Privacy notice

Noumenai is the trading name of the entity that operates this site. If you need our full registered details for a data-subject request, contract, or DPA, email hello@noumenai.ai and we will provide them in writing.

• Information you send us. If you email us or book a call, we receive your name, work email, employer, and whatever context you choose to share.
• Booking metadata. When you schedule via our Calendly embed, Calendly processes your name, email, and calendar availability on our behalf. See "Third parties" below.
• Usage analytics. We use Plausible Analytics, a privacy-friendly, cookieless analytics tool. It records aggregate, non-identifying data — page URL, referrer, browser, device type, and country derived from IP without storing the IP itself. It does not set cookies, does not fingerprint, and does not create cross-site profiles.
• Commercial engagement data. When we run a proof of value or paid engagement, the client controls the underlying business data. We process it under a separate written agreement and a Data Processing Addendum on request.

• Legitimate interests — replying to enquiries, running the website, and understanding aggregate site performance. You can object at any time.
• Contract — performing engagements and answering booked conversations you have requested.
• Legal obligation — retaining records where tax, accounting, or other law requires.

This site does not set advertising, tracking, or profiling cookies. Plausible Analytics is cookieless. Calendly may set cookies inside its embedded booking widget — that processing is governed by Calendly's own privacy policy. If you do not want Calendly cookies, email us at hello@noumenai.ai and we will book manually.

We keep the third-party surface small and prefer providers with clear data protection posture. The current list is:

• Plausible Analytics — site analytics (EU-hosted)
• Calendly — meeting scheduling
• Email and productivity — internal correspondence
• Hosting and infrastructure — website delivery

A current, dated subprocessor list is available on request for clients under a signed engagement.

We prefer European-resident infrastructure and, where feasible, keep processing within the UK/EEA. Where a provider transfers data outside those regions, we rely on the provider's Standard Contractual Clauses and equivalent safeguards. We do not sell personal information.

• Enquiry and booking correspondence: up to 24 months from last contact.
• Contractual records: for the life of the engagement plus 7 years for tax.
• Aggregate analytics: retained by Plausible per its own retention policy.

You have rights of access, rectification, erasure, restriction, portability, and objection. To exercise any of them, email hello@noumenai.ai. You also have the right to lodge a complaint with the UK ICO or your local EU supervisory authority — we would rather you talked to us first, but that route is always open to you.

We use least-privilege access, encryption in transit, and a small, EU-resident infrastructure footprint. During engagements we operate under written agreements that cover confidentiality, breach notification, and specific technical and organisational measures.

For anything on this page — including data-subject requests, DPAs, or subprocessor lists — write to hello@noumenai.ai.