Privacy Policy

Data controller: Charis Insights Limited, trading as Charis AI.

Contact: If you have questions about this policy or your data, email us at privacy@charisinsights.co.uk.

We process your data under the following lawful bases (UK GDPR):

• Consent. When you submit the contact form or book a call, you consent to us processing that data for its stated purpose.
• Legitimate interest. To follow up on business enquiries, maintain records of professional interactions, and send our weekly email to business contacts.
• Contractual necessity. Where data processing is required to deliver services you have engaged us for.

We send a weekly email to people we know through business: people we've met at networking events or in meetings, people who've booked a call with us, and our clients, past and present. Nobody is added automatically. We review every address by hand before it goes on the list, and we only include business contacts, in their business capacity.

What we hold. Your email address, name and company, a category for your sector, how we know you, and a record of each email we've sent you: whether it was delivered, opened, clicked or bounced.

Why we can send it. We rely on legitimate interests, which here means keeping in touch with our business network by sending material we think is useful. We've weighed that interest against your rights and kept a written record of the assessment. Under the email marketing rules (the Privacy and Electronic Communications Regulations), email to business contacts at companies doesn't need prior consent, as long as you can opt out easily. Every one of our emails lets you do that.

Who sends it for us. Resend, an email delivery service based in the United States. To send each email, Resend holds a copy of the list, but only your email address and name. It keeps its delivery logs for about 30 days. Resend stores this data in the United States, and the transfer is covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, which is part of our data processing agreement with Resend.

Opens and clicks. Our emails record whether they were opened and which links were clicked. We use this to judge whether the email is useful. Open tracking is unreliable, so we only ever look at opens in total, across the whole list. Resend tells us about each delivery, open, click and bounce as it happens, and those notices wait on Netlify, our website host, in the United States, for up to 30 days until we collect them. A click notice includes your IP address, which we shorten before it's stored, and your browser type. We use these only to tell automated link scanners from people, and we delete the shortened IP after 90 days.

How long we keep it. You stay on the list until you unsubscribe or ask us to take you off. After that we keep your email address on a do-not-send list, so that you're never added back by mistake. You can ask us to delete everything else we hold about you at any time.

How to stop it. Every email has an unsubscribe link at the bottom, and one click takes you off the list. You can also reply to any of our emails and ask, or write to privacy@charisinsights.co.uk, and we'll remove you by hand. This is your right to object, and you don't need to give a reason.