Privacy policy
This site collects as little as possible. There are no advertising trackers, no third-party profiling and no cookie banner, because there are no tracking cookies to consent to.
The short version
If you email us, we keep the email so we can answer it and administer any work that follows. The server keeps brief access logs for security. Nothing is sold, rented or shared for marketing, ever. You can have any of it deleted by asking.
Everything below explains that in the detail the law requires. Last updated 2 September 2026.
- No advertising or cross-site tracking cookies
- No sale or sharing of personal data, under any definition
- Enquiry emails kept only as long as there is a reason to
- Server logs kept briefly, for security and diagnostics
- Deletion on request, subject to legal retention duties
- Client project data governed by the signed project agreement
Who is responsible for your data
The data controller is Hire AI Dev. For anything in this policy — access, correction, deletion, or a complaint — write to contact@hire-ai-dev.com and put “privacy” in the subject line.
If you are unhappy with the response, you have the right to complain to the Information Commissioner's Office (ICO) or to the equivalent regulator where you live. You do not have to go through us first, though it is usually faster.
What is collected, and why
Enquiries. When you email, the message, your address and anything you attach are stored in the mailbox. This is used to answer you, quote for work, and administer a contract if one follows. Nothing else.
Server logs. The host records the IP address, page requested, referrer, user agent and timestamp of each request. These exist to keep the site up and to investigate abuse. They are not used to build a profile of you.
Analytics. Where analytics are used at all, they are aggregate-only and cookieless — page counts and referrers, with no cross-site identifier and no attempt to recognise a returning visitor.
Client project data. During an engagement we may be given access to systems containing your customers' data. That access is governed by the project agreement and any NDA or data processing agreement signed alongside it, not by this page. In that relationship you are the controller and we are the processor.
The legal basis for holding it
Under the UK and EU GDPR, personal data needs a lawful basis. Enquiry correspondence is held on the basis of steps taken at your request prior to entering a contract, and then performance of a contract once work begins. Server logs and security monitoring rest on legitimate interests — specifically, keeping the service available and free of abuse, weighed against the minimal impact of holding an IP address briefly.
Invoices and the records behind them are kept under legal obligation, because tax authorities require it. Nothing on this site relies on consent, which is why there is no consent banner.
How long it is kept
Enquiries that do not become projects are deleted within twelve months. Project correspondence is kept for the life of the engagement and for six years afterwards, which is the period in which a contractual claim can be brought and the period accounting records must be retained.
Server logs are rotated within thirty days. Aggregate analytics counts contain no personal data and are kept indefinitely.
Who else sees it
A small number of service providers process data on our behalf: the website host, the email provider, the accounting software that issues invoices, and the payment processor that handles bank transfers. Each is bound by its own contract to process data only on instruction.
No one else. Personal data is not sold, rented, traded, or given to advertisers or data brokers. It may be disclosed if a court or regulator lawfully requires it, and we will tell you if that happens unless we are legally prohibited from doing so.
International transfers
We work with clients worldwide, so data may be processed outside your country. Where data leaves the UK or EEA, transfers rely on an adequacy decision where one exists, and otherwise on Standard Contractual Clauses with the provider concerned. You can ask which mechanism applies to a specific provider.
Your rights
You can ask for a copy of the personal data held about you, ask for it to be corrected, ask for it to be erased, ask that processing be restricted, object to processing carried out on the basis of legitimate interests, and ask to receive your data in a portable format.
Requests are answered within one month and are free. We may ask you to confirm your identity first, which for an email enquiry usually means replying from the address that sent it.
If you are in California, the CCPA and CPRA give you comparable rights to know, delete and correct, plus the right to opt out of sale or sharing. There is nothing to opt out of: this site does not sell or share personal information as those terms are defined, and does not process sensitive personal information for inferring characteristics.
Cookies
No advertising, analytics or cross-site cookies are set. If a strictly necessary cookie is ever used it will be limited to making the site function — remembering that you dismissed a notice, for example — and will not track you between sites. That category does not require consent under the ePrivacy rules, which is why you are not asked for any.
Security
The site is served over HTTPS. Access to the mailbox and to any client system is protected by multi-factor authentication, and credentials for client systems are held in a password manager and revoked at the end of an engagement. No system is perfectly secure; if a breach affects your personal data and is likely to present a risk to you, you will be told, and the regulator will be notified within seventy-two hours as required.
Children
This site is aimed at businesses and is not directed at children. No data is knowingly collected from anyone under sixteen. If you believe a child has sent personal data, write and it will be deleted.
Changes to this policy
If this policy changes, the date at the top changes with it. Material changes affecting existing clients are communicated directly rather than by quietly editing this page.
Frequently asked questions
How do we request deletion of our data?
Email contact@hire-ai-dev.com with “privacy” in the subject. It will be removed within a month, apart from anything that must be kept for tax or legal reasons, and we will tell you what was retained and why.
Do you use cookies or a tracking pixel?
No. No advertising cookies, no analytics cookies, no pixels from social platforms. That is why there is no cookie banner.
How is our project data handled during an engagement?
Under the signed project agreement and any NDA or DPA alongside it. Your data stays in systems you control wherever possible, access is least-privilege, and every credential is revoked at handover.
Do you train AI models on client data?
No. Client code and data are never used to train models, and where a third-party model provider is used in a build, it is configured so that your data is excluded from training.
Related pages
Tell us what you are building.
Send a short description of the problem and we will reply within one business day with an honest view of scope, cost and whether we are the right person for it.
Or email directly: contact@hire-ai-dev.com