Legal

Privacy Policy

Last updated: 8 July 2026

Who we are

TwoBridges.ai is an AI consultancy based in South Wales, UK. For anything related to this policy, or to exercise any of your rights, contact hello@twobridges.ai.

What we collect

The personal information we hold is limited to what you choose to give us:

• Newsletter (AI Briefing) signups: when you subscribe, we collect your email address. To meet UK data protection and PECR requirements, our newsletter provider also records limited proof of your consent, such as the date and time you signed up and, where available, your IP address.
• Email enquiries: your name, email address and whatever you include in your message when you email us.
• Analytics: none at present. If we add analytics in future, it will only run if you allow it through the cookie banner, and this notice and our Cookie Notice will be updated first.

How we use it, and our lawful basis

• To send you the AI Briefing and related updates you have asked for. Our lawful basis is your consent, which you give by subscribing and confirming your email. You can withdraw it at any time (see below).
• To respond to your enquiries and, if you become a client, to deliver our services. Our lawful basis is our legitimate interest in replying to you, or the performance of a contract.

We do not use your information for automated decision-making or profiling, and we do not sell it.

Who processes it for us

We use a small number of trusted providers who process personal data on our behalf under their data processing terms:

• MailerLite, our email marketing provider, stores newsletter subscribers and sends the AI Briefing on our behalf. See MailerLite’s privacy policy.
• Microsoft 365 hosts our email, and processes enquiry messages on our behalf under Microsoft’s data processing terms.

Some providers may process data on servers outside the UK or European Economic Area. Where that happens, the transfer is covered by appropriate safeguards (such as Standard Contractual Clauses or the UK International Data Transfer Addendum). We do not share your information with third parties for their own marketing.

How long we keep it

We keep your newsletter email address until you unsubscribe or ask us to remove you, after which we delete it from our active lists (our provider may keep a minimal record so it can continue to honour your unsubscribe). Enquiry emails are kept for as long as needed to handle the enquiry and any follow-up work, then deleted. We review stored correspondence at least annually.

Withdrawing consent and unsubscribing

You can stop receiving the AI Briefing at any time using the unsubscribe link at the bottom of every email, or by emailing hello@twobridges.ai. Withdrawing consent does not affect anything we sent before you withdrew it.

Your rights

Under UK GDPR you can ask us to access, correct, delete, restrict or transfer your personal data, and you can object to our processing or withdraw your consent. Email hello@twobridges.ai and we will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you are unhappy with how we have handled your information.

Changes to this policy

If we change how we handle personal information, we will update this page and the “last updated” date above.