Privacy notice
Last updated: 28 October 2026
This notice explains what personal data Little Helpers AI collects, why, what we do with it and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018). We've tried to keep it short and plain.
Who we are
Little Helpers AI is a trading name of Alex Findley, a sole trader in England. Alex Findley is the data controller for the personal data described in this notice. We don't have a Data Protection Officer, as we're not required to, but Alex deals with all privacy questions personally. Contact: hello@littlehelpersai.co.uk, or by post to 15 Alfriston Road, Paignton, Devon, TQ3 3FR.
- Email: hello@littlehelpersai.co.uk
- ICO registration: we're registering with the Information Commissioner's Office and paying the data protection fee (planned for 25 November 2026). We won't collect personal data through this website until we're registered. Registration number: [to be added when issued].
What we collect, why, and our lawful basis
Checklist result submissions and email sign-ups are not live. Submissions open 25 Nov, subject to ICO registration. The checklist-related collection, providers and retention periods below describe the planned service.
| What | Why we use it | Lawful basis |
|---|---|---|
| If you choose to send us your results from the online checklist: your first name, email address, type of business or trade, any note you add, and your checklist answers (the jobs you ticked, rough hours, scores and your top three with notes) | So Alex can look at your results and email you a suggestion for your top job | Consent, which you give by ticking the box on the form. Replying to you afterwards is in our legitimate interests (answering people who have asked us to get in touch). You can withdraw consent at any time by emailing us |
| A one-way scrambled (hashed) version of your IP address when you send checklist results, and the result of a Cloudflare Turnstile security check | To stop spam and limit how often the form can be used | Legitimate interests (keeping the form free of spam and abuse) |
| When email sign-ups open: your first name and email address if you sign up for checklist emails | To email you the checklist and, if you agree, occasional practical tips | Consent. You can withdraw it at any time with the unsubscribe link or by emailing us |
| Your name, email, business name and anything you tell us when you email hello@ or ask about a session | To reply to you and, if you want, arrange a session | Legitimate interests (answering people who contact us) and taking steps at your request before a contract |
| Client contact details, what we've agreed, invoices and payments | To deliver the work you've booked, invoice you and keep business and tax records | Contract, and legal obligation (tax records) |
| Basic technical data, such as IP address and browser type, handled by our hosting provider | To run the website and protect it from abuse | Legitimate interests (keeping the site secure) |
The online checklist itself saves your answers only in your own browser (local storage) on your device. We don't receive them. Sending results is disabled until submissions open.
We collect this data from you directly. You don't have to give us any of it, but without an email address we can't send the checklist or reply to you, and without contact and billing details we can't take on work for you.
What we don't do
- We don't sell or rent your data.
- We don't use your data for automated decisions that affect you, or for profiling.
- We don't put your personal data into AI tools to train them. See our AI data policy.
- The website doesn't use cookies, analytics or advertising trackers. The online checklist saves your answers in your own browser only. See our cookie notice.
Data we handle for clients
When we set up helpers for your business, we may see personal data about your customers, for example names and emails in your inbox. For that data your business is the controller and we act as your processor. We only use it to do the work you've asked for and keep access to a minimum. When you leave, we return your data if you ask, then delete what we hold within 30 days.
Before we start, we agree written data processing terms with you, as Article 28 of the UK GDPR requires. They set out what data we handle, about whom, why and for how long, and commit us to act only on your instructions, keep the data confidential and secure, use sub-processors only with your permission, help you with data rights requests and breaches, return the data on request and delete it within 30 days of the work ending, and give you the information you need to check all this.
Who we share data with
We only share data with the service providers we need to run the business. They act on our instructions:
- Cloudflare (website hosting, domain and email routing, spam protection with Turnstile, and storage of checklist results you send us). Checklist results are stored in a Cloudflare D1 database and a notification is emailed to us through Cloudflare.
- Apple (iCloud Mail) (our email inbox). Emails sent to hello@littlehelpersai.co.uk, and checklist notifications, are forwarded by Cloudflare to Alex's iCloud Mail inbox.
- We don't run a mailing list or use a newsletter tool yet. Before email sign-ups open, we'll name the provider here.
- We don't use a bookkeeping or invoicing service yet. If we start using one, we'll add it here first.
- If we change any of these providers, we'll update this list before the change.
We may also share data if the law requires it, for example with HMRC.
Transfers outside the UK
Some providers may process data outside the UK, for example in the EU or the USA (Cloudflare and Apple are US companies). Where they do, we make sure there's a legal safeguard in place, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement or Addendum.
How long we keep it
- Checklist sign-ups: until you unsubscribe, or 2 years after you last opened or replied to one of our emails, whichever comes first.
- Checklist results you send us: 12 months from when you send them, then deleted automatically, unless you become a client (then we keep what we need under the client records rule below). You can ask us to delete them sooner at any time by emailing hello@littlehelpersai.co.uk.
- Enquiries that don't lead to work: 12 months after our last contact.
- Your customers' data that we handle for you: returned on request, then deleted within 30 days of the work ending.
- Client and invoice records: 6 years after the end of the tax year they relate to, as HMRC requires.
How we keep it safe
We use reputable providers, two-factor sign-in on our accounts, and keep access to the minimum. We never ask for your passwords by email or message.
Your rights
You have the right to:
- ask for a copy of your data (subject access)
- have it corrected if it's wrong
- have it deleted
- restrict or object to how we use it, including objecting to anything based on legitimate interests
- data portability, where it applies
- withdraw consent at any time, which doesn't affect anything we did before you withdrew it
To use any of these, email hello@littlehelpersai.co.uk. It's free, and we'll reply within one month.
Complaints
If you're unhappy with how we've handled your data, please tell us first so we can put it right. Email hello@littlehelpersai.co.uk with "Data complaint" in the subject line, or write to us at the address above. We'll acknowledge your complaint within 30 days, look into it properly, keep you updated, and tell you the outcome and what we've done about it.
If you're still not happy, or at any time, you can complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, helpline 0303 123 1113, or write to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Changes
We'll update this notice if anything changes, for example when sign-ups open. The date at the top shows when it last changed.