Privacy Policy
Last updated: 21 July 2026
Estara AI Ltd ("Estara", "we", "us") is a UK consultancy providing AI consulting, workflow automation and custom software development. This policy explains how we handle personal data when you use estaraai.com, contact us, or work with us as a client. We act as a data controller for the information described below.
Information we collect
- Enquiries and calls — your name, email address, company and anything you include in a message or discuss on a call. Calls booked through Calendly are handled under Calendly's own privacy policy.
- Client relationships — contact details, correspondence, project documentation, invoicing details and records of the work we deliver.
- Client portal accounts — email address, name, company, plan details and activity needed to operate your account (log-ins, project updates, support messages).
- Website — the website itself does not use analytics or advertising trackers. Standard server logs (such as IP addresses) may be processed by our hosting provider to deliver and secure the site.
How and why we use it
- To respond to enquiries and provide our services (performance of a contract, or steps taken at your request before entering one).
- To administer accounts, invoices and business records (legitimate interests and legal obligations).
- To keep our systems and clients' systems secure (legitimate interests).
- To send service-related communications about work in progress or your account.
We do not sell personal data, and we do not send marketing emails without a lawful basis to do so.
Client project data
Delivering automation and software often involves accessing data held in a client's systems. Where that includes personal data, we typically act as a processor on the client's behalf: we access only what the engagement requires, use it solely to deliver the agreed work, and delete or return it when the engagement ends unless agreed otherwise.
Who we share data with
We use a small number of service providers to run our business — for example hosting and infrastructure (such as Render and Supabase), email and productivity tools (Google Workspace), scheduling (Calendly) and, where a project requires it and the client agrees, AI model providers (such as OpenAI or Anthropic). Providers only receive what they need to perform their service. A current list of subprocessors relevant to your engagement is available on request.
International transfers
Some providers process data outside the UK. Where that happens, transfers rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.
Retention
We keep personal data only as long as needed for the purposes above — typically for the life of the client relationship plus the period required for legal, accounting and insurance purposes. Enquiry data that doesn't lead to an engagement is deleted within a reasonable period.
Your rights
Under UK data protection law you can ask us to access, correct, delete, restrict or port your personal data, and you can object to certain processing. To exercise any right, email jamesgould@estaraai.com. You can also complain to the Information Commissioner's Office (ico.org.uk).
Contact
Estara AI Ltd, Suite 1-192, 39 Ludgate Hill, London, EC4M 7JN · jamesgould@estaraai.com