Privacy Policy

Telos Advisory (“we”, “us”, “our”) provides AI advisory and implementation services to customers in the United Kingdom. We are the data controller for the personal data described in this policy. For any privacy question or request, contact us at hello@telosadvisory.co.uk.

We collect only what we need to provide and support our services:

• Account data — your name, email address, a securely hashed password and the User ID we generate for you.
• Order data — the products you buy, the amount charged, the date, and a payment reference. We never see or store your full card number.
• Support data — the messages you send our support assistant or our team, and the records we look up to answer a billing query.
• Intake data — the answers you give in a product intake form so we can produce your report or build your AI team.
• Technical data — basic, security-related server logs (such as IP address and request times) needed to run the site safely.

Under UK GDPR we rely on the following bases:

• Performance of a contract — to create your account, take payment, and deliver and support the product you bought.
• Legitimate interests — to keep the site secure, prevent fraud and abusive refund claims, and improve our services, balanced against your rights.
• Legal obligation — to keep transaction and tax records for the period the law requires.
• Consent — for any optional analytics cookies, which never run until you opt in, and which you can withdraw at any time.

We share data only with the providers that help us run the service, each acting under contract on our instructions:

• Stripe — to process card payments securely.
• Supabase — to host our database (London region).
• Resend — to send transactional email such as receipts.
• Vercel — to host and serve the website.
• Groq — to power the support assistant that answers your messages.
• Slack — to notify our team of a new order so we can fulfil it.

We do not sell your personal data, and we do not use it to train public AI models.

Some of these providers process data outside the United Kingdom. Where they do, we rely on appropriate safeguards — such as UK adequacy regulations or the International Data Transfer Agreement — so your data keeps an equivalent level of protection.

We keep account and order data for as long as your account is active and then for as long as we must for legal and accounting reasons (for example, tax records are kept for six years). Support conversations are kept only as long as needed to resolve your query and meet those obligations, after which they are deleted or anonymised.

Passwords are stored only as a salted scrypt hash — never in plain text. Data is encrypted in transit using HTTPS/TLS. Card details are handled entirely by Stripe and never touch our servers. Access to customer data is limited to what is needed to run the service.

Under UK GDPR you have the right to access a copy of your data, to have it corrected, to have it deleted, to restrict or object to how we use it, and to data portability.

To make any of these requests — including deleting your account or correcting your details — email hello@telosadvisory.co.uk from the address on your account, or include your User ID. We will respond within one month. We may need to keep a minimal record of a transaction where the law requires it, and we will explain if so. You can also delete most of your details yourself from your account dashboard.

We use only strictly necessary cookies by default and ask for opt-in consent before setting any analytics cookie. You can change your choice at any time using the Cookie settings link in the footer. Full detail is in our Cookie Policy.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

If we make a material change, we will update the date at the top of this page and, where appropriate, tell you directly.