How we handle website and enquiry information

Draft last updated: 29 July 2026

Who is responsible for your information

THIRDBOARD LTD, trading as ThirdBoard AI, is intended to be the controller of personal information collected through this website and related enquiries.

• Legal entity: THIRDBOARD LTD
• Company number: 17137759
• Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
• Contact: Email us

Information collected

This website does not use a public enquiry form. If you contact us by email, we receive the contact details, message and any other information you choose to include. Please keep an initial enquiry high-level and do not send confidential client material, passwords, financial records, special-category personal data, production credentials or internal company documents.

If an engagement progresses, appropriate secure arrangements can be agreed for any additional material that is required.

Why the information is used

Enquiry information is intended to be used to assess fit, respond to you, recommend a possible route and keep an appropriate business record of the correspondence. The intended lawful basis is legitimate interests in operating and developing the consultancy and taking steps at your request before a possible contract. This basis must be confirmed during legal review.

Email, hosting and other providers

Email and hosting providers may process limited information on behalf of the business. If another service is needed during an engagement, its role, terms and information-handling arrangements should be considered before it is used.

Analytics and cookies

Non-essential analytics are currently disabled. If analytics or any other non-essential technology is enabled later, this notice and the website’s consent arrangements must be reviewed first.

Retention

Unsuccessful or inactive enquiries are intended to be retained for up to 12 months after the last contact unless there is a legal or operational reason to retain them for a different period. Records connected with commissioned work may be retained for longer to meet contractual, tax, insurance or legal requirements. Final periods must be confirmed before launch.

Sharing and international transfers

Information should only be shared with service providers needed to operate the consultancy, professional advisers where necessary, or authorities where legally required. The location and safeguards of the final email, analytics, hosting and project providers must be reviewed before launch.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict use of your personal information, object to particular processing, or complain to the Information Commissioner’s Office. Email us first if you have a question or request.

Security

Reasonable technical and organisational measures should be used to protect information. No public website or email system is completely secure, which is why sensitive information should not be included in the first email.

Changes to this notice

This notice may be updated when the business details, providers or processing activities change. The date at the top identifies the current version.