Privacy Policy

Last updated: 20/03/2026

‍1. Who we are

Diversit provides data and artificial intelligence consultancy services.

‍

Controller details

Diversit

Registered office: 182-184 High Street North, East Ham, London, E6 2JA

Email: info@diversit.io

‍

For the purposes of applicable data protection law, including the GDPR and, where relevant, the UK GDPR, Diversit is the data controller of the personal data described in this Privacy Policy.

2. Scope of this policy

This Privacy Policy explains how we collect, use, store and share personal data when you:
‍

  • visit our website;
  • contact us through our website forms;
  • send us files or information through our website;
  • communicate with us about our services; or
  • sign up for marketing communications, where that option is made available.

This policy does not replace project-specific terms, statements of work, data processing agreements or other client documents that may apply once we begin working together.

3. The personal data we collect

Depending on how you interact with us, we may collect:
‍

Information you provide directly

  • name;
  • work email address;
  • phone number;
  • company name;
  • message or enquiry content;
  • files or attachments you upload through our website;
  • any other information you choose to provide.

Information collected automatically

  • IP address;
  • browser type and version;
  • device information;
  • pages viewed and website usage data;
  • cookie and similar technology data;
  • analytics data collected through tools such as Google Analytics, where enabled with your consent.

Business and relationship data

  • records of our communications with you;
  • details about your organisation’s interest in our services;
  • proposal, onboarding, billing or contract-related details collected after the initial website enquiry stage.

Important: please do not send sensitive personal data, special category data, confidential client material, trade secrets or regulated data through the website contact form or file upload function unless we have specifically asked you to do so and appropriate safeguards are in place.

4. How we use your personal data

We may use your personal data to:

  • respond to your enquiries;
  • assess whether our services may be relevant to your organisation;
  • arrange introductory calls or meetings;
  • review files or materials you submit in connection with an enquiry;
  • operate, secure and improve our website;
  • understand website usage and performance;
  • send marketing communications where you have opted in;
  • maintain records, comply with legal obligations and protect our rights.

5. Our legal bases

We rely on one or more of the following legal bases, depending on the context:

Legitimate interests
We process business contact and enquiry data where necessary for our legitimate interests in operating and growing our consultancy, responding to inbound enquiries, securing our website, preventing misuse, and improving our services, provided those interests are not overridden by your rights.

Steps prior to entering into a contract
Where you are an individual, sole trader or freelancer and ask us to discuss a possible engagement, we may process your personal data to take steps at your request before entering into a contract.

6. Consent

‍We rely on consent for:

  • non-essential cookies and analytics technologies; and
  • email newsletters or other marketing communications where required.

You can withdraw consent at any time. Withdrawal does not affect processing carried out before withdrawal.

Legal obligation
We may process personal data where required to comply with legal, tax, accounting, regulatory or law enforcement obligations.

7. If you give us information about someone else

If you provide personal data relating to another person, you must make sure you are authorised to do so and that the individual understands how their information will be used.

8. Marketing communications

If we offer a newsletter or similar updates, we will send those communications only in accordance with applicable law. Where consent is required, we will ask for it clearly and separately. We intend to use a double opt-in process for mailing list subscriptions.

You can unsubscribe at any time using the unsubscribe link in the email or by contacting us at info@diversit.io.

If you unsubscribe, we will remove you from active marketing lists and may keep a minimal record of your opt-out so that we can respect your preference.

9. Cookies and similar technologies

We use cookies and similar technologies on our website. Some are strictly necessary for the website to function. Others, including analytics cookies, are used only if you choose to accept them.

Please read our Cookie Policy for more detail, including the categories of cookies we use, how long they last, and how you can manage your preferences.

‍

10. Sharing your personal data

We may share personal data with trusted service providers and professional advisers where necessary for the purposes described in this policy, including providers that help us host, secure, analyse and operate our website and communications.

These may include, as applicable:
‍

  • Webflow for website hosting and form delivery;
  • Google for analytics and related website services, where enabled;
  • Mailchimp for newsletter and marketing communications, if and when launched;
  • IT, hosting, security and support providers;
  • legal, compliance, accounting and professional advisers;
  • regulators, courts, law enforcement or other public authorities where required.

We do not sell your personal data.

11. International transfers

Some of our service providers may process personal data outside the UK or the EEA.

Where we transfer personal data internationally, we take appropriate steps to protect it. Depending on the destination and provider, this may include:

  • transfers to countries recognised as providing an adequate level of protection;
  • transfers to organisations participating in an approved adequacy framework, where applicable; or
  • contractual safeguards such as standard contractual clauses and related supplementary measures.

12. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described above.

Our current retention approach is:
‍

  • general enquiries that do not become clients: up to 12 months after last meaningful contact;
  • analytics data: up to 12 months, subject to your cookie choices and tool settings;
  • marketing subscription data: until you unsubscribe or we stop running the relevant mailing list, with a minimal opt-out record retained where needed to respect your preferences;
  • client and prospect records: for as long as needed for the relevant business, contractual, legal, tax or regulatory purpose.

We may retain information for longer where necessary to establish, exercise or defend legal claims.

13. Your rights

Subject to applicable law, you have the right to:
‍

  • access your personal data;
  • correct inaccurate or incomplete personal data;
  • request deletion of your personal data;
  • restrict certain processing;
  • object to processing based on legitimate interests;
  • object to direct marketing;
  • receive personal data in a portable format in some circumstances;
  • withdraw consent where processing is based on consent.

To exercise your rights, contact us at info@diversit.io.

14. Complaints

If you have concerns about how we handle your personal data, we would appreciate the opportunity to address them first.

You also have the right to lodge a complaint with a supervisory authority. If you are located in the UK or an EEA country, you may have the right to contact the relevant local regulator.

15. Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no internet transmission or storage system can be guaranteed to be completely secure.

16. Children

Our website and services are aimed at adults, businesses and professional users. We do not intentionally target children. If you believe a child has provided personal data to us inappropriately, please contact us and we will review the matter.

17. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date.