This Privacy Policy explains how Thriving Colibri Ltd (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit thrivingcolibri.ai (the “Site”), submit one of our forms, use our free tools, or get in touch with us.
We are committed to protecting your privacy and handling your data openly. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
For the purposes of data protection law, the data controller is:
Thriving Colibri Ltd
68 Filton Road, Bristol, BS7 0PB, United Kingdom
Company registration number: 16548767
Email: hello@thrivingcolibri.ai
Phone: 07448 311 465
If you have any questions about this policy or how we handle your data, email us at hello@thrivingcolibri.ai.
2. The personal data we collect
We only collect data we actually need. Depending on how you use the Site, that may include:
Information you give us directly
- Contact and enquiry details - your name, email address, phone number, business name, and anything else you choose to include when you contact us or fill in a form.
- Free marketing audit submissions - your answers to the audit questions and the email address you give us so we can send your results.
- AI readiness survey submissions - your answers to the survey questions and the email address you give us so we can send your scored output.
- Booking and call details - when you arrange a call with us, the information needed to schedule it (name, email, and any notes you add). Calls are held over Google Meet.
- Email sign-ups - if you opt in to hear from us, the email address (and any name) you provide.
Information we collect automatically
- Usage and device data - when you allow analytics and advertising cookies, we collect information such as your IP address, browser type, device, pages visited, referring source, and how you interact with the Site. See our Cookie Policy for the full detail.
We do not intentionally collect special category data (such as health, ethnicity, or religious belief). Please don’t include sensitive information in free-text form fields.
3. How we use your data and our lawful bases
Under UK GDPR we must have a lawful basis for processing your data. Here’s what we do and why:
| What we do | Why | Lawful basis |
|---|---|---|
| Respond to your enquiry and follow up | To answer your question and discuss working together | Legitimate interests (responding to people who contact us); Steps prior to a contract where relevant |
| Send your marketing audit or AI readiness survey results | To deliver the free output you requested | Consent / performance of your request |
| Schedule and run booked calls | To arrange the meeting you asked for | Legitimate interests / steps prior to a contract |
| Send marketing emails (newsletters, offers, useful content) | To keep you updated where you’ve opted in | Consent (you can withdraw at any time) |
| Measure and improve the Site with analytics | To understand what’s working and improve the experience | Consent (via the cookie banner) |
| Run and measure advertising (Google Ads, Meta) | To show relevant ads and measure their performance | Consent (via the cookie banner) |
| Keep records and meet legal obligations | To run the business responsibly and comply with the law | Legitimate interests / legal obligation |
Where we rely on legitimate interests, we’ve weighed our interest in running and growing the business against your rights, and we only proceed where your rights don’t override that interest.
4. Cookies, analytics, and advertising
We use cookies and similar technologies for essential site function, analytics, and advertising. Analytics and advertising tags - including Google Analytics, Google Ads, and the Meta (Facebook) Pixel - are non-essential and load only after you give consent through our cookie banner.
We use Google Consent Mode v2, which means these tags respect your choices: until you consent, they are set to a denied state and don’t store or share identifying cookies.
You can accept, reject, or change your cookie choices at any time. Full detail of every cookie and tag we use is in our Cookie Policy.
5. Who we share your data with
We don’t sell your personal data. We share it only with trusted service providers (“processors”) who help us run the Site and our business, and only as far as needed. These currently include:
- Vercel - hosts and serves the website.
- Supabase - securely stores form, audit, and survey submissions in our database.
- Resend - sends transactional emails (for example, your audit or survey results).
- Kit (ConvertKit) - manages our email marketing list and sends marketing emails where you’ve opted in.
- Google - Google Analytics (site analytics) and Google Ads (advertising and conversion measurement), where you’ve consented, and Google Meet (Google Workspace) to host video calls you arrange with us.
- Meta Platforms - the Meta (Facebook) Pixel for advertising and conversion measurement, where you’ve consented.
Each processor handles your data under a contract that requires them to keep it secure and use it only on our instructions.
We may also disclose data where we’re legally required to (for example, to comply with a court order or regulatory request), or to protect our rights, property, or safety.
6. International transfers
Some of our providers (such as Vercel, Supabase, Resend, Kit, Google, and Meta) may process data on servers outside the UK, including in the United States. Where data leaves the UK, we rely on appropriate safeguards recognised under UK data protection law - such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK extension to the EU–US Data Privacy Framework - so your data stays protected to UK standards.
7. How long we keep your data
We keep personal data only as long as we need it:
- Enquiries and form/audit/survey submissions - kept while we’re in contact and for a reasonable period afterwards, then deleted or anonymised.
- Marketing list data - kept until you unsubscribe or ask us to remove you.
- Records we must keep by law - kept for as long as the law requires.
When we no longer need your data, we delete it securely or anonymise it.
8. Your rights
Under UK GDPR you have the right to:
- Be informed about how we use your data (this policy).
- Access the personal data we hold about you.
- Rectification - have inaccurate data corrected.
- Erasure - ask us to delete your data (“right to be forgotten”).
- Restrict processing in certain circumstances.
- Data portability - receive your data in a portable format.
- Object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent at any time where we rely on consent (this won’t affect processing already carried out).
To exercise any of these, email hello@thrivingcolibri.ai. We’ll respond within one month. There’s no charge unless a request is clearly unfounded or excessive.
You can unsubscribe from marketing emails at any time using the link in any email, or by emailing us.
9. How to complain
If you’re unhappy with how we’ve handled your data, please contact us first so we can put it right. You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
10. Security
We take reasonable technical and organisational measures to protect your data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, but we work to protect your information and keep our practices under review.
11. Children
The Site and our services are aimed at businesses and are not directed at children under 16. We don’t knowingly collect data from children. If you believe a child has given us personal data, contact us and we’ll delete it.
12. Changes to this policy
We may update this policy from time to time. When we do, we’ll change the “Last updated” date at the top. Significant changes will be made clear on the Site. Please check back occasionally.
13. Contact us
Thriving Colibri Ltd
68 Filton Road, Bristol, BS7 0PB, United Kingdom
Email: hello@thrivingcolibri.ai· Phone: 07448 311 465