Last updated: 12 October 2026
1. Who we are
This website, genai4biz.com (“we,” “us,” “our”), is operated by Andrew Smith, trading as Generative AI for Business, a sole trader with a registered address at:
C. La Cruz, 108 38620 San Miguel de Abona Santa Cruz de Tenerife Spain
If you have any questions about this policy or how we handle your data, contact us at hello@genai4biz.com.
2. What data we collect
We collect the following categories of personal data:
- Website analytics. When you visit this site and consent to analytics cookies, we use Google Analytics 4 to collect information about how you use the site – pages viewed, time spent, device and browser type, approximate location (country/city level), and referral source. This is pseudonymised, aggregated usage data, not directly linked to your name unless you separately identify yourself to us.
- Contact form data. If you fill in the contact form on this site, we collect your name and email address, any other details you choose to enter in the form (such as a message), and your tick of the box next to the statement “I agree to receive email communications from genai4biz.com. I can unsubscribe at any time using the link in any email.” We store that statement with your submission, together with the date and time you submitted the form.
- Technical details recorded with each form submission. When you submit the form, our form software also records your IP address, your browser and device type, the page you submitted the form from, and the date and time of the submission.
- Spam protection on the contact form. The contact page uses Cloudflare Turnstile, a service that checks whether a form is being filled in by a person or by an automated program. When the contact page opens, Turnstile runs in your browser and sends signals to Cloudflare, such as your IP address, a technical fingerprint of how your browser makes secure connections (TLS fingerprint), your browser and device details (user agent), and the identifier of our Turnstile widget. Turnstile loads when the contact page opens, before and regardless of any choice you make in the cookie banner. When we tested it, Turnstile set no cookie, and it stored one item in your browser’s local storage under Cloudflare’s own address (challenges.cloudflare.com). Cloudflare acts as our processor when it uses these signals to detect and block bots, and as an independent controller for the signals it uses to improve Turnstile’s bot detection. Cloudflare explains how it handles personal data in its own privacy policy, at:
https://www.cloudflare.com/privacypolicy
- Server logs. Our web host records standard server logs of requests made to this website. These typically include your IP address, the date and time, the page requested, and your browser and device type. We keep archived server logs for 30 days, after which they are deleted automatically. We use them to investigate spam and attacks and to keep the website secure.
- How the form data is handled. The form is run by two software plugins, Fluent Forms and FluentCRM, which operate on our own website hosting. FluentCRM keeps a contact record containing your name, your email address, the list and tag we assign to you, and your subscription status. Each submission also sends a notification email containing your name and email address to our hello@genai4biz.com mailbox, and a copy of that email is forwarded to a Gmail account that we check regularly.
- Emails we may send you. We will reply to your enquiry. We may also email you about our services later, for example follow-ups, offers or a newsletter. Every such email will include an unsubscribe link.
We do not collect any special category data (health, religion, political opinions, etc.) and we do not knowingly collect data from children (see Section 8).
3. Cookies
We use cookies and similar technologies for analytics, which depend on your consent, and a small number of strictly necessary items that do not: to remember your cookie choice, to protect the contact form with Cloudflare Turnstile, and for WordPress itself. Full detail on what cookies are used, their purpose, and how to manage your choices is in our separate Cookie Policy.
No analytics or tracking cookies are set until you actively consent via the cookie banner. You can withdraw or change your consent at any time through the cookie preferences link on the site.
4. Legal basis for processing
We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):
- Consent (Article 6(1)(a)) – for analytics cookies, and for emails about our services beyond replying to your enquiry (follow-ups, offers and newsletters). You give this consent through the tick box on the contact form, and we keep a record of it with the date and time.
- Legitimate interests (Article 6(1)(f)) – for replying to enquiries you send us via the contact form, where doing so is a reasonable and expected part of you contacting us, and for keeping a record of form submissions, including technical details such as your IP address, so that we can deal with spam and abuse. We also rely on legitimate interests to protect the contact form with Cloudflare Turnstile and to keep server logs for 30 days, so that we can keep the website secure and investigate spam and attacks.
5. International data transfers
Google Analytics 4 is provided by Google Ireland Limited and Google LLC (United States). Where your data is transferred outside the European Economic Area (EEA) as part of this service, Google relies on the EU-U.S. Data Privacy Framework as its legal basis for that transfer. You can read more about this framework directly on the European Commission’s website.
This website, including the data collected through the contact form and the server logs, is hosted by HostGator. HostGator’s servers may be located outside the EEA, including in the United States.
The copy of each notification email that is forwarded to a Gmail account is handled by Google. As with Google Analytics 4, where that data is transferred outside the EEA, Google relies on the EU-U.S. Data Privacy Framework.
Cloudflare, which provides Turnstile, is a United States company. Cloudflare states that it relies on its certification under the EU-U.S. Data Privacy Framework for transfers of EEA data to the United States, with standard contractual clauses as a fallback.
6. How long we keep your data
- Google Analytics event data (individual interactions with the site) is retained for 2 months before automatic deletion.
- Google Analytics user-level data (data tied to a given visitor across sessions) is retained for 14 months before automatic deletion.
- Contact form submissions, the contact record we hold in our contact list, and the emails we hold from you are kept until you ask us to delete them.
- Server logs, which include IP addresses, are kept for 30 days and then deleted automatically.
- Data that Cloudflare handles through Turnstile is kept by Cloudflare under its own retention practices, described in its privacy policy linked in Section 2. We do not store Turnstile signals ourselves.
7. Your rights under GDPR
If you are located in the EEA or UK, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data (“right to be forgotten”).
- Restrict or object to our processing of your data.
- Request a portable copy of your data.
- Withdraw consent at any time, without affecting processing carried out before withdrawal.
- Lodge a complaint with your national data protection supervisory authority. For this site, that is the Agencia Espanola de Proteccion de Datos (AEPD), Spain’s data protection authority.
To exercise any of these rights, contact us at hello@genai4biz.com. You can also withdraw your consent to our emails at any time by using the unsubscribe link in any email we send you.
If you ask us to delete your data, we will delete your contact record, your contact form submission, and the emails we hold from you, including the forwarded copies.
8. Children’s privacy
This site is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
9. California residents (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To exercise these rights, contact us at hello@genai4biz.com.
10. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. Continued use of the site after changes take effect constitutes acceptance of the revised policy.
11. Contact us
Questions about this policy or your data: hello@genai4biz.com