Privacy Policy

1. Who We Are

TaskFreeAI Ltd is a technology company that provides an AI-powered booking engine platform to specialist tour operators in the United Kingdom.

For the purposes of UK data protection law, TaskFreeAI Ltd is the Data Controller in respect of personal data collected through this website (taskfreeai.co.uk). Where we process personal data on behalf of our tour operator clients through the Platform, we act as a Data Processor, and the relevant tour operator is the Data Controller.

2. What This Policy Covers

This Privacy Policy explains how we collect, use, store, and share personal data when you:

1. visit our website at taskfreeai.co.uk;
2. enquire about or sign up for our Platform;
3. communicate with us by email, telephone, or through our website;
4. attend a demonstration or meeting with us.

This policy does not cover personal data processed through our Platform on behalf of tour operator clients. That processing is governed by the relevant operator's own privacy policy and our Data Processing Agreement with them.

3. Personal Data We Collect

We collect the following categories of personal data about visitors, prospects, and clients of taskfreeai.co.uk:

We do not collect special category data (such as health data, religious beliefs, or ethnic origin) through our website.

4. How We Use Your Personal Data

5. Who We Share Your Data With

We do not sell your personal data. We may share your data with the following categories of recipients:

1. Service providers: hosting providers (Vercel, Cloudflare), email services (Resend), database infrastructure (Supabase), and analytics tools, all bound by appropriate data processing agreements.
2. Professional advisers: our accountants, lawyers, and insurers where reasonably necessary.
3. Regulatory authorities: where we are required to do so by law or in response to a lawful request.
4. Business transfers: if TaskFreeAI Ltd is acquired, merges with another company, or transfers substantially all of its assets, your data may be transferred as part of that transaction. We will notify you of any such change.

6. International Transfers

Some of our service providers are based outside the United Kingdom (including in the United States). Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

1. transfers to countries with an adequacy decision from the UK Secretary of State;
2. the International Data Transfer Agreement (IDTA); or
3. EU Standard Contractual Clauses with the UK Addendum.

You may request further details of the safeguards we use by contacting us at privacy@taskfreeai.co.uk.

7. How Long We Keep Your Data

We retain personal data only for as long as is necessary for the purposes for which it was collected:

1. Prospect data: retained for up to 24 months from last meaningful contact. If you do not become a client, we will delete your data unless you consent to continued contact.
2. Client data: retained for the duration of our contract and for 6 years afterwards (to meet legal and accounting obligations).
3. Technical/analytics data: retained for up to 12 months.
4. Communications: retained for the duration of the business relationship and for 3 years afterwards.

8. Cookies

Our website uses a small number of cookies:

1. Strictly necessary cookies: required for the website to function (e.g., session management). These do not require your consent.
2. Analytics cookies: used to understand how visitors use our site. We will only set these with your consent.

We do not use advertising or tracking cookies. You can manage your cookie preferences through your browser settings or through our cookie banner when you first visit the site.

9. Your Rights

Under UK data protection law, you have the following rights:

1. Right of access: to request a copy of the personal data we hold about you.
2. Right to rectification: to request correction of inaccurate or incomplete data.
3. Right to erasure: to request deletion of your data where there is no compelling reason for continued processing.
4. Right to restrict processing: to request that we limit how we use your data.
5. Right to data portability: to request a copy of your data in a structured, commonly used format.
6. Right to object: to object to processing based on legitimate interests, including direct marketing.
7. Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@taskfreeai.co.uk. We will respond within one month. There is no fee for making a request, although we may charge a reasonable fee for manifestly unfounded or excessive requests.

10. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Children

Our website and services are directed at businesses and business professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post any changes on this page and update the “Last updated” date. Where changes are significant, we will notify you by email or through a notice on our website.

13. Contact Us and Complaints

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):