Privacy | Fruitful AI

This Privacy Policy explains how Full Fruit Consulting Ltd, trading as Fruitful AI ("we", "us", "our"), collects, uses, and protects personal data when you visit fruitfulai.io or engage our services. We are the data controller for the personal data described in this policy.

Who we are

Full Fruit Consulting Ltd is a company registered in England and Wales, company number 16197941. The director is Dicky Broadhurst. For any privacy-related question, email hello@fruitfulai.io.

What we collect

We collect only the data we need to do business with you.

Contact details — name, email address, business name, phone number — provided by you through our contact form, by email, or during a call.
Project and engagement records — proposals, specifications, correspondence, invoices, and deliverables relating to work we do for you.
Website analytics — basic, aggregated information about how visitors use the site, collected through privacy-respecting analytics. We do not use tracking that builds a profile of you across other websites.
Cookies — strictly necessary cookies only. We do not set marketing or third-party tracking cookies without your consent.

Why we use your data

To respond to enquiries and arrange consultations.
To deliver the services you have engaged us for.
To issue invoices and manage payments.
To meet legal, tax, and insurance obligations.
To improve our website and service, based on aggregated, anonymous analytics.

Our legal basis

We rely on the following lawful bases under UK GDPR:

Contract — to deliver services you have engaged us for.
Legitimate interests — to respond to your enquiry, run our business, and improve our service.
Legal obligation — for tax, accounting, and regulatory records.
Consent — for any optional communications you opt in to.

Who we share data with

We do not sell your data. We share it only with the following categories of recipients, and only where it is necessary:

Cloud services we use to run the business (Google Workspace for email and storage, accounting software, calendar booking software).
AI processing services we use to deliver engagements — Anthropic (Claude API, Claude Code, Claude in Cowork mode). These providers do not use our or your inputs or outputs to train their models.
Tools used to deliver specific projects (for example n8n, Airtable, Notion), where you have agreed to their use as part of the engagement.
Professional advisers (accountant, solicitor, insurer) where we need their input.
Government bodies (HMRC, Companies House, the ICO) where required by law.

Where any provider is outside the UK or EEA, we rely on appropriate safeguards (UK-approved transfer mechanisms or equivalent).

How long we keep your data

Enquiry data: up to 12 months from your last contact if it does not lead to engagement.
Engagement records: 7 years after the end of the engagement, to meet legal and tax requirements.
Marketing list data (if you opt in): until you unsubscribe.

How we protect your data

We protect your data using encryption in transit and at rest, multi-factor authentication on business accounts, password manager storage of credentials, full-disk encryption on devices, and the broader controls set out in our internal Cyber Controls Note, available on request to enterprise clients.

Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Have inaccurate data corrected.
Have data erased where there is no overriding legal basis to keep it.
Restrict or object to processing.
Receive your data in a portable format and transfer it to another provider.
Withdraw any consent you have given.

To exercise any of these rights, email hello@fruitfulai.io. We respond within one month.

Complaints

If you are unhappy with how we handle your data, please tell us first via our Complaints Procedure. You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The version date at the top of this page tells you when it was last reviewed. Material changes will be notified by email to existing clients.