Privacy

Privacy

What personal data we collect, what we do with it, and your rights under UK data protection law.

Last updated: 5 June 2026

GridteamAI publishes UK & Ireland infrastructure intelligence. This page tells you what personal data we collect when you use this site or buy our reports, what we do with it, and the rights you have under UK data protection law. Plain UK English. No fluff.

Who we are

GridteamAI is the trading name of the operator of this site, based in the United Kingdom. For all data protection enquiries, please email book@gridteamai.com — contact, access requests, complaints, deletion requests. The Data Controller will respond directly.

What we collect, why, and the lawful basis

DataWhen we collect itWhyLawful basis (UK GDPR)
Email addressWhen you subscribe to the Weekly Grid Briefing, purchase a report, or send us a briefDeliver the content / fulfil the order / respond to your messageContract (subscription) · Legitimate interest (free briefing) · Consent (marketing)
Name, billing address, companyWhen you buy a report or subscriptionProcess the payment, issue a receipt, confirm deliveryContract
Payment detailsWhen you buy a report or subscriptionProcess the transactionContract. Card numbers are processed by Stripe, not stored by us
Brief / enquiry contentWhen you contact us via book@gridteamai.comRespond to your enquiryLegitimate interest
Usage data (page views, referrer, broad geography)When you browse the siteUnderstand which reports get read, improve the siteLegitimate interest. Analytics are privacy-preserving — no cookies, no personal identifiers

We do not collect special category data (health, ethnicity, religion, sexual orientation, etc.). We do not profile you. We do not sell or share your data with advertisers.

Candidates and employers (recruitment)

If you send us a CV or register as a candidate, we hold your name, contact details, location, trade or profession, the cards and qualifications you tell us you hold, and your CV, for one purpose: to match you to roles and introduce you to employers with your agreement. We do not pass your details to an employer without telling you first. We keep candidate data for twelve months from your last contact with us, then delete it, unless you ask us to keep it longer or to remove it sooner. If you send us a brief as an employer, we hold the contact and role details you give us for as long as we are working on the role and for twelve months after, for our records. You can ask what we hold, ask for it to be corrected, or ask for it to be deleted at any time by emailing book@gridteamai.com. GridteamAI Recruitment operates under the Employment Agencies Act 1973 and the Conduct of Employment Agencies and Employment Businesses Regulations 2003.

How long we keep it

  • Subscriber email lists: while you are a subscriber, plus 12 months after you unsubscribe (for re-activation if you change your mind)
  • Customer order records: 6 years (UK record-retention rule for financial records)
  • Enquiry correspondence: 24 months
  • Site analytics: 12 months in aggregate, no individual identification retained
  • Newsletter unsubscribe lists: indefinitely (to honour your suppression preference)

Who we share it with

A short, named list:

  • Stripe — payment processing (PCI-DSS compliant, UK + EU + US data residency)
  • MailerLite — newsletter delivery and subscription management (EU data residency)
  • Substack — delivery of the free Weekly Grid Briefing (US data residency, processed under Standard Contractual Clauses)
  • HubSpot — customer relationship management (EU data residency)
  • Our hosting provider (Cloudflare / Vercel) — to serve the site
  • HMRC and our accountant — for UK tax compliance
  • Our professional advisors — only if a claim or dispute arises

We do not share your data with anyone else. We do not transfer your data outside the UK / EU / EEA without appropriate safeguards (Standard Contractual Clauses or UK adequacy decisions). We do not sell your data. Ever.

Your rights under UK GDPR

You have the right to:

  • Ask what data we hold about you (Subject Access Request)
  • Correct any data that's wrong
  • Ask us to delete your data (subject to legal retention obligations, e.g. HMRC)
  • Object to processing for direct marketing (we'll stop immediately)
  • Withdraw consent where consent is the lawful basis
  • Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk · 0303 123 1113)

To exercise any of these rights, email book@gridteamai.com. We will respond within one calendar month.

Cookies and tracking

This site uses minimal, privacy-preserving analytics. No cookies are set without your consent except for those strictly necessary to deliver the site (security, session, language preference). See our Cookie Policy for the full list.

Security

  • All data in transit is encrypted (TLS 1.2+)
  • All data at rest is encrypted on our hosting provider's infrastructure
  • Access to customer data is limited to the team members who need it for fulfilment
  • We review our security practices regularly

Changes to this policy

We update this page when our practices change. The "last updated" date at the top tells you when. Material changes will be notified to active subscribers by email.

Contact

For any privacy question or to exercise your rights:

Email: book@gridteamai.com

If you are not satisfied with our response, you can lodge a complaint with the UK Information Commissioner's Office: ico.org.uk · 0303 123 1113

gridteamai.com