Privacy & cookies

Who we are

ILLIMITABLE AI LTD is responsible for the personal information described in this notice. Company number: 16715868. Registered in England and Wales. Registered office: 54 Jackson Avenue, Sawtry, Huntingdon, England, PE28 5BS.

For privacy questions or requests, email ashley@illimitableai.com or write to our registered office.

Information you provide

When you enquire, we receive your name, email address, optional business name, chosen service and message, together with subsequent correspondence. We use these details to answer questions, discuss suitable services and arrange consultations. Please do not send sensitive or confidential information through the form.

We rely on legitimate interests to respond to business enquiries, maintain relevant correspondence and protect our services against abuse. These interests are running our business, communicating with prospective customers and keeping the website secure. Where you ask us to take steps towards a contract with you personally, we rely on taking those steps at your request. We use legal obligation where we must keep particular records by law.

Providing enquiry details is voluntary, but we need a name, valid email address and enough information about your request to respond through the form. Sending an enquiry does not subscribe you to marketing. We do not sell your personal information or make solely automated decisions about you with legal or similarly significant effects.

Relevant business introductions

If we make a permitted business introduction, we may use your published business name, website, services and professional contact details from your own website to prepare a relevant concept or proposal. Our interest is offering a relevant business service. We assess the lawful basis and applicable electronic-marketing rules before contacting anyone; publication of an email address is not consent. Where consent is required, we need it before sending marketing. You can object or ask us not to contact you by replying or emailing Ashley. We retain a minimal suppression record to respect that request. You can ask which public source supplied your details.

Who receives information

Cloudflare hosts and protects this website. Cloudflare Turnstile checks form submissions for automated abuse and may process IP addresses, browser and device signals. Resend handles delivery of enquiry emails to our business mailbox. Namecheap Private Email provides that mailbox. People authorised to handle enquiries can access the relevant correspondence. We may disclose information where required by law or necessary to establish or defend legal claims.

The website does not store enquiries in an application database or deliberately write message contents to application logs. Hosting, security and email providers may keep their own operational records and message copies.

These providers operate internationally, including in the United States, so processing may occur outside the UK. Their terms describe applicable transfer safeguards, including adequacy arrangements and standard contractual clauses with UK provisions where applicable. For further information, see Cloudflare privacy information, the Turnstile privacy addendum, Resend's data processing terms and Namecheap's privacy policy. Contact us to request further details about transfers relevant to your enquiry.

Private proposals and website requirements

If you use a private proposal link, we also receive your design feedback, domain status, management preference and any branding or content links you submit. We use these to assess scope and prepare a quotation on the same bases described above. Acknowledgement emails confirm receipt only. Optional logo, image and document attachments are sent privately through Resend to our business mailbox with your requirements. Files are not published or placed at public download URLs. You may instead supply links (which we do not fetch) or email attachments separately. Only share materials you have permission to provide.

Anyone holding a proposal link can view it, so do not forward it unnecessarily. Cloudflare stores a submission fingerprint, reference, timestamps and email-delivery receipts for duplicate prevention for up to 12 months; it does not store the submitted requirements or file contents in this receipt store. Requirements and attachments are retained in our business email under the enquiry retention policy. Requirements are sent through Resend to our mailbox, and an acknowledgement is sent to your supplied email address. The proposal form stores only its request identifier and receipt reference in session storage, not your entered details. Infrastructure request logs may contain private proposal URLs. Contact us to revoke a link.

Private proposal measurement

For each private proposal we count successful page requests and their dates, separating likely automated scanners, known founder browsers and marked tests. This helps us assess whether a proposal was opened. We rely on legitimate interests in proportionate business follow-up for these basic server-side counts. The measurement store does not retain IP addresses, full browser details, referrers, form text or attachments. A bearer proposal link can still be associated with its intended business, and forwarding does not identify who visited. Cloudflare processes operational request information separately to deliver and secure the site.

Only if you choose Allow optional measurement do we set a random, signed cookie scoped to that proposal for 30 days. It lets us recognise a returning browser and estimate visible, recently active time; we collect no typed content or fingerprint. We rely on your consent for this optional processing and device storage/access. Declining has no effect on the proposal or onboarding. Choose No thanks / turn off in the proposal’s privacy control to withdraw, delete this browser’s optional records and exclude future basic counts from this browser. A simple preference cookie remembers that choice. Previously aggregated request counts cannot be traced back to remove one individual request.

Measurement records expire within 90 days; browser recognition expires after 30 days. Only Ashley’s password-protected owner dashboard can show the results; no prospect activity is published or emailed automatically. Owner authentication uses an 8-hour necessary session cookie and a 90-day founder-exclusion preference. You can object to legitimate-interest processing or exercise your rights by contacting ashley@illimitableai.com. These measures are not email pixels and do not track across proposals, websites or devices.

How long we keep information

For enquiries that do not lead to work, our policy is to delete or anonymise correspondence within 12 months of the last meaningful contact. We may retain relevant information longer if needed for a legal obligation, dispute or legal claim. If you become a client, we explain applicable project, contract and accounting retention separately. Provider logs and backups follow their own service retention schedules; deletion from our mailbox may not immediately remove backup copies.

Your rights and complaints

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal information. You can object to processing based on legitimate interests. These rights have conditions and exemptions. Contact Ashley using the details above; we may need to verify your identity.

If you are concerned about our handling of your information, please contact us. You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

Cookies, security and website requests

We do not use advertising trackers or email tracking pixels. Private proposals offer optional consent-based engagement measurement, described below. Fonts and images are hosted with the site. Cloudflare processes technical request information to deliver and protect the website. Security services may use necessary cookies or similar technology; Turnstile's processing is described in its linked privacy addendum. We do not use the contact form to make marketing profiles.

We use HTTPS, server-side validation, spam checks and rate limiting to protect enquiries. No internet service can guarantee absolute security. You can email Ashley directly if the security check prevents you from using the form.