Privacy notice
Last updated: October 2026
Who we are
Toffee AI Ltd (company number 17054604, registered office 1 Kingsbridge Road, Bishop's Stortford, CM23 2AD) is the controller of personal information described in this notice. Contact us about privacy at hello@toffeeai.uk.
What we collect
- Your name, email address, business name and anything else you tell us when you get in touch or book a call.
- Records of our correspondence and the work we do for you.
- Basic technical information our web host records when you visit this site, such as IP address and pages visited, kept for security.
This website does not use advertising or tracking cookies.
Why we use it
- To reply to your enquiry and arrange calls. Our lawful basis is our legitimate interest in responding to people who contact us, or taking steps at your request before entering a contract.
- To deliver work we've agreed with you. Our lawful basis is performance of a contract.
- To keep business and tax records. Our lawful basis is legal obligation.
Client data in your systems
When we set up workflows in your accounts, we may see personal information you hold. In that case we act as your processor, under a written data processing agreement, and only on your instructions.
Who we share it with
We use trusted suppliers to run the business, including email and cloud storage (Google Workspace), accounting software and our web host. They process data on our behalf under contract. We don't sell personal information.
How long we keep it
Enquiries that don't lead to work are deleted after 12 months. Client and financial records are kept for six years after the end of the relevant financial year, as required for tax purposes.
Your rights
You can ask for a copy of your information, and ask us to correct or delete it, restrict or object to how we use it, or transfer it. Email hello@toffeeai.uk. If you're unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk.