Privacy notice
What this site collects, what we hold if we contacted you about our services, how long each part is kept, and how to get it removed. Last updated 22 October 2026.
Who is responsible
CADRAL AI LTD, registered in England and Wales, company number 17376948. Contact: umer@cadral.co.uk.
What this site collects
Very little, and each part of the site collects something different.
Using the free tools: nothing. Every calculator and checker on this site runs in your browser on the numbers you type in. Nothing you enter is sent to us or saved anywhere.
Sending an enquiry: your name, your email address and whatever you choose to write, so that we can reply.
Booking a meeting: the booking itself runs through Cal.com, so whatever you enter there, your name, your email, any notes, goes to Cal.com as well as to us.
Emailing or calling directly: whatever you choose to tell us.
Analytics and advertising: Google Analytics and Google Ads, loaded through Google Tag Manager. They tell us which pages get read, which tools get used, where people arrive from, and whether an advert led to an enquiry.
None of it loads until you say so. Everything starts switched off. The banner you saw on your first visit is the only thing that turns it on, rejecting is one click and exactly as easy as accepting, and the single thing stored before you choose is the choice itself. You can change it whenever you like, using the button below.
Company recognition, only if you choose it: if you accept it on the cookie banner, ColdIQ's Visitor ID service tells us which company is visiting this site. What it collects, who receives it and how to switch it off again are in its own section and in the cookie policy.
Page counts: our hosting provider, Vercel, counts page views without cookies and without storing anything that identifies you. We use the totals, for example how many times the free tools were opened, and nothing else.
Asking the assistant: the “Ask us anything” button opens an automated assistant run by ElevenLabs. Nothing loads until you press it. Once you do, what you type or say is sent to ElevenLabs and to the AI model that writes the reply, and if you ask about a product we do not know, the assistant runs one web search with your question through a search provider on our server. Transcripts are kept by ElevenLabs for ninety days and then deleted; your voice is not recorded. It says it is automated, it never asks for passwords or payment details, and it only asks for a name and an email if you want us to get in touch.
The booking calendar: the calendar on the booking page is hosted by Cal.com, and opening it shares your IP address with them and lets them place cookies on your device. It does not load on its own: you press a button first, and until you do, this paragraph is the only thing on the subject. That is deliberate. It is the reason the sentence above can stay true on every page of this site, including that one.
What is never collected
Passwords or logins to any of your systems. Nothing on this site asks for them.
Your IP address. It is never stored by us. It is shared in two places, and only after you act: with Cal.com once you have opened the calendar, described above, and, if you accept company recognition, with ColdIQ and the suppliers behind it, described below.
Lawful basis
Legitimate interest, for replying to an enquiry you sent and for the booking you made. Consent, for analytics whenever it is running, which you can withdraw at any time from the button on this page. Consent too for company recognition, if you accept it, covering both what it stores on your device and the identification of your visit; the basis for contacting a business we found that way is legitimate interest, set out in its section and the section on being contacted. If we contacted you about our services, the basis is set out in that section.
How long things are kept
Enquiries by form, email or phone are kept only for as long as it takes to deal with what you asked, or for as long as we are actually working together.
Bookings are kept by Cal.com under its own policy, and by us for as long as the meeting and anything that follows it needs.
Company recognition: the periods are in its section.
If we contacted you about our services, the periods are in that section.
Who else sees it
Cal.com, for anything booked through it. Hosting and email providers, acting as processors. ElevenLabs, the AI model provider and the search provider, as processors, for anything you put to the assistant. ColdIQ and Knock2, as processors, and Knock2's data partners, for company recognition if you accept it. Nothing is sold, and nothing is shared with advertisers. If we contacted you about our services, the providers involved are described in that section.
Company recognition (ColdIQ Visitor ID)
What it is. It is off until you switch it on. If you press Accept all on the cookie banner, or tick Visitor identification under Choose what to allow, this site loads a tracking tag from ColdIQ's Visitor ID service. If you reject, or have not chosen, it is not loaded and nothing in this section is happening to you.
What it collects. Your IP address, which pages you open and in what order, how long you stay, the website you came from, any campaign tags on the link you used, your browser and device type, and counts of mouse movements, scrolls, key presses and taps (counts, not what you type). It stores random identifiers in your browser so that it recognises you if you come back. The full list is in the cookie policy.
What it gives us. A match between your visit and a company: its name, website, industry, size and location. For visitors in the United States it may also match a named person at that company from licensed business data, with a job title, work email address and LinkedIn profile. The supplier states that it names individuals only for visitors in the United States and gives company-level information only for visitors elsewhere, including the UK.
Why, and on what basis. To find out which businesses are looking at what we do, so that we can write to the right ones. The lawful basis for the tag itself, meaning storing identifiers on your device, reading them back and identifying your visit, is your consent, which you can withdraw as described below. The lawful basis for contacting a business we found this way is our legitimate interest, on the terms in the section on being contacted: we may email companies, limited liability partnerships, sole traders and partnerships, every email carries a link to unsubscribe, and a person at Cadral reads and approves every message.
Who handles it. Cadral AI Ltd decides why and how it is used. ColdIQ (Cold IQ LLC, United States) sells us the service and provides the address the tag reports to, and Knock2 (Knock 2 AI LLC, New York, United States) supplies the software behind the tag; both act for us as processors. The tag also loads identification technology run by Knock2's data partners, which place their own identifiers on your device and are responsible for their own use of the data under their own privacy notices: Visual Visitor, for every visitor who accepts, and ProspectDesk, for visitors whose IP address is in the United States. These suppliers are outside the UK. ColdIQ's privacy policy says it relies on standard contractual clauses, the UK addendum or other lawful safeguards for transfers, and Knock2 says it applies appropriate safeguards.
How long we keep it. A record of a visit and the company it matched is kept in our ColdIQ account for three months if we never write to that company, and for twelve months after our last message if we do and nobody replies. If someone replies or asks us to stop, the periods in the section on being contacted apply. The identifiers in your browser stay until you switch this off here or clear your browser's site data. The suppliers do not publish their own retention periods, so if you want what they hold about you deleted, ask us, as set out below.
Switching it off. Open Cookie settings in the footer of any page, or use the button above, and press Reject all, or untick Visitor identification and save. The tag is removed, the page reloads so that nothing it started keeps running, and we delete the identifiers it keeps in your browser. If your browser sends the Global Privacy Control signal, the tag does not load its partners' technology and does not try to identify you as a person, even if you accepted.
Deleting what was already collected. Switching it off stops new collection. What was already collected stays with the suppliers until it is deleted, and we treat withdrawing consent as a request to delete it. Email umer@cadral.co.uk, say roughly when you visited and which company or email address we might have matched you to, and we will ask ColdIQ and Knock2 to delete what they hold about you and tell you when that is done.
If we contacted you about our services
We sometimes write to people at companies in the UK and the US that we think could use what we do. This section explains what we hold about you if we did, and how to make us stop.
What we hold. Your name, your job title, the company you work for, your work email address, the address of your LinkedIn profile, and one or more dated public facts about your company, such as a job advert on its website or a filing at Companies House, with the links we found them at. If you reply, we keep your reply. If we first noticed your company because someone there visited this site and accepted company recognition, we also hold the pages that visit looked at.
Where it came from. Public company registers such as Companies House, your company's own website, the trade press, your public LinkedIn profile, and business data providers we use to find the right people at a company and to check work email addresses. It can also be a match between a visit to this site and your company, if the visitor accepted company recognition.
Why, and on what basis. To offer our services to businesses they are likely to suit. The lawful basis is our legitimate interest in doing that, which we have weighed against yours in a written assessment. We may contact companies, limited liability partnerships, sole traders and partnerships by email and on LinkedIn. Every email we send carries a link to unsubscribe.
How we do it. A person at Cadral reads and approves every message before it is sent. We contact at most three people at a company. We stop writing to you as soon as you reply, and if someone at your company replies, we pause our messages to the others until we have read it.
If you say “not now” or “no”. If you tell us “not now”, we may get back in touch later. If you say no, or ask us to stop, we will not contact you again.
Who else handles it. The providers that run our systems for us, as processors: our database and hosting providers, the services we use to send and receive LinkedIn messages and email, our data providers, our CRM, and our AI providers, which help us research, draft and sort replies: Anthropic (Claude), and Vercel's AI Gateway with TypeSafe's Jev model, which we use with zero data retention, so the content we send it is not kept. Some of them are based outside the UK, in the European Union and the United States. Ask us and we will tell you which providers hold your details. Nothing is sold, and nothing is shared with advertisers.
How long we keep it. Twelve months after our last message if you do not reply, and three months if we looked at your company but never wrote. If you ask us to stop, we keep a record that you asked, in coded form, so that we never contact you again, and if you also ask us to delete your details, we delete them.
Your choices. Reply “stop” to any message, use the unsubscribe link in any email, or email umer@cadral.co.uk, and we will not contact you again. You can also ask to see what we hold, to have it corrected or deleted, or to have its use restricted, and you can object to its use at any time. If you are unhappy with how we have handled your information, please tell us first at umer@cadral.co.uk; we will acknowledge your complaint within 30 days. You can also complain to the Information Commission, the UK's data protection regulator, at ico.org.uk.
The free ad account audit
If you ask for it, you give us read-only access to your ad accounts through each platform's own sign-in. We read your campaign settings and results only to write your audit, using the ads software we run for clients, which processes them on our behalf. You can revoke the access in the ad platform whenever you like, and ask us to delete what we read at umer@cadral.co.uk. Anything else new on this site will be described here before it goes live, not after.
Your rights
You can ask for a copy of your data, ask for it corrected, or ask for it deleted, at umer@cadral.co.uk. If you are unhappy with how we have handled your information, please tell us first at umer@cadral.co.uk; we will acknowledge your complaint within 30 days. You can also complain to the Information Commission at ico.org.uk, the UK regulator for data protection.
Send us the brief and we will come back with a fixed price, or book twenty minutes and talk it through.
