the engagement terms or data-processing agreement before those project records are transferred.
- Company
- Audital Consulting Limited
- Company number
- 16931341
- Registered in
- England and Wales
- Registered office
- 61 Bridge Street, Kington, United Kingdom, HR5 3DJ
- Contact
- contact@audital.ai
Information we collect
Business-contact information. Names, job titles, employer and company information, public professional information, work email addresses and brief notes explaining why a business role may be relevant to Audital.
Enquiries and correspondence. Information you submit through our public enquiry or readiness forms, or send to us directly, including name, work email, organisation, requested output, source-material description, purchasing route and subsequent correspondence. When you submit a public form, we may also receive the landing path, referral URL, referral code and campaign parameters included in that URL so we can understand which business outreach, adviser referral or public content produced the enquiry.
Regulatory-notes subscriptions. If you actively subscribe to Audital Material Third-Party Register Notes, we record the work email address you provide, the subscription requested and a consent timestamp so we can evidence the subscription and respect later withdrawal.
Customer relationship records. Proposals, engagement records, instructions, invoices, payment status and delivery communications.
Customer project records. Material required to perform an agreed work package only after the permitted purpose, transfer method, access arrangements and retention/deletion requirements have been agreed.
Website and technical information. Our hosting provider may process technical information such as IP address, browser/device information, requested pages, timestamps, performance information and security or diagnostic logs where needed to deliver, secure and troubleshoot the website. For the public readiness checker, Audital also records a small allowlisted set of first-party funnel event names, such as checker viewed, started, completed, report exported or evidence review requested, together with a bounded referral source. These events do not contain questionnaire answers, names, email addresses, organisation names, persistent user IDs, advertising identifiers or device fingerprints. Public forms also use bounded input lengths and a hidden anti-bot field to reduce automated abuse before information is forwarded to our form-delivery provider.
Where business-contact information comes from
We use publicly available professional and business sources such as company websites and public professional profiles. Business email addresses may be enriched or verified using Instantly and its underlying data providers before contact is made.
How we use information and our legal basis
- Researching relevant organisations and business roles — legitimate interests.
- Contacting relevant corporate business roles about Audital services — legitimate interests.
- Responding to enquiries and preparing proposals — legitimate interests and, where applicable, steps to enter a contract.
- Sending Material Third-Party Register Notes after an explicit subscription — consent. You can withdraw that consent at any time.
- Managing customer contacts, instructions and service communications — legitimate interests and contract performance where applicable.
- Operating, securing and troubleshooting the website and forms — legitimate interests.
- Measuring the aggregate readiness-checker funnel without cookies or questionnaire content — legitimate interests.
- Maintaining suppression records so objections and opt-outs are respected — legal obligation and legitimate interests.
- Keeping accounting, taxation and required business records — legal obligation.
When we rely on legitimate interests, we consider whether the activity is relevant, proportionate and reasonably expected in the context of the person’s professional role. We do not sell personal information.
Your right to object to direct marketing is absolute. If you tell us not to contact you for marketing, we will stop and retain only the minimum suppression information needed to respect that instruction.
AI-assisted processing
Audital uses OpenAI’s ChatGPT to help organise and review publicly available business information relating to prospective customers, such as names, job titles, employers and business-relevance notes. Human judgement remains part of prospect selection and outreach.
We do not submit confidential customer delivery records to consumer or personal AI accounts. Before an AI service is used with customer project records, we assess the provider, account type, contractual terms and data-handling arrangements and record any required instructions in the engagement terms or data-processing agreement.
Automated decision-making
Audital does not make decisions about individuals that produce legal or similarly significant effects based solely on automated processing.
Website analytics and cookies
The public Audital site does not currently run third-party web analytics, advertising cookies or session-replay software. Vercel may process limited hosting, security and diagnostic logs needed to deliver and protect the site. Audital records a small first-party, cookie-free readiness funnel consisting only of allowlisted event names and a bounded referral source. It does not record the visitor’s questionnaire answers or attach a persistent user identifier to those events. The proposal form records the referral URL, landing path and campaign parameters that accompany a submitted enquiry. Referral codes are normalised to a short bounded value before they are retained with a submitted readiness request. If non-essential tracking is introduced, this notice and any required consent mechanism will be updated before it is enabled.
Service providers
We use the following providers where necessary for the purposes described in this notice:
- Formspree — public website enquiry, readiness and newsletter-form delivery
- Microsoft 365 — business email and communications
- Instantly / RocketReach / Apollo — business-contact research, enrichment, verification, suppression and outreach support where used
- OpenAI — AI-assisted organisation and review of publicly sourced business information
- Vercel — website hosting, delivery, security and diagnostic logging
- Stripe — payment processing where a Stripe payment link or checkout is used
A provider may act as our processor or under its own applicable terms depending on the service and account arrangement.
International transfers
Some providers may process information outside the United Kingdom. Where UK restricted-transfer rules apply, we use the mechanism applicable to the relevant provider and service, such as UK adequacy regulations or approved contractual safeguards. You can contact us for further information about the safeguard applicable to a particular provider.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose collected.
- Business contacts who do not respond: normally six months after our final communication.
- Prospects who reply or discuss our services: normally 12 months after the last meaningful contact.
- Regulatory-notes subscribers: until you unsubscribe or withdraw consent, after which only the minimum suppression record may be retained.
- Enquiry correspondence: normally up to 24 months after the last meaningful contact.
- Customer engagement and contractual correspondence: normally six years after the engagement ends where needed for legal, accounting or business-record purposes.
- Financial and taxation records: normally six years from the end of the relevant company financial year, or longer where required by law or an ongoing enquiry.
- Website and security telemetry: retained only for as long as needed for website delivery, security and troubleshooting, subject to provider account settings.
- Suppression records: the minimum information needed is retained for as long as reasonably necessary to make sure an objection or opt-out is respected.
- Customer project records: the applicable retention, return and deletion period is agreed before those records are transferred.
Your rights
Depending on the circumstances, UK data-protection law may give you the right to:
- ask for a copy of personal information we hold about you
- ask us to correct inaccurate or incomplete information
- ask us to delete information in certain circumstances
- object to processing, including the absolute right to object to direct marketing
- ask us to restrict processing in certain circumstances
- request information in a portable format where applicable
To exercise a right, email contact@audital.ai. We may need information to verify your identity before completing a request.
Complaints
If you are unhappy with how we handle personal information, email contact@audital.ai with “Data protection complaint” in the subject line so we can investigate.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data-protection regulator. Current contact information is available at ico.org.uk.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed.
Audital Consulting Limited supplies bounded production and analysis work packages. Customers retain publication, legal, regulatory, audit, assurance, procurement and business decision authority.