Privacy Policy

The data controller is DIAMOND INTELLIGENCE LIMITED (Company No. 17136632), registered at Portland House, Belmont Business Park, Durham, England, DH1 1TW.

Trading name: Diamond Intelligence. Website: https://diamondaii.com. We are registered with the UK Information Commissioner's Office (registration ZC170812).

For data protection enquiries, email info@diamondaii.com.

We collect the following personal data:

• Contact enquiries: when you use our contact form or email us, we collect your name, email address, the organisation you provide (optional), the enquiry type, and the content of your message.
• Newsletter subscriptions: if you subscribe to our Insights updates, we collect your email address and a record that you consented, so we can send you those emails until you unsubscribe.
• Website analytics: if you accept analytics in our cookie banner, we collect anonymised, aggregated usage data such as pages visited, referrer, approximate (country/region) location, and general device and browser information. This is cookieless and is not used to identify you.
• Cookie preferences: your consent choice, stored locally in your browser.

We do not knowingly collect special category data through the website. Please do not include sensitive personal details in a contact message; if your enquiry concerns a sensitive matter, we will agree a secure way to share information before you send it.

We process personal data on the following bases:

• Legitimate interests: to respond to enquiries and operate our business (Article 6(1)(f) UK GDPR).
• Consent: to send you our newsletter, and to use non-essential analytics, where you choose to opt in (Article 6(1)(a) UK GDPR and the Privacy and Electronic Communications Regulations). You can withdraw consent at any time.
• Legal obligation: where we must retain records to comply with applicable law.

We use personal data to:

• Respond to consultation, audit, and investigation enquiries
• Communicate about our services where relevant
• Send our Insights newsletter, where you have subscribed
• Understand how the website is used (with consent)
• Maintain website security and performance

We do not sell your personal data. We do not use your data for automated decision-making that produces legal or similarly significant effects.

Enquiries: contact-form submissions and enquiry emails are typically retained for up to 24 months unless a client relationship continues, in which case data may be kept longer as needed for that relationship and our legal obligations.

Newsletter: we keep your subscription until you unsubscribe. If you unsubscribe, we retain a minimal record of your request so we can honour your choice and not contact you again.

Analytics: our analytics provider identifies visitors only by a temporary hash that is discarded within 24 hours; reporting data is aggregated. Cookie consent preferences remain in your browser until you clear them.

Personal data you submit through the website (enquiries and newsletter subscriptions) is stored in a cloud database hosted in the United Kingdom.

We use a small number of service providers to run the website, store data, and deliver email. Some of these providers, or their parent companies, are based outside the UK, so limited processing (for example, sending email notifications or provider support access) may involve a transfer of personal data outside the UK. Where that happens, we rely on appropriate safeguards, such as UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

We use trusted service providers who process personal data only on our instructions and under contract. They fall into these categories:

• Website hosting and analytics provider: serves the website and, only if you accept, provides cookieless analytics
• Cloud database provider: securely stores enquiries and newsletter subscriptions in the UK
• Email delivery provider: delivers enquiry notifications to us
• Email and mailbox provider: receives and stores our email correspondence with you

We are happy to provide more detail about a specific provider on request.

We maintain appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls, and storing website personal data in the UK.

Diamond Intelligence holds Cyber Essentials certification, the UK government-backed scheme for baseline cyber security controls.

Under UK data protection law, you have rights including:

• Access to your personal data
• Correction of inaccurate data
• Erasure in certain circumstances
• Restriction or objection to processing
• Data portability where applicable
• Withdraw consent at any time — unsubscribe from the newsletter using the link in any email or our unsubscribe page, and change analytics consent via your cookie settings

To exercise your rights, contact info@diamondaii.com. You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

See our Cookie Policy for details on cookies, analytics, and how to manage preferences.

We may update this policy from time to time. The "Last updated" date at the top of this page will change when we do. Material changes may also be noted on the website.