Privacy & Cookie Policy

Last updated: January, 2026

1. Introduction

Welcome to AIMS Ready ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you visit our website aimsready.com (the "Site") or engage with our ISO 42001 consulting services.

For the purposes of the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR), the Data Controller is: AIMS Ready Email: john@aimsready.com Location: London, UK.

2. The Data We Collect

We collect and process the following categories of personal data:

A. Information You Provide to Us

When you fill out our "Book an AIMS Explainer Call" form or contact us via email, we collect:

‍Identity Data: Full Name.
‍Contact Data: Business Email address.
‍Business Data: Company Website URL and details provided in your "Mini Brief."

B. Information Collected Automatically

When you visit our Site, we use cookies and similar technologies (via Google Analytics 4 and Webflow) to collect:

‍Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
‍Usage Data: Information about how you use our website, such as time spent on pages, page views, and navigation paths.

3. How We Use Your Data

We will only use your personal data when the law allows us to. We use your data for the following purposes:

- To respond to inquiries and facilitate the booking of discovery calls.
- To deliver consulting services (Gap Analysis, Implementation, etc.).
- To analyse website performance (via Google Analytics).
- To deliver relevant advertising (via Google Ads/Retargeting).
- To manage our relationship with you (notifying you of changes to terms).
‍

‍4. Cookies and Tracking Technologies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our site.

We use the following types of cookies:

‍Strictly Necessary Cookies: These are required for the operation of our website (provided by Webflow). They include, for example, cookies that enable you to log into secure areas or use e-billing services.
‍Analytical/Performance Cookies (Google Analytics 4): These allow us to recognize and count the number of visitors and to see how visitors move around our website. This helps us improve the way our website works.
‍Note on GA4: We utilise IP Anonymisation where possible to protect user privacy.
‍Targeting/Advertising Cookies (Google Ads): These cookies record your visit to our website, the pages you have visited, and the links you have followed. We use this information to make our website and the advertising displayed on it more relevant to your interests.

Managing Cookies

You can choose to accept or reject non-essential cookies via our Cookie Consent Banner upon your first visit. You may also block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies.

5. Sharing Your Data

We do not sell your personal data. However, we may share your data with trusted third-party service providers ("Processors") who assist us in operating our business:

‍Webflow: For website hosting and form submission processing.Google (Alphabet Inc.): For website analytics (GA4) and advertising services.
Google Calendar: For scheduling calls.
‍‍ProfessionalProfessional Advisers: Lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.

6. International Data Transfers

As we use Webflow (hosted in the USA) and Google services, your personal data may be transferred to, and processed in, countries outside of the UK and the European Economic Area (EEA).To ensure your personal data receives an adequate level of protection, we rely on the following safeguards:

‍The UK-US Data Bridge / EU-US Data Privacy Framework: Webflow and Google are participants in the Data Privacy Framework, ensuring they adhere to European and UK data protection standards.
‍Standard Contractual Clauses (SCCs): Where applicable, we utilize SCCs approved by the European Commission and the UK Information Commissioner's Office (ICO).

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

‍Enquiry Data: Retained for 24 months after the last contact if no contract is signed.
‍Client Data: Retained for the duration of our relationship plus 6 years for tax and legal liability purposes.

8. Your Legal Rights

Under the GDPR, you have rights regarding your personal data, including:

‍Right of Access: Request a copy of the personal data we hold about you.
‍Right to Rectification: Request correction of inaccurate data.
‍Right to Erasure: Ask us to delete your data where there is no good reason for us to continue processing it.
‍Right to Object: Object to processing where we rely on a legitimate interest or for direct marketing.
‍Right to Withdraw Consent: Where we rely on consent (e.g., for Cookies), you may withdraw it at any time.

To exercise any of these rights, please contact us at john@aimsready.com.

9. Third-Party Links

This website may include links to third-party websites (e.g., LinkedIn, ISO accreditation bodies). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

10. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact: John Macleod, AIMS Ready Email: john@aimsready.com