Privacy policy

This site is run by Greer & Taylor Media LTD. This page says what personal data the site collects, why it is collected, who else sees it, and what you can do about it.

It is written in plain English by the person who runs the site. It is a description of what actually happens here — it is not legal advice, and it is not a template someone else's lawyer wrote.

Who is responsible

The data controller is Greer & Taylor Media LTD, trading as No Hype AI Expert. Company number 17261029, registered in England and Wales at 20-22 Wenlock Road, London N1 7GU.

For anything on this page — a question, a correction, or any of the rights below — email [email protected].

What is collected

Three things, and nothing else.

1. What you type into the email sign-up. Your email address and your first name. That is everything the form asks for, and both are used only for the emails described below — the first name so they are not addressed to nobody. If a question about what you are building is added later, this page will say so before it appears, and answering it would be optional and never a condition of getting the free resource.

2. What the host records to serve the page. This site is hosted on Cloudflare Pages. Cloudflare logs ordinary request data — IP address, browser user agent, the page requested, the time — to deliver the site and to defend it from abuse, and it may set strictly necessary security cookies such as __cf_bm and cf_clearance. Those cookies filter bots and attacks. They do not track you across sites and they are not used for advertising.

3. What Kit's servers see if you load the sign-up form. The form itself is served by Kit rather than by this site, so choosing to load it makes a request to Kit — and Kit sees the ordinary contents of that request: your IP address, your browser user agent, and which page you loaded the form on. This happens only after you accept, and the next section but one says exactly what it stores.

What is not collected: there is no analytics on this site, no tag manager, no advertising or tracking pixel, and no third-party script anywhere except the sign-up form, which does not load until you ask for it. No account, no comments, no uploads. Nothing here is sold, rented or shared for anyone's marketing, including mine.

Why, and the lawful basis

• The email list — consent (UK GDPR Article 6(1)(a)), confirmed by double opt-in: after you sign up you get one email asking you to confirm, and nothing else is sent unless you click it. Marketing email is also governed by PECR, and consent is the basis there too. You can withdraw it at any time using the unsubscribe link in every email, or by emailing the address above. Withdrawing is as easy as giving it, and it does not affect anything sent before.
• Hosting logs and security cookies — legitimate interests (Article 6(1)(f)): keeping the site available and defending it from attack. These cookies are strictly necessary to deliver the page you asked for, so they are not something you get a choice about — but they are also not used for advertising and they do not follow you off this site.
• Loading the sign-up form — consent (PECR regulation 6, and Article 6(1)(a) for what Kit does with the request): loading the form stores an identifier on your device. Nothing about reading this site requires that, so it does not happen unless you ask for it, and declining is one click and costs you nothing. The next section says what it stores and how to undo it.

What it is used for

Sending you the resource packs, cheat sheets and sample code that go with the lessons, a note when the first lesson lands, and no more than one email a month after that, with links to new lessons and resources. That is the entire list. The optional answer is used only to decide which lessons are worth sending you — it is not combined with anything bought from a data broker, and there is no advertising profile and no automated decision-making that has any legal or similarly significant effect on you.

Cookies and similar storage

Four things, on one page, and two of them only if you say so.

The last two rows do not exist until you ask for them. The sign-up form on the front page is served by Kit, not by this site, so the page does not load it on your behalf: it says what loading it would do, and waits. That is the whole of it — the sign-up block is on the front page only, and this page, the two confirmation pages and the not-found page load nothing from anywhere but this site.

If you decline, no request is made to Kit at all: no script, no identifier, no cookie on their host. You are not shut out of the list for it either — the same block links to Kit's own sign-up page at no-hype-ai-expert.kit.com, where going to Kit is a thing you are choosing to do. The lessons are free and public regardless.

Changing your mind is a button, not an instruction to go and clean out your browser, and it is in the same place the question was asked. Accept, and the form loads. Once it has, that block offers to unload it again, which deletes ckid and forgets your answer, so the next visit asks afresh. One thing it cannot delete is the __cf_bm cookie on .kit.com: that belongs to Kit's domain, not this one, and no code on this site can reach it. It expires by itself, and your browser's own settings will clear it sooner.

There is no banner across the top of the site. There is one thing here that needs consent, and the question is asked where that thing is, before it runs — which is what consent has to mean to be worth anything.

Who else handles it

Two processors, both acting on written instructions:

• Kit (kit.com) — the email platform. It stores your name, email address and the optional answer, and sends the email. It also serves the sign-up form itself to browsers that accept it, and sees an IP address, a user agent and the page the form was loaded on when it does. US company.
• Cloudflare — hosting and CDN for this site. US company, serving from edge locations including the UK.

There is no payment processor, no course platform, no community platform and no CRM, because nothing on this site is paid for yet. When a paid product exists, this page will name whoever handles the money before the first sale, not after it.

Data leaving the UK

Both processors are US-headquartered, so your data may be processed outside the United Kingdom. Those transfers rely on each provider's data processing agreement, which incorporates the UK International Data Transfer Addendum to the European Commission's Standard Contractual Clauses. If a provider ever stops offering that safeguard, the sensible move is to change provider, and this page will say so.

How long it is kept

• Mailing list: until you unsubscribe or ask for deletion. After you unsubscribe your record comes off the active list; your email address alone stays on a suppression list so you cannot be added again by accident. Ask, and that goes too.
• Hosting logs: held by Cloudflare under Cloudflare's own retention periods. No separate copy of the server logs is kept, and they are not exported, analysed or joined to the mailing list.

Your rights

Under UK GDPR you have the right to:

• ask what is held about you and get a copy (access);
• have anything wrong corrected (rectification);
• have it deleted (erasure);
• have its use paused while something is disputed (restriction);
• get it in a portable, machine-readable form, or sent to someone else (portability);
• object to it being used — including, always and absolutely, for direct marketing;
• withdraw consent at any time — for the emails, using the unsubscribe link at the foot of every one of them; and for the sign-up form's script, using the unload it button in the sign-up block on the front page, which also deletes the identifier Kit stored.

To use any of them, email [email protected]. It costs nothing and you get an answer within one month. If it is not obvious that the request comes from you, you may be asked to confirm it — usually just by replying from the address the data is held under.

Complaining

If you think your data has been handled badly, tell me and it gets fixed. You also have the right to complain directly to the UK regulator, and you do not have to contact me first:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
ico.org.uk/make-a-complaint · 0303 123 1113

Elsewhere on the internet

This site links out to YouTube, LinkedIn, X, Instagram and TikTok. Those platforms are data controllers in their own right, and what they collect when you visit them is governed by their own policies, not this one. This policy covers this website and the email list.

Keeping it safe

Contact data lives in the Kit account described above rather than on a laptop or in a spreadsheet, and access to it is limited to the one person who runs this business. No method of storage is perfect; if a breach ever put people at risk, the ICO gets told within 72 hours and so do you.

Changes to this policy

The date at the top is the version. Small corrections get made in place. If anything material changes about how the email data is used — a new processor, a new purpose — the change is described here first, and anyone on the list is told by email.