Privacy Policy
Effective: December 2025
Excetra Ltd (Company Number: 16184789, registered in England and Wales) is the data controller for personal information described in this policy. We keep client data simple: collect only what we need to respond, deliver training, and meet compliance requirements.
Data we collect
- Contact details you share (name, email, role, organisation).
- Workshop context and objectives you provide in forms or calls.
- Basic site usage data (pages visited) to improve content; we do not profile or sell data.
- Contact form metadata (page URL, referrer, browser details, IP address, locale, time zone, UTM parameters, previous page).
- Optional materials you choose to share for training design (anonymised or synthetic preferred).
How we use it
- Respond to inquiries and schedule training or pilot discussions (legitimate interests under GDPR Article 6(1)(f)).
- Route inquiries using form context (source page, initiative, UTM) so the right person responds.
- Design and deliver workshops tailored to your team (contract performance under GDPR Article 6(1)(b)).
- Meet legal, security, and compliance obligations when engaged (legal obligation under GDPR Article 6(1)(c)).
We do not sell personal data. We do not use your data to train third-party models.
Retention & control
- Inquiry data is retained only as long as needed to respond or while an engagement is active.
- Contact form metadata is retained with the inquiry email so we can trace source and intent.
- Workshop materials are deleted on request or at the end of an engagement unless required for compliance.
- You can request access, correction, or deletion at any time by emailing hello@excetra.ai.
Third parties
We use Resend to deliver inquiry emails from this site. Resend processes contact details, message content, and contact form metadata so the email reaches us. For training delivery, we use professional-tier AI subscriptions (ChatGPT Pro, Claude Pro) with training opt-out enabled. We do not currently use enterprise-tier subscriptions for delivery. If you need enterprise data isolation, we can work within your organisation's enterprise instances or via API access. We may use standard tools for scheduling and analytics with appropriate data protection agreements in place.
Your rights
- Access, correct, or delete your personal data.
- Object to processing or request restrictions where applicable.
- Request a copy of your data in portable format.
- Lodge a complaint with the Information Commissioner's Office (ICO) if you believe your rights have been infringed.
To exercise these rights, contact hello@excetra.ai. We will respond to valid requests within one month, as required by GDPR. If we need additional time due to complexity, we will notify you within the initial month.