Privacy Policy

01 Who we are

S8 Knowledge Integration Ltd is the data controller responsible for your personal data.

We are registered with the Information Commissioner's Office (ICO) as a data controller. Any questions about this policy or your personal data should be directed to the contact details above.

02 Data we collect

We collect personal data in the following circumstances:

Contact enquiries — when you email us directly, we collect your name, email address, phone number (if provided), and the content of your message.

Website analytics — we use Plausible Analytics, a privacy-friendly analytics service that does not use cookies and does not collect personal data. Plausible receives anonymised page-view data (pages visited, referrer, browser type, and approximate location derived from IP address). This data does not directly identify you.

Client engagements — if you become a client, we collect business contact information (name, job title, work email, organisation) necessary to deliver our services and manage our relationship with you.

Document data — our AI knowledge integration services may process documents and data you upload. This data is processed solely to deliver the agreed service and is not used for any other purpose, including AI model training.

03 How we use your data

• To respond to your enquiries and provide information about our services
• To deliver contracted services to you or your organisation
• To manage our client relationship and communicate about ongoing work
• To improve our website and understand how it is being used
• To comply with legal and regulatory obligations

We will never sell your personal data to third parties or use it for unsolicited marketing without your consent.

04 Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases:

• Legitimate interests — responding to enquiries and operating our website, where our interest in running a business does not override your rights.
• Contractual necessity — processing required to deliver services under a contract with you or your organisation.
• Legal obligation — where we are required to process data to comply with the law (e.g. financial record-keeping).
• Consent — where we have explicitly asked for and received your consent (e.g. if we introduce a newsletter).

05 Data processors & third-party sharing

We use a small number of trusted third-party services to operate our business. Where these services process personal data on our behalf, we have data processing agreements in place.

• Amazon Web Services (AWS) — our cloud infrastructure provider. All data processed by our systems is stored in AWS data centres located in the United Kingdom (eu-west-2 / London region). AWS acts as a data processor under our instruction. AWS is a signatory to the UK International Data Transfer Addendum.
• Plausible Analytics — privacy-friendly website analytics (no cookies, EU-hosted option). Plausible acts as a data processor under our instruction. See Plausible's data policy.
• Email — correspondence is handled via standard email. Please be aware that email is not an inherently secure communication channel.

We do not share your personal data with any other third parties except where required to do so by law.

06 How long we keep your data

• Contact enquiries — retained for up to 2 years, or until the relationship they relate to has concluded.
• Client data — retained for the duration of the engagement plus 7 years, in line with HMRC record-keeping requirements.
• Uploaded documents — retained for the duration of the contracted service. We will delete or return your data upon request or contract end, whichever is sooner.
• Analytics data — aggregated and anonymised; not subject to a fixed retention period.

07 Your rights

Under UK GDPR you have the following rights regarding your personal data:

To exercise any of these rights, contact us at ben@s8knowledge.co.uk. We will respond within one calendar month.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.

08 Cookies

Our website may use cookies — small text files stored on your device — to support site functionality and analytics. We use:

• Essential cookies — required for the site to function. No consent needed.
• Analytics — we use Plausible Analytics, which does not place tracking cookies. No cookie consent banner is required for this tool.

You can control or disable cookies via your browser settings. Disabling analytics cookies will not affect your ability to use the site.

09 Security

We take the security of your data seriously. Our systems are built on AWS infrastructure with encryption in transit (TLS) and at rest. Access to personal data is restricted to authorised personnel only.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

10 Changes to this policy

We may update this privacy policy from time to time. The "last updated" date at the top of this page will always reflect the most recent revision. For significant changes, we will make reasonable efforts to notify affected individuals directly.

This policy was last reviewed in June 2026.