Last updated 13 September 2026
Privacy notice
This notice explains how The AI Playbook uses personal data when you complete an assessment, make an enquiry or buy digital content.
Who is responsible
The AI Playbook is operated by Steven Esler, who is the data controller for information collected through this website. Privacy enquiries and data-rights requests can be sent to steve.esler@gmail.com.
What we collect and why
| Activity | Data | Purpose and UK GDPR basis |
|---|---|---|
| Readiness assessment | Company, work email, challenge and assessment answers | Generate and deliver the requested report; steps taken at your request before a possible contract. |
| Enquiry | Name, company, work email, optional phone, service interest and message | Respond and follow up; steps at your request and our legitimate interest in handling business enquiries. |
| Purchase | Contact, order and transaction records. Card details are handled by Stripe, not this website. | Fulfil the contract, provide support and retain records required by tax or accounting law. |
| Optional guidance | Email address and consent record | Send marketing only with your consent. You can withdraw it at any time. |
Assessment-to-enquiry prefill
After a successful assessment, this website temporarily saves your company, work email, challenge and readiness summary in your browser’s session storage. It does not copy the individual answers into the contact form. The saved details normally disappear when the browser session ends, and you can edit them before preparing an enquiry.
Who processes information
We use service providers only where needed to run the service: website hosting; Google Apps Script, Sheets and Drive for assessment processing and report delivery; Stripe for checkout and payment records; and Resend for transactional email once activated. These providers process information under their own security and data-protection terms. We do not sell personal data.
International transfers
Some providers may process data outside the UK. Where UK data-protection law requires it, we rely on recognised adequacy arrangements or approved contractual safeguards supplied by the provider.
How long we keep it
We keep personal data only for as long as needed for the purpose collected, to resolve support issues, and to meet legal, accounting or tax obligations. Enquiry and assessment records are reviewed periodically and deleted or anonymised when no longer required. Purchase records may need to be kept longer where the law requires.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or an objection to processing. Where processing relies on consent, you may withdraw it at any time. Email us to exercise a right. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
Security and changes
We use proportionate technical and organisational safeguards, minimise the details carried between forms, and keep payment-card entry on Stripe-hosted pages. No internet service can promise absolute security. We will update this notice when the service or its data use materially changes.