Legal

Privacy Notice

How we collect, use and protect personal data when you visit our website, get in touch, subscribe to our newsletter or work with us.

Last updated 14 October 2026
Privacy Notice Cookie Policy Website Terms
01

Who we are

Requisite is the trading name of Requisite Intelligence Ltd, a company registered in England and Wales (company number 17171143) and part of AMJOA Ltd (company number 16743103). We provide AI advisory, adoption, governance and delivery services to UK businesses.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Requisite Intelligence Ltd is the controller of the personal data described in this notice, except where we say otherwise in section 03.

Registered office
5 Giffard Court, Millbrook Close, Northampton, Northamptonshire, United Kingdom, NN5 5JF
ICO registration
ZC155884
VAT registration
GB 520 2129 47

We are not required to appoint a Data Protection Officer. Questions about this notice or your personal data can be sent to the email address above.

02

What personal data we collect

Website visitors

Technical data recorded when your browser requests our pages, such as IP address, browser type, device, pages requested, date and time, and referring address. We also store a small preference on your device about our newsletter prompt, as described in our Cookie Policy.

People who contact us

When you send an enquiry, request a briefing, download a document or email us: your name, work email address, organisation or firm name, firm website, phone number if you give it, and what you tell us in your message. When preparing a complimentary briefing, we also use publicly available information about your firm.

Newsletter subscribers

Your email address, the page you subscribed from, and a record of when you subscribed and the wording you agreed to.

Clients

Contact details of the people we work with; engagement records such as proposals, contracts, statements of work, invoices and payment records; information provided to us in the course of an engagement, such as system configuration details, policies, organisation charts, process documentation and records of workshops and meetings; and feedback or case study material, collected only with your agreement.

IT partners

Contact details of people at IT providers we work with or discuss working with, and records of our correspondence and arrangements.

We do not ask for special category data, such as health information, through our website. Please avoid including confidential or sensitive information in our forms.

03

How we use it and why

We only use personal data where we have a lawful basis under Article 6 of the UK GDPR.

Purpose
Lawful basis
Detail
Responding to enquiries
Legitimate interests
Replying to business enquiries and discussing a possible engagement or partnership.
Preparing a complimentary briefing
Legitimate interests
Using what you send us and public information about your firm to prepare a briefing you have requested.
Sending a document you request
Legitimate interests
Providing a datasheet or similar document and following up about it. We do not add you to our newsletter unless you subscribe.
Delivering our services
Contract
Processing needed to perform our agreement with you or your organisation.
Invoicing and accounts
Contract; legal obligation
Billing, payment and meeting tax and accounting requirements.
Sending our newsletter
Consent
Only where you have subscribed. You can unsubscribe at any time.
Working with IT partners
Legitimate interests
Managing referral, subcontracting and joint delivery arrangements.
Running and securing the website
Legitimate interests
Delivering pages, diagnosing faults and preventing misuse.
Legal compliance
Legal obligation
Meeting our obligations under applicable law and regulation.

When we act for your organisation

Some services involve processing information about a client's own staff, for example AI usage information from the platforms included in our ongoing service, or learning records. In those cases your organisation is normally the controller and we act as its processor, under the terms of our agreement with it. Questions about that processing should go to your employer in the first instance.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

04

Who we share it with

We do not sell, rent or trade personal data. We share it only where needed, with:

Technology providers
Website hosting (Vercel Inc.), website form delivery (Web3Forms), customer relationship management and newsletter email (HubSpot, Inc.), and our email and document storage providers. Each processes data on our behalf under data processing terms.
Delivery specialists
Trusted developers, consultants and specialists we engage on a client's work, bound by confidentiality and given only what the work requires.
Your IT partner
Where an engagement involves your internal IT team or external IT partner, as agreed with you.
Platform providers
Providers of third-party platforms included in our services, such as Lumia and ClipTraining, where your organisation uses them.
AMJOA Ltd
Our parent company, for group administration and financial reporting.
Professional advisers
Solicitors, accountants and auditors, bound by professional duties of confidentiality.
Authorities
Regulators, HMRC, law enforcement and the courts, where the law requires it.

Typefaces

Our website loads its typefaces from Google Fonts. When a page loads, your browser connects to Google's servers, which receive your IP address and browser details. Google's use of that information is described in its own privacy policy.

05

International transfers

Some of our technology providers, including Vercel, Web3Forms and HubSpot, may process data outside the United Kingdom, for example in the United States. Our HubSpot account is hosted in its European Union data centre. Where they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

06

How long we keep it

Data
Retention
Website server logs
Held by our hosting provider, Vercel, for the short period set by our plan (no more than 30 days), then deleted
Enquiries, briefing and document requests
24 months from our last meaningful contact
Newsletter subscriptions
Until you unsubscribe; the record of your consent is kept for 12 months after that
Client contractual and financial records
7 years from the end of the engagement, for tax and legal purposes
Service delivery information
The length of the engagement plus 24 months, unless the law requires longer or we agree otherwise with the client
07

Your rights

Under the UK GDPR you have the right to:

Access
Obtain a copy of the personal data we hold about you.
Rectification
Ask us to correct inaccurate or incomplete data.
Erasure
Ask us to delete your data where there is no compelling reason to keep it.
Restriction
Ask us to limit how we use your data in certain circumstances.
Portability
Receive data you gave us in a structured, machine-readable format.
Objection
Object to processing based on legitimate interests, including direct marketing.
Withdraw consent
Where we rely on consent, withdraw it at any time, for example by unsubscribing from our newsletter.

To exercise any of these rights, email hello@requisiteintelligence.com. We will respond within one month, or tell you within that time if we need longer because a request is complex.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

08

Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. These include encryption in transit and at rest, access controls, regular security reviews and staff awareness. Requisite Intelligence Ltd is Cyber Essentials certified.

09

Changes to this notice

We may update this notice from time to time. The current version is always available on this page, with the date it was last updated. Where changes are material, we will tell the people affected directly where we can.