Privacy Policy

Last updated: 7 July 2026 · Plain English, no jargon.

Who we are

Wisa is an AI consultancy run by Lisa Pagin, trading as Wisa, based in Cornwall, UK. We are registered with the Information Commissioner's Office (ICO), registration number ZC188086. Questions about anything on this page: hello@wisaai.co.uk.

What we collect, and why

• When you contact us (email, phone, or booking a call): your name, contact details and whatever you tell us about your business. We use it to reply and to prepare for the conversation you've asked for. Lawful basis: legitimate interests.
• When you become a client: the business information needed to build and run your systems, covered by a signed agreement and a Data Processing Agreement. Lawful basis: contract.
• When you visit this website: nothing. No analytics, no tracking cookies, no advertising pixels. Booking runs on Google's calendar service, which applies its own privacy policy once you're on their page.

Client data — the short version

When we build systems for your business, some of those systems handle your customers' details. How we treat that data is set out fully in our Data Processing Agreement, signed before we touch anything. The principles: your data stays yours; it's kept completely separate from every other client's; it is never sold and never used to train AI models; and when we part ways we hand everything over and delete our copies, confirmed in writing.

Who else sees data

Only the services needed to do the work — for example Google Workspace (email and documents), Anthropic's Claude API (AI processing; not used to train models), Make.com (automation) and Twilio (phone/SMS, where used). Client systems name every service in the agreement. We never sell or share data for marketing.

How long we keep things

Enquiries: up to 12 months, then deleted unless we're working together. Client data: for the length of our agreement, then returned or deleted as the DPA describes. Records we're legally required to keep (invoices, for example): as long as UK law requires.

Your rights

Under UK GDPR you can ask us for a copy of your personal data, ask us to correct or delete it, object to or restrict our use of it, and take your data elsewhere. Email hello@wisaai.co.uk and we'll respond within a month. If you're unhappy with how we handle your data, you can complain to the ICO at ico.org.uk — though we'd appreciate the chance to put it right first.

Changes

If this policy changes, the new version appears here with an updated date. Nothing changes quietly.