Legal

Privacy Policy

Last updated: 21 August 2026

Who we are

TwoBridges.ai is an AI consultancy based in South Wales, UK. For anything related to this policy, or to exercise any of your rights, contact hello@twobridges.ai.

What we collect

The personal information we hold is limited to what you choose to give us:

• Newsletter (Your AI Briefing) signups: when you subscribe, we collect your email address. To meet UK data protection and PECR requirements, our newsletter provider also records limited proof of your consent, such as the date and time you signed up and, where available, your IP address.
• Enquiries: your name, email address and any phone number, company, sector, areas of interest and message you provide, whether you email us directly or use the enquiry form on our contact page. If you tick the newsletter box on that form, we also record that you asked to be added.
• Website chat assistant: when you use the chat assistant on our site, we collect the messages you send, along with any name, email address, phone number, business, sector or other details you choose to share in the chat. We also record limited technical data such as your IP address and browser type, to run the service and prevent abuse. The chat displays a notice. By sending a message you agree we may use the details you provide to reply.
• Analytics: we use Google Analytics 4 to see which pages are read and how people find us. It does not run at all unless you choose “Accept all” in the cookie banner. You can withdraw that at any time through “Cookie settings” in the footer, which stops collection and deletes the cookies. Full detail is in our Cookie Notice.

How we use it, plus our lawful basis

• To send you Your AI Briefing and related updates you have asked for. Our lawful basis is your consent, which you give by subscribing and confirming your email. You can withdraw it at any time (see below).
• To respond to your enquiries and, if you become a client, to deliver our services. Our lawful basis is our legitimate interest in replying to you, or the performance of a contract.
• To answer your questions in the chat assistant and, where you share your contact details, to follow up on your enquiry. Our lawful basis for helping visitors and responding is our legitimate interest. For the contact details you choose to give us so we can get back to you, our basis is your consent.

We do not use your information for automated decision-making or profiling. We do not sell it. The chat assistant uses AI to generate its replies, but it does not make any automated decision that has a legal or similarly significant effect on you.

Who processes it for us

We use a small number of trusted providers who process personal data on our behalf under their data processing terms:

• MailerLite, our email marketing provider, stores newsletter subscribers and sends Your AI Briefing on our behalf. See MailerLite’s privacy policy.
• Formspree receives and forwards the enquiry form on our contact page. When you submit that form, the details you enter are processed by Formspree before reaching our inbox. See Formspree’s privacy policy.
• Microsoft 365 hosts our email and processes enquiry messages on our behalf under Microsoft’s data processing terms.
• Netlify hosts this website and processes standard server request data, including IP addresses, in order to serve pages to you.
• Anthropic provides the AI model (Claude) behind the chat assistant. The messages you send in the chat are processed by Anthropic to generate replies. Anthropic processes this data in the United States under appropriate safeguards. See Anthropic’s privacy policy.
• Supabase stores the chat conversations and any enquiry details captured through the assistant, on our behalf. Our Supabase database is hosted in the United Kingdom. See Supabase’s privacy policy.
• Resend delivers the notification email that tells us you have left your details in the chat assistant. That email contains the name, email address and phone number you chose to share, so that we can reply to you. Resend processes this data in the United States under appropriate safeguards. See Resend’s privacy policy.

Some providers may process data on servers outside the UK or European Economic Area. Where that happens, the transfer is covered by appropriate safeguards (such as Standard Contractual Clauses or the UK International Data Transfer Addendum). We do not share your information with third parties for their own marketing.

How long we keep it

We keep your newsletter email address until you unsubscribe or ask us to remove you, after which we delete it from our active lists (our provider may keep a minimal record so it can continue to honour your unsubscribe). Enquiry emails are kept for as long as needed to handle the enquiry and any follow-up work, then deleted. We review stored correspondence at least annually. Chat conversations held in our database are deleted after 12 months. Where you left your contact details in the chat, we keep those details for as long as needed to handle your enquiry and any follow-up work, and no longer than 24 months after our last contact, then delete them. You can ask us to delete your chat conversation or your details sooner at any time, using the contact details below.

Withdrawing consent and unsubscribing

You can stop receiving Your AI Briefing at any time using the unsubscribe link at the bottom of every email, or by emailing hello@twobridges.ai. Withdrawing consent does not affect anything we sent before you withdrew it.

Your rights

Under UK GDPR you can ask us to access, correct, delete, restrict or transfer your personal data. You can object to our processing or withdraw your consent. Email hello@twobridges.ai and we will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you are unhappy with how we have handled your information.

Changes to this policy

If we change how we handle personal information, we will update this page and the “last updated” date above.