Privacy Policy

Last Updated: 18th October 2025

1. Introduction

Thriving Colibri Ltd (“we”, “us”, “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website at thrivingcolibri.ai (the “Site”) and our services.

We are a “data controller” under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This means we are responsible for deciding how we hold and use personal information about you.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at hello@thrivingcolibri.ai.

2. Information We Collect

2.1 Information You Provide to Us

We collect personal information that you voluntarily provide to us when you:

Contact us via our contact form:

  • Name
  • Email address
  • Phone number
  • The content of your enquiry or message

This information is stored in our WordPress CMS (Content Management System).

Book a discovery call:

  • Name
  • Email address
  • Phone number
  • Preferred date and time
  • Any additional information you provide in the booking form

This information is collected and stored via our online booking system (such as Calendly).

Subscribe to our marketing communications:

  • Name
  • Email address
  • Your communication preferences

Engage our services:

  • For information about data collected when you become a client or attend our workshops, please refer to the Service Agreement provided when you book our services.

2.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information about your device and how you interact with our Site:

Technical information:

  • IP address
  • Browser type and version
  • Operating system
  • Device type (desktop, mobile, tablet)
  • Time zone setting
  • Pages visited and time spent on pages
  • Referring website addresses

Cookies and tracking technologies:

We use cookies and similar tracking technologies to collect information about your browsing activity. For detailed information about the cookies we use, please see Section 5 below and our Cookie Policy.

We use the following tracking technologies:

  • Google Analytics – to understand how visitors use our Site
  • Facebook Pixel – to measure the effectiveness of our advertising
  • Google Ads – to track conversions and optimise our advertising campaigns

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 To Respond to Your Enquiries

  • To respond to your contact form submissions
  • To communicate with you about your enquiry
  • To provide information you have requested

Legal basis: Legitimate interests (to respond to enquiries and provide information about our services)

3.2 To Schedule and Manage Discovery Calls

  • To schedule free discovery calls
  • To send you booking confirmations and reminders
  • To communicate with you before and after the call

Legal basis: Legitimate interests (to manage bookings and provide our services effectively)

3.3 To Send Marketing Communications

  • To send you newsletters, tips, updates, and offers about our services
  • To keep you informed about developments in AI training

We will only send you marketing communications if you have given us your explicit consent or if you are an existing client and we are marketing similar services to those you have previously enquired about or purchased.

Legal basis: Consent (or legitimate interests for existing clients)

You can withdraw your consent or opt out of marketing communications at any time by:

  • Clicking the “Unsubscribe” link in any marketing email we send
  • Contacting us at hello@thrivingcolibri.ai

3.4 To Improve Our Site and Services

  • To understand how visitors use our Site
  • To improve the functionality and user experience of our Site
  • To analyse trends and gather demographic information

Legal basis: Legitimate interests (to improve our Site and services)

3.5 To Comply with Legal Obligations

  • To comply with applicable laws and regulations
  • To respond to legal requests or prevent fraud
  • To maintain records as required by HMRC and other regulatory bodies

Legal basis: Legal obligation

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. However, we may share your information with the following categories of recipients:

4.1 Service Providers

We use trusted third-party service providers to help us operate our Site and deliver our services. These providers process personal data on our behalf and are contractually obligated to protect your data.

Our service providers include:

  • WordPress hosting provider – to host our website and contact form data
  • Booking system provider (e.g., Calendly) – to manage discovery call bookings
  • Email marketing service provider – to send marketing communications (when you have consented)
  • Google Analytics – to analyse website traffic and user behaviour
  • Facebook – to measure advertising effectiveness via Facebook Pixel
  • Google Ads – to track advertising conversions and optimise campaigns
  • Payment processors (e.g., Stripe, PayPal) – for payment processing when you engage our services (handled outside the website via separate agreements)

4.2 Legal Requirements

We may disclose your personal information if required to do so by law, or in response to valid requests by public authorities (e.g., a court, government agency, or law enforcement).

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have regarding your personal information.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They help websites recognise your device and remember information about your visit.

5.2 Types of Cookies We Use

We use the following types of cookies on our Site:

Essential cookies:

  • Required for the Site to function properly
  • Enable core functionality such as security and accessibility
  • Cannot be disabled

Analytics cookies:

  • Google Analytics – helps us understand how visitors interact with our Site
  • Collects anonymous information about pages visited, time spent, and user behaviour

Marketing cookies:

  • Facebook Pixel – tracks conversions from Facebook advertisements
  • Google Ads – tracks conversions from Google advertisements
  • Helps us measure the effectiveness of our advertising campaigns

5.3 Managing Your Cookie Preferences

Cookie consent tool:

We use Cookiebot as our cookie management platform. When you first visit our Site, you will see a cookie consent banner that allows you to:

  • Accept all cookies
  • Reject non-essential cookies
  • Customise your cookie preferences

You can change your cookie preferences at any time by clicking on the cookie management tool available on our Site.

Browser settings:

You can also manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Site.

For instructions on managing cookies in your browser, please refer to your browser’s help documentation:

  • Chrome: Settings > Privacy and security > Cookies
  • Firefox: Settings > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Manage Website Data
  • Edge: Settings > Cookies and site permissions

For more information about cookies and how to manage them, visit www.allaboutcookies.org.

5.4 Do Not Track Signals

Our Site does not currently respond to “Do Not Track” signals from browsers.

6. International Data Transfers

Some of our third-party service providers are based outside the United Kingdom and the European Economic Area (EEA), which means your personal data may be transferred to, stored, or processed in other countries.

Countries involved:

  • United States – Google Analytics, Google Ads, Facebook Pixel, Calendly, and some email marketing providers store data in the US

When we transfer your personal data outside the UK/EEA, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO)
  • Adequacy decisions where the destination country is deemed to provide adequate data protection
  • Other approved transfer mechanisms as permitted under UK GDPR

Our service providers (Google, Facebook, Stripe, PayPal, etc.) comply with applicable data protection laws and have implemented appropriate safeguards for international data transfers.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected or as required by law.

Retention periods:

  • Contact form enquiries: Until your enquiry is resolved, plus 6 months
  • Discovery call bookings: Until the call takes place, plus 6 months (unless you become a client or subscribe to marketing)
  • Marketing subscribers: Until you unsubscribe or request deletion
  • Client records: 7 years from the end of our business relationship (to comply with HMRC and accounting requirements)
  • Website analytics data: Up to 26 months (Google Analytics default retention)

After the retention period expires, we will securely delete or anonymise your personal information.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

8.1 Right of Access

You have the right to request a copy of the personal information we hold about you.

8.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal information about you.

8.3 Right to Erasure (“Right to be Forgotten”)

You have the right to request that we delete your personal information in certain circumstances, such as:

  • The data is no longer necessary for the purposes for which it was collected
  • You withdraw your consent (where consent was the legal basis)
  • You object to the processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Please note that we may need to retain certain information to comply with legal obligations (e.g., HMRC record-keeping requirements).

8.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to request that we transfer it to another data controller.

8.6 Right to Object

You have the right to object to our processing of your personal information based on legitimate interests. You also have an absolute right to object to processing for direct marketing purposes.

8.7 Right to Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

8.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: hello@thrivingcolibri.ai
Address: Thriving Colibri Ltd, 68 Filton Road, Bristol, BS7 0PB

We will respond to your request within one month. In some cases, we may need to verify your identity before fulfilling your request.

8.9 Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
 Website: www.ico.org.uk
 Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

9. Data Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

Security measures include:

  • Secure Socket Layer (SSL) encryption for data transmitted via our Site
  • Regular security updates and patches to our systems
  • Access controls to limit who can access personal data
  • Secure password protection
  • Regular backups of data

However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

10. Children’s Privacy

Our Site and services are not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@thrivingcolibri.ai, and we will delete such information.

11. Third-Party Websites

Our Site may contain links to third-party websites. This Privacy Policy applies only to our Site. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the “Last Updated” date at the top of this policy.

If we make material changes to this Privacy Policy, we will notify you by posting a prominent notice on our Site.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

13. Service-Specific Data Processing

This Privacy Policy covers data collected through our website only. When you engage our services (such as AI training workshops), additional data processing will occur as described in the Service Agreement provided at the time of booking.

The Service Agreement will provide specific details about:

  • What data we collect during workshops
  • How we use workshop-related data
  • How long we retain client records
  • Any additional data sharing arrangements

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Thriving Colibri Ltd
Company Registration Number: 16548767
Email: hello@thrivingcolibri.ai
Address: 68 Filton Road, Bristol, BS7 0PB, United Kingdom
Website: https://thrivingcolibri.ai


By using our Site, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal information as described herein.