Legal
Privacy & cookies
This policy explains what personal information we collect when you use ai-shopassistant.com, why we collect it, and the choices and rights you have.
Last updated: 18 August 2026
Who we are
AI Shop Assistant is a service provided by Alloy Tech Labs Ltd. (“we”, “us”, “our”). We are the data controller for the personal information described in this policy.
Alloy Tech Labs Ltd. is registered in England and Wales under company number 16622946. Our registered office is 3 Bourke Close, London, SW4 8ER.
We are registered with the UK Information Commissioner’s Office (ICO) under reference ZC052939.
If you have any questions about this policy or how we handle your information, contact us at dan@ai-shopassistant.com.
Information we collect
We only collect information you give us or that is generated as you use the site. We do not buy personal data, and we do not combine what we collect here with data from other sources.
- Demo requests — when you submit the demo form we collect the email address you enter and, if you choose to provide it, your website address. Those are the only two fields the form asks for.
- Assistant conversations — when you use the AI Shop Assistant on this site, we store what you type and the answers it gives so the conversation can continue, be reviewed and be turned into service insights. We also generate random user and conversation identifiers and record basic device and browser information; these identifiers do not contain your name or email address.
- Assistant demo requests — if you ask for a demo or quote inside the assistant and submit its contact form, we collect your email address and, if you provide it, your website address. These are sent to the same demo-request system as the form on the page.
- Campaign and referral data — so we can understand which marketing brought a visitor to us, we record the campaign parameters in the link you arrived through (for example utm_source, utm_medium and utm_campaign, and Google’s gclid click identifier), the first page you landed on, and the website that referred you where your browser provides it. This is held only in your browser’s memory for the length of your visit — nothing is written to your device — and is sent to us only if you submit the demo form.
- Usage data — like most websites we use analytics to understand how the site is used: pages viewed, approximate location derived from your IP address, device and browser type, and how you reached the site. We use two privacy-first tools for this — Cloudflare Web Analytics and Plausible Analytics. Both are cookieless: they set no cookies, store nothing on your device and do not identify you, so they run for every visit and require no consent. See “Cookies and similar technologies” below.
How and why we use your information
We use the information above to:
- respond to your demo request, build a demo on your catalogue, and talk to you about it;
- provide the website assistant, preserve the conversation while you use it, and review conversations to improve its answers and understand what prospective clients need;
- measure and improve our marketing and understand how the site performs; and
- keep the site secure and working properly.
Our legal bases (under the UK GDPR and, for visitors in the EU and Ireland, the EU GDPR) are: for handling your demo request, that it is necessary to take steps at your request before entering into a contract, together with our legitimate interest in following up business enquiries; for operating and improving the assistant, our legitimate interest in answering prospective clients' questions and understanding how the service performs; and for our cookieless analytics (Cloudflare Web Analytics and Plausible Analytics) and campaign measurement, none of which store anything on your device, our legitimate interest in understanding how the site performs and which marketing works.
Where your information is held
Plausible Analytics stores its data within the European Union. Some of our other providers (including Cloudflare, OpenAI and Pushover) are based in, or store data in, the United States. Where information is transferred outside the UK or the European Economic Area, we rely on appropriate safeguards — such as the UK’s International Data Transfer Agreement or the EU Standard Contractual Clauses, or a transfer to a country the UK or EU has decided provides adequate protection.
How long we keep it
We keep demo-request details for as long as we are in contact about your enquiry, and for up to 24 months afterwards — unless you become a customer, in which case we keep them for the life of that relationship, or you ask us to delete them sooner. Assistant conversations are kept while they are needed to operate, review and improve the service; you can ask us to delete a conversation or its associated identifier at any time. Our analytics tools (Cloudflare Web Analytics and Plausible Analytics) hold only aggregate, non-personal statistics, so there is no personal analytics data to retain or delete.
Your rights
You have rights over your personal information, including the right to:
- ask for a copy of the information we hold about you;
- have inaccurate information corrected;
- ask us to delete it, or to restrict or object to how we use it; and
- ask us to transfer it to another provider.
To exercise any of these, email us at dan@ai-shopassistant.com. We will respond within the time limits the law sets, usually within one month.
How to complain
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to a data-protection regulator:
- in the UK, the Information Commissioner’s Office (ico.org.uk); and
- in Ireland, the Data Protection Commission (dataprotection.ie).
Changes to this policy
We may update this policy from time to time. When we do, we will change the date shown at the top of this page.