Privacy & Cookie Policy
Last updated: 9 November 2026
We are committed to protecting your privacy and being open about how we collect, use and protect your personal information.
Please read this privacy policy carefully. It explains who we are, how and why we collect, store, use and share personal information, your rights in relation to your personal information, and how to contact us or the supervisory authority if you have a complaint.
Contents
Who we are
Our website
Our collection and use of your personal information
Transfer of your information outside the UK
Cookies and similar technologies
Marketing
Your rights
Keeping your personal information secure
How to complain
Changes to this privacy policy
How to contact us
Who we are
The Tom&Co AI pages of this website (everything under tomandco.co.uk/ai-agency-consultancy) are operated by Tom & Co. AI Ltd, a company registered in England and Wales with company number 17377953, whose registered office is at 38 Shad Thames, London SE1 2YD. We trade as Tom&Co AI.
The rest of tomandco.co.uk is operated by Tom & Co. Ltd, a separate company, and is covered by its own privacy policy.
We collect, use and are responsible for certain personal information about you. When we do so we are regulated under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and we are responsible as 'controller' of that personal information for the purposes of those laws. Our use of cookies and electronic marketing is also governed by the Privacy and Electronic Communications Regulations 2003 (PECR).
Our website
This privacy policy relates only to your use of the Tom&Co AI pages of our website. Our website may contain links to other websites not operated or controlled by us. The links are provided for your convenience only and we are not responsible for the content of those sites or the privacy practices of their operators.
Our collection and use of your personal information
What personal information we collect
We may collect the following personal information:
Contact information such as name, email address, telephone number and postal address
Company information and job title
Information about your project requirements and business needs, such as the processes or systems you would like to improve
Website usage data and analytics information
Communication preferences
How we use your personal information
We use your personal information for the following purposes:
To respond to your enquiries and provide information about our services
To deliver our services and maintain our client relationships
To send you marketing communications (with your consent)
To improve our website and services
To comply with legal obligations
Legal basis for processing
We process your personal information on the following legal bases:
Legitimate interests: For business development and improving our services
Consent: For marketing communications and non-essential cookies
Contract: To fulfil our obligations when providing services to you
Legal obligation: To comply with applicable laws and regulations
Transfer of your information outside the UK
Some of the service providers we use may store or process your personal information outside the United Kingdom. When this happens, we make sure appropriate safeguards are in place to protect your information in accordance with UK data protection law.
This may include transferring data only to countries the UK government has found to provide an adequate level of protection for personal data, or using the UK International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses.
Cookies and similar technologies
What are cookies?
Cookies are small text files that are placed on your computer or mobile device when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.
How we use cookies
We use cookies for the following purposes:
Essential cookies: These are necessary for the website to function properly
Analytics cookies: To understand how visitors use our website and improve user experience
Marketing cookies: To deliver relevant advertisements and track campaign effectiveness
Preference cookies: To remember your settings and preferences
When you first visit, we ask for your choice. Analytics and marketing cookies are only set if you select "Accept all"; choosing "Essential only" keeps them switched off.
Managing cookies
You can control and manage cookies through your browser settings. To change the choice you made on our cookie banner, clear the cookies and site data for tomandco.co.uk in your browser and the banner will appear again on your next visit. Please note that removing or blocking cookies may affect the functionality of our website and your user experience.
Marketing
We may use your personal information to send you marketing communications about our services, industry insights and company updates that we believe may be of interest to you.
We will only send you marketing communications if you have given us your consent to do so, or where we have another lawful basis to do so.
You can opt out of receiving marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.
Your rights
Under data protection law, you have rights including:
Right of access: To request a copy of the personal information we hold about you
Right to rectification: To correct any inaccurate or incomplete personal information
Right to erasure: To request deletion of your personal information in certain circumstances
Right to restrict processing: To limit how we use your personal information
Right to data portability: To receive your personal information in a portable format
Right to object: To object to processing based on legitimate interests or for marketing purposes
Right to withdraw consent: Where processing is based on consent
To exercise any of these rights, please contact us using the details in the "How to contact us" section below. We will respond within one month.
Keeping your personal information secure
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction.
These measures include encryption of data in transit and at rest, regular security assessments, access controls, and staff training on data protection practices.
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.
How to complain
If you have any concerns about our use of your personal information, please contact us first using the details below. We will do our best to resolve your concern.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). You can contact the ICO at ico.org.uk or by calling their helpline on 0303 123 1113.
Changes to this privacy policy
We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
How to contact us
If you have any questions about this privacy policy or how we handle your personal information, please contact us:
Tom & Co. AI Ltd
38 Shad Thames, London SE1 2YD, United Kingdom
Email: info@tomandco.ai
Phone: 020 7351 3521