Privacy Policy

Privacy Policy | AI Alchemist — aialchemist.store

Plain-English summary: We collect your name and email when you sign up for our free guide or buy our ebook. We use this to send you what you asked for plus occasional useful emails. We never sell your data. You can unsubscribe or ask us to delete your information any time. The full legal detail is below.

1. Who We Are

This privacy policy applies to AI Alchemist, operated by Kieron Penrose, trading as AI Alchemist.

Website: aialchemist.store
Email: hello@aialchemist.store
Based in: Cheltenham, United Kingdom

We are the data controller for the personal information collected through this website. This policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We only collect the data we genuinely need. Here is what we collect and when:

Data When collected Why
First name When you sign up for our free guide or email list To personalise emails sent to you
Email address When you sign up for our free guide or email list To deliver your download and send follow-up emails
Purchase details
(name, email, billing country)
When you buy a product through our checkout (SamCart) To process your order and issue any refunds
IP address & browser data Automatically when you visit our website For security, analytics, and to improve the site
Cookie data Automatically when you visit our website See Section 6 — Cookies

We do not collect sensitive personal data (such as health information, political opinions, or financial details beyond what is necessary to process a transaction).

3. How We Use Your Data

We use your personal data for the following purposes:

  • To deliver your free guide — sending the download link to your inbox after you sign up
  • To send you our email sequence — a series of practical AI tips and, where relevant, information about our paid products. You can unsubscribe from any email using the link at the bottom
  • To send occasional marketing emails — useful content related to AI for small business owners. We aim for quality over quantity. You control this with the unsubscribe link in every email
  • To process your purchase — if you buy our ebook or any other product, we use your details to fulfil the order
  • To improve our website — using anonymised analytics data to understand how visitors use our site and which content is most useful
  • To respond to your enquiries — if you contact us by email, we use the information you provide to reply

We will never: sell your personal data to third parties, share your email address with other marketers, or contact you about products or services unrelated to AI Alchemist.

5. Third Parties We Share Data With

We use a small number of trusted third-party services to operate our business. When your data is shared with these providers, it is used only as necessary to provide their service to us:

Service Purpose Data shared
Systeme.io Email marketing and marketing automation Name, email address
SamCart Payment processing and product delivery Name, email, billing details
WordPress / Hostinger Website hosting IP address, browser data (via server logs)
Google Analytics (if installed) Website analytics Anonymised usage data, IP address (anonymised)

All third-party providers we use are required to handle your data in accordance with applicable data protection law. We do not sell, rent, or trade your personal data with any third party for their own marketing purposes.

6. Cookies

Our website uses cookies — small text files stored on your device when you visit. Here is how we use them:

Essential Cookies

These are required for the website to function correctly (for example, remembering your session). You cannot disable these without affecting site functionality.

Analytics Cookies

We may use Google Analytics to understand how visitors use our site — which pages are most popular, where visitors come from, and how long they spend on the site. This data is anonymised and aggregated. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

Marketing Cookies

If you click on a link from a third-party platform (such as Facebook) to reach our site, that platform may set tracking cookies. We do not control these cookies. Please refer to the relevant platform’s privacy policy for details.

You can manage or delete cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing ones. Note that disabling certain cookies may affect how the website works.

7. How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purpose it was collected:

  • Email subscribers: We retain your name and email address for as long as you remain subscribed to our list. If you unsubscribe, your data is removed from our active mailing list within 30 days. You can request full deletion at any time.
  • Purchase records: We retain records of purchases for 7 years to comply with HMRC accounting requirements, even if you unsubscribe from our emails.
  • Website analytics: Anonymised analytics data is retained for up to 26 months, as per Google Analytics defaults.
  • Contact enquiries: Emails sent to us directly are retained for up to 2 years.

8. Your Rights Under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

👁️ Right to Access
Request a copy of the personal data we hold about you (a Subject Access Request).
✏️ Right to Rectification
Ask us to correct inaccurate or incomplete personal data about you.
🗑️ Right to Erasure
Ask us to delete your personal data (the “right to be forgotten”), subject to legal exceptions.
🔒 Right to Restrict
Ask us to restrict how we use your data in certain circumstances.
📤 Right to Portability
Receive your data in a structured, machine-readable format and transfer it to another provider.
⛔ Right to Object
Object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, contact us at hello@aialchemist.store. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

The simplest way to stop receiving marketing emails is to click the unsubscribe link at the bottom of any email we send. This takes effect immediately.

9. International Data Transfers

Some of our third-party service providers (including Systeme.io and SamCart) may store or process data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, including:

  • Transfers to countries with a UK adequacy decision (recognised as providing equivalent data protection)
  • Use of Standard Contractual Clauses approved by the ICO
  • Selecting providers that are certified under recognised frameworks

If you would like more information about the specific safeguards in place, please contact us at hello@aialchemist.store.

10. Children’s Privacy

Our website and services are directed at adults running small businesses. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us immediately at hello@aialchemist.store and we will delete that information promptly.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or the services we use. When we make changes, we will update the “Last updated” date at the top of this page.

For significant changes, we will notify active email subscribers with a clear summary of what has changed. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this privacy policy, how we handle your data, or wish to exercise any of your rights, please get in touch:

AI Alchemist
Operated by Kieron Penrose
Cheltenham, United Kingdom

Email: hello@aialchemist.store
Website: aialchemist.store

We aim to respond to all privacy-related enquiries within 5 working days and to all formal Subject Access Requests within 30 calendar days as required by UK GDPR.

This policy was last reviewed on 06 April 2026.