Last updated: 7 September 2026
Who is the data controller?
Anwar Nouray, trading as ChooseMyAI is the data controller for personal data handled directly through ChooseMyAI.tech. Contact Hermmesai@gmail.com. A postal address will be supplied following a valid request where legally required. ChooseMyAI is a trading name, not a separate registered company.
Personal data we may handle
- Analytics data after consent: pages visited, approximate location, referring page, interactions, device, operating system, browser and similar identifiers generated by Google Analytics 4.
- Technical and security logs: IP address, request time, requested URL, response status, browser information and security events recorded by the web server, network or hosting provider.
- Correspondence: your name, email address, organisation, message, attachments and any follow-up if you contact us.
- Rights and complaint records: information needed to verify, investigate and respond to a privacy, rights, correction or legal request.
We do not intend to collect special-category data, criminal-offence data, children’s data or confidential material. Please do not send such information unless it is necessary and a suitable method has been agreed.
How we obtain data
Data comes directly from you when you email us, automatically from your browser and the hosting infrastructure, and from Google Analytics only after you accept analytics. We may receive limited information from a representative, regulator, rights holder, product provider or public source where needed to handle a complaint or verify an editorial matter.
Purposes and lawful basis
| Purpose | Data | Lawful basis |
|---|---|---|
| Consent-controlled audience measurement | Analytics data | Consent. You can withdraw consent through Analytics settings. |
| Operate, secure and diagnose the website | Technical and security logs | Legitimate interests in providing a secure and reliable publication. |
| Answer messages, corrections and requests | Correspondence | Legitimate interests, steps requested before a possible contract, or legal obligation depending on the message. |
| Establish, exercise or defend legal rights | Correspondence, complaint and log data | Legitimate interests and legal obligation where applicable. |
| Comply with regulators and law enforcement | Relevant records | Legal obligation or legitimate interests, subject to lawful process. |
Your right to object: You may object to processing based on legitimate interests. We will stop unless there are compelling legitimate grounds or the processing is needed for legal claims.
Google Analytics 4
ChooseMyAI uses direct Google Analytics 4 with Measurement ID G-VBTG6PL85N to produce aggregated usage statistics and understand use of the site. Analytics storage is denied by default, advertising storage and advertising personalisation remain denied, automatic page views are disabled, and an analytics page view is sent only after you select “Accept analytics”. Google Tag Manager is not used.
Google acts as a service provider for analytics and may process device, network and usage data on systems outside the United Kingdom. Google prohibits customers from sending personally identifiable information to Google Analytics. See Google’s privacy policy and Google Analytics data safeguards.
Who receives personal data?
Personal data may be handled by our hosting and infrastructure providers, Google for consented analytics, email providers for correspondence, professional advisers, and public authorities where disclosure is legally required. We do not sell personal data. We do not share it for third-party behavioural advertising.
International transfers
Google, email and infrastructure providers may process data outside the United Kingdom. Where UK data-protection law requires safeguards, we rely on the provider’s applicable UK adequacy arrangements, UK International Data Transfer Agreement, UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism. Contact us for available information about the relevant safeguard.
Retention
- Analytics information is retained according to the configured Google Analytics retention controls and then deleted or aggregated by Google. Aggregate reports may remain because they no longer identify an individual in ordinary use.
- Routine hosting and security logs are retained under operational security schedules and longer only where reasonably needed to investigate abuse, protect the service or meet a legal duty.
- Ordinary correspondence is normally reviewed for deletion 24 months after the last meaningful contact.
- Complaint, rights and legal records may be kept for up to six years after closure, or longer where a legal dispute, regulatory duty or limitation period requires it.
We may delete data earlier when it is no longer needed. Retention depends on purpose, sensitivity, risk, legal duties and whether records are needed for legal claims.
Your data-protection rights
Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, objection and data portability. Where processing relies on consent, you may withdraw consent at any time without affecting earlier lawful processing. Some rights are limited by exemptions and the lawful basis used.
Email Hermmesai@gmail.com with enough information to identify the request. We may need proportionate proof of identity. You also have the right to complain to the Information Commissioner’s Office, whose current contact and complaint details are available at ico.org.uk/make-a-complaint.
Data-protection complaints may be raised by email to Hermmesai@gmail.com. We will acknowledge receipt within 30 days, investigate, and respond with an outcome without undue delay.
Automated decisions and children
We do not currently make decisions producing legal or similarly significant effects by solely automated means. The website is directed to adults and business users, not children. If we learn that unnecessary children’s data has been received, we will take reasonable steps to delete it.
Security
We use proportionate technical and organisational measures intended to protect personal data, but no internet transmission or storage method can be guaranteed completely secure. Please do not send passwords, payment-card details or highly sensitive information by ordinary email.
Changes to this policy
We will update this notice when data practices change, including before enabling forms, newsletters, accounts, payments, personalised tools, advertising or affiliate tracking. Material changes will be shown by the updated date.