Legal

Privacy Notice

Last updated: 30 August 2026

Who we are

Human Heartbeat AI is a UK-based consultancy helping owner-led businesses understand where AI belongs in their operations, where it does not, and where human judgement must remain protected.

If you have any questions about how we handle your information, or if you wish to make a data request, please contact us at oscar@humanheartbeatai.co.uk.

What information we collect and why

We collect information in the following contexts. We only collect what is necessary for the purpose described.

Book access

When you unlock the 'Down the AI Rabbit Hole' reading experience, we collect your email address and, optionally, your name. We use this to provide access to the book content and to understand who is reading it. A short access token is stored in your browser's local storage so you do not need to re-enter your email on return visits.

AI Breaking Stories editorial-consent archive

Where you have previously opted in to AI Breaking Stories, we hold your email address, consent version, source edition, subscription status and consent timestamps in a dedicated editorial-consent record. It remains separate from Founder Notes, Book access, Pulse, Academy, Community, OSCAR, payment, client and diagnostic records. AI Breaking Stories is currently free to read on this website and does not collect new daily-email subscriptions. Any future optional weekly digest would require separate, explicit consent and named human approval before delivery.

Pulse interest registration

When you register interest in the Pulse programme, we collect your name, email address, and the answers you provide in the registration form (such as your organisation, what brought you to us, and your areas of interest). We use this to manage the Pulse list, send relevant briefings and guidance, and understand who is interested in the programme. You confirm you'd like us to contact you before submitting the form.

Pulse session booking

When you book a Pulse session, we collect your name, email address, company name (optional), your chosen session time, and your answers to the intake questions. We use this to manage your booking, prepare for your session, and process payment through Stripe. We may also generate a brief session summary using AI tools under internal governance boundaries and human review.

OSCAR Diagnostic purchase and access

When you purchase the OSCAR Diagnostic, payment is handled directly by Stripe. We receive confirmation of your payment and your email address from Stripe after your purchase is verified. We use this to issue your access token, manage your diagnostic, and fulfil the service. We do not store your card details — Stripe handles all payment data.

Execution Sprint purchase

When you purchase an Execution Sprint, the same payment process applies as for the OSCAR Diagnostic. Payment is handled by Stripe. We receive confirmation and your email address after verification. We use this to manage your sprint engagement and fulfil the service.

OSCAR client and admin sessions

Where we create a client session record to manage an OSCAR engagement, we store your name, organisation, and engagement status. These records are created and managed by the Human Heartbeat AI team and are not publicly accessible.

Personalised clarity pages

Where we create a personalised clarity page for outreach purposes, we store the company name, recipient name, sector, and AI-generated content based on publicly available signals. These pages are not indexed by search engines and are only accessible via a direct link. No visitor data is collected on these pages.

Website problem reports

If a page error screen appears and you choose to send a report, we collect the issue category, short note you enter, page path, report time and any optional follow-up email you choose to provide. The report is sent to the Founder through the Manus owner-notification service so the problem can be checked. An optional email is used only to follow up on that report and is not added to a mailing list. We do not automatically include a stack trace, query string, account details, cookies, browser diagnostics or other form data, and we do not create a local database record from this report.

Academy and OSCAR route questions

If you use the Ecosystem page to ask Robbie Lite a question about the Academy learning route, the OSCAR organisational route, or how they connect, we collect the route you choose, the question you write, your reply email and your acknowledgement that Phil may contact you personally and privately if he chooses. Robbie Lite uses the route and question, but never your email address, to prepare an on-screen response. Echo checks the proposed response against the Founder-approved public-response charter. The exchange is stored only in the Founder Private Response Ledger for 90 days, where Phil can review it and may send a personally authored private email. It is not marketing consent, a mailing-list record, an account, a diagnostic, a Pulse entry, an Academy/OSCAR record or an automated campaign. Robbie Lite and Echo cannot access learner, client, payment, Community, private-access or Human Decision Gate information.

AI Worker clarity signal

On the public AI Workers page, you may choose one private clarity signal: whether the explanation made the roles clearer or needs clearer explanation. We send only that choice, the fixed page reference and report time to the Founder through the Manus owner-notification service. We do not collect a name, email address, free-text response, account data, browser diagnostics or a local database record. The signal is not displayed publicly and is not a review or testimonial.

Analytics and site usage

We use Umami, a cookieless analytics tool, to understand how visitors use this website. Umami collects basic information such as page views, referrer, browser type, operating system, and approximate country (derived from your IP address — your IP address itself is not stored by Umami). No cookies are set for this purpose.

Who we may share your information with

We do not sell your information. We may share it with the following categories of third parties where necessary to operate the service:

  • Manus — our website hosting and application platform, which provides the infrastructure this site runs on.
  • Stripe — our payment processor. Stripe handles all card and payment details directly. Human Heartbeat AI does not store your card details.
  • Google Workspace — used for business email and internal administration where applicable.
  • Umami / Manus analytics — our cookieless analytics provider for basic site usage data.
  • S3 / Manus-managed storage — used for file storage where applicable.

Stripe handles card and payment details directly. Human Heartbeat AI does not store, process, or have access to your card number, CVV, or other payment credentials.

AI-supported internal work

AI tools may be used internally to support drafting, analysis, and content generation — for example, in preparing session briefs or generating personalised clarity page content. This work is conducted under internal governance boundaries and is subject to human review before use. We do not use AI tools to make automated decisions about individuals without human oversight.

Your rights

You have the following rights in relation to your personal information:

  • Access — you can ask us what information we hold about you.
  • Correction — you can ask us to correct inaccurate information.
  • Erasure — you can ask us to delete your information in certain circumstances.
  • Restriction — you can ask us to limit how we use your information.
  • Objection — you can object to certain uses of your information.
  • Portability — where applicable, you can ask for your information in a portable format.
  • Withdrawal of consent — where we rely on your consent to use your information, you can withdraw it at any time.

To make a data request, please email oscar@humanheartbeatai.co.uk. We will respond as promptly as we are able.

How long we keep your information

Retention periods are being formalised internally. Until a retention schedule is adopted, we retain records only for as long as needed for the purpose they were collected, legal or accounting requirements, dispute handling, service continuity, and internal governance records. This statement will be updated when a formal retention schedule is adopted.

Complaints

If you are unhappy with how we have handled your information, please contact us first at oscar@humanheartbeatai.co.uk. You can also complain to the Information Commissioner's Office if you are unhappy with how your data is handled.

You’re viewing a legal notice. You can return to the page you were reading or continue browsing the site.

Return to homeBrowse Articles →Cookie Notice