Who We Are

AI-Human Growth Systems™ is a research-led systems-development business powered by The Digital Takeover®. We research commercial and lead-generation problems, design and build bespoke AI-Human operating systems for individual businesses, and develop our own operating systems and technology, including Prospexto™.

Throughout this Privacy Policy, “AI-Human Growth Systems™”, “we”, “us” and “our” refer to the AI-Human Growth Systems business and, where relevant, The Digital Takeover® as the organisation responsible for operating the business.

This Privacy Policy applies to our main websites, research activity, enquiries, discovery work, bespoke projects, owned operating systems, digital services and associated activities unless a separate product-specific privacy notice states otherwise.

Our Role When Processing Personal Information

For our own websites, enquiries, research, marketing, account administration and business operations, we determine why and how personal information is used and will generally act as the data controller for that processing.

During a bespoke systems-development project, a client may provide us with business, prospect, customer or operational information so that we can research, design, configure, test, implement or support an agreed operating system. Where we process personal information only on the client’s documented instructions, the client may act as the controller and we may act as its processor.

The precise roles, responsibilities, permitted uses of data, confidentiality requirements, access arrangements and any required data-processing terms will be defined in the relevant project agreement or other written terms.

Data Protection Framework

Where applicable, we process personal information in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, the Data (Use and Access) Act 2025, the Privacy and Electronic Communications Regulations 2003 as amended, and other applicable UK data-protection and privacy legislation.

We aim to handle personal information lawfully, fairly and transparently, collect only information that is relevant to a defined purpose, and retain it only for as long as reasonably necessary for that purpose or to meet legal, contractual or security requirements.

Information We May Collect

Identity & Contact Information

• Name.
• Business email address.
• Telephone number.
• Job title or professional role.
• Business or organisation name.
• Business website address.
• Postal or business address where provided or legitimately obtained.
• Other contact information you choose to provide.

Business & Project Information

• Enquiries, discovery-call information and support requests.
• Information about lead-generation, sales or business-development processes.
• Project requirements, workflow information and documented business bottlenecks.
• Research submissions, interviews, observations and feedback.
• CRM, prospect or operational information supplied for an agreed project where appropriate.
• Account, subscription, licence or purchase information for systems and services we provide.
• Information entered into our operating systems, forms or connected services.

Technical & Usage Information

• IP address.
• Browser, device and operating-system information.
• Pages visited and interactions with our websites.
• Account, system and service usage information where applicable.
• Cookies and similar technologies.
• Performance, security, error and diagnostic logs.

We do not ordinarily ask individuals to provide special-category personal data or criminal-offence data as part of normal enquiries, research or lead-generation activity. Please do not provide this type of information unless it is genuinely required for an agreed purpose and appropriate arrangements have been put in place.

Where Information Comes From

We may obtain personal information directly from you when you contact us, book a call, complete a form, create an account, purchase or use a service, participate in research, communicate with us, or provide information as part of a project.

For business research and B2B lead-generation activity, we may also obtain professional or business-contact information from sources such as company websites, professional directories, public registers, professional profiles, publicly available business information, commercial data providers, or information supplied by a client for an agreed project.

Where personal information is obtained from another source, we will only use it where we have an appropriate lawful basis and will apply the relevant data-protection requirements to that use.

How We Use Information and Our Lawful Bases

We use personal information only for defined business purposes and under an appropriate lawful basis. Depending on the activity, this may include:

• Responding to enquiries and discovery requests — where necessary to take steps at your request before entering a contract, to perform a contract, or for our legitimate interests in responding to genuine business enquiries.
• Designing and delivering bespoke systems-development projects — where necessary to perform an agreed contract or, where we act for a client, in accordance with the client’s documented instructions and applicable data-processing terms.
• Providing Prospexto™ and other operating systems or digital services — where necessary to provide the service, administer an account, fulfil contractual obligations, maintain security and support users.
• Business and industry research — where we have a legitimate interest in understanding commercial problems, markets, operating processes and opportunities, provided those interests are not overridden by the rights and interests of affected individuals.
• B2B prospect and professional-contact research — where we have a legitimate interest in conducting proportionate business-development activity and the use is lawful, relevant and reasonably expected in the circumstances.
• Improving systems, services and operations — where this is necessary for our legitimate interests in improving reliability, usability, research quality and commercial effectiveness.
• Security, fraud prevention and system integrity — where necessary for our legitimate interests in protecting our websites, systems, users and business, or to meet a legal obligation.
• Marketing communications — where consent is required and has been provided, or where another lawful basis and the applicable electronic-marketing rules permit the communication.
• Legal, tax, accounting and regulatory requirements — where processing is necessary to comply with a legal obligation or to establish, exercise or defend legal rights.

Where we rely on legitimate interests, we consider the purpose of the processing, whether the use is necessary, what an individual would reasonably expect, and the potential effect on their rights and interests.

AI-Human Systems and AI Processing

Our operating systems may use artificial intelligence to support activities such as organising information, researching businesses, analysing evidence, assisting qualification, generating structured outputs, supporting workflow decisions or preparing suggested content.

Our approach is AI-Human. AI is used to support defined parts of an operating process while human judgement, commercial context and appropriate approval remain part of the wider system design.

Where AI functionality requires information to be processed by an approved technology provider, only information appropriate to the relevant function should be used and access should be limited according to the service or project design.

Where a particular product or project involves automated decision-making or profiling that requires additional information under data-protection law, the relevant individuals will be provided with any additional notice required for that processing.

Bespoke Projects, Client Data and Confidentiality

A bespoke project may require access to selected business systems, CRM information, workflows, prospect information, operational records or other data needed to understand and build the agreed solution.

Access should be limited to what is reasonably necessary for the documented project scope. The project agreement may set additional requirements covering confidentiality, authorised users, data access, testing, security, retention, deletion, ownership and third-party technology.

We do not acquire ownership of a client’s personal information merely because it is made available to us for an agreed project. Where we process that information on the client’s behalf, we use it only for the authorised purposes and subject to the agreed terms.

Cookies, Analytics and Similar Technologies

Our websites and digital services may use cookies and similar technologies to provide essential functionality, remember preferences, maintain secure sessions, understand website usage, diagnose technical issues, improve performance and support security.

Where consent is required for non-essential cookies or similar technologies, we will seek that consent through the relevant cookie controls. You can also use your browser settings to restrict or remove cookies, although some website or service functions may be affected.

Further information about particular analytics, advertising or tracking technologies may be provided through our cookie controls or an additional cookie notice where appropriate.

Third-Party Services and International Processing

We may use third-party providers to support website hosting, cloud infrastructure, payment processing, communications, analytics, security, CRM connectivity, AI functionality, system monitoring and other technology required to operate our business and services.

These providers may process personal information only to the extent required for the relevant service and subject to the contractual, confidentiality, security and data-protection arrangements appropriate to their role.

Some providers may process information outside the United Kingdom. Where personal information is transferred internationally and UK data-protection law requires safeguards, we will use an appropriate lawful transfer mechanism or other recognised safeguard applicable to the transfer.

Third-party products, platforms and integrations may also operate under their own privacy terms where they act independently from us.

Data Sharing

We do not sell or rent personal information to third parties for their own marketing purposes.

We may share personal information where reasonably necessary with service providers, professional advisers, payment providers, technology partners, hosting and cloud providers, security providers, or other organisations involved in delivering an authorised service or project.

Information may also be disclosed where required by law, regulation, court order, a competent authority, or where reasonably necessary to establish, exercise or defend legal rights.

Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or subsequently lawfully used.

Retention periods may depend on the type of information, the nature and duration of a customer or project relationship, account requirements, security needs, legal or tax obligations, dispute-resolution requirements, research needs and any written project or contractual terms.

When personal information is no longer required, it will be deleted, anonymised or otherwise disposed of as appropriate.

Data Security

We use technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss, misuse or destruction.

Depending on the system or project, measures may include controlled access, authentication, permission management, secure hosting or cloud infrastructure, data-minimisation practices, logging, backups, software maintenance, security monitoring and appropriate controls around connected services.

Security is considered as part of system design, but no internet-based service, software system or method of electronic storage can be guaranteed to be completely secure.

Your Data Protection Rights

Your rights depend on the circumstances and the lawful basis used for the processing. Subject to applicable law, you may have the right to:

• Ask for access to personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask for personal information to be erased in certain circumstances.
• Ask us to restrict processing in certain circumstances.
• Object to processing based on legitimate interests.
• Object to direct marketing at any time.
• Withdraw consent where processing relies on consent, without affecting earlier lawful processing.
• Receive certain personal information in a portable format where the right to data portability applies.
• Raise concerns about certain automated decision-making where applicable.

We may need to verify your identity before acting on a rights request. Some rights are subject to legal conditions, exemptions or limitations, and we will explain our position where a request cannot be fulfilled in full.

Data Protection Complaints

If you believe we have handled your personal information incorrectly, you can raise a data-protection complaint with us using the official contact details on the AI-Human Growth Systems™ website.

We will consider the complaint, investigate it as appropriate and provide an outcome without unjustifiable or excessive delay.

You also have the right to raise a concern or complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. We recommend giving us the opportunity to address the concern first where appropriate.

External Links and Third-Party Platforms

Our websites, systems and content may contain links to third-party websites, software, platforms or services. We do not control the independent privacy practices, security or content of third parties.

Where you choose to use a third-party service, integration or external website, you should review the privacy information and terms provided by that organisation.

Changes to This Privacy Policy

We may update this Privacy Policy when our business model, systems, services, research activity, technologies, data-processing practices or legal obligations change.

The current version will be published on this website with an updated revision date. Where a change materially affects how existing personal information is used, we will take any additional steps required by applicable data-protection law.

Contact

If you have a question about this Privacy Policy, want to exercise a data-protection right, or want to raise a data-protection complaint, please contact us through the official AI-Human Growth Systems™ contact page:

Contact AI-Human Growth Systems™

Please provide enough information for us to understand and respond to your request. Do not send passwords, security credentials or unnecessary sensitive information.

Governing Law

This Privacy Policy is intended to operate in accordance with applicable data-protection law in the United Kingdom. Nothing in this Privacy Policy limits any statutory rights or remedies available to individuals under applicable law.