Privacy policy.

Who we are

Make Automations is an AI consultancy based in Bristol, UK, run by Noel. We’re the controller of the personal data described here. For anything privacy-related, email hello@makeautomations.ai.

What we collect and why

• Booking a session. Your name, email, company, website, the answers you give about your business, and your chosen time and time zone. We use it to run the session and prepare for it. Legal basis: contract.
• Payments. Taken by Stripe. We never see or store your card details, only whether the payment went through. Legal basis: contract, and our legal duty to keep financial records.
• Enquiry forms. Talks, podcast guest and WebMCP enquiries collect your name, email and whatever you tell us about the request. We use it to reply. Legal basis: legitimate interests (answering you).
• Course accounts.If you make an account to take a course: your name, email, the courses you’ve bought, which lessons you’ve watched and how far into each video you got (so you can pick up where you left off), and any questions you post under a lesson. Other students on that course see your first name and your question, never your email. Your password is stored scrambled by Supabase; we can’t see it. Legal basis: contract (giving you the course you paid for).
• Course emails.When you buy a course we add your name and email to our student list in MailerLite so we can send you emails about that course, such as a welcome and how to get started. Legal basis: contract. If you tick “email me when new courses come out”, you’re also added to our course news list. Legal basis: consent. Every email has an unsubscribe link.
• Course waitlist. Your name and email. We use them to email you when our courses open, and for nothing else. Every email has an unsubscribe link. Legal basis: consent.
• Emails. If you email us, we keep the conversation so we can reply and follow up.
• Site stats. Vercel Analytics counts page views without cookies or tracking you across sites. Google Analytics loads on every page but only sets cookies if you accept them. Until then it sends Google basic, cookieless signals (such as that a page was viewed), which Google uses to estimate overall visitor numbers. Legal basis: legitimate interests for Vercel and those cookieless signals, consent for Google Analytics cookies.

Cookies

The only cookies we set are Google Analytics ones (_ga and _ga_*), and only after you click “Fine by me”. They tell us which pages people read and roughly where visitors come from. We remember your choice in your browser’s local storage, not a cookie. You can change your mind at any time with Cookie settings, and saying no deletes the Google Analytics cookies.

Who else processes your data

We use a few trusted services to run the site. Each only gets what it needs:

• Vercel hosts the website and provides cookieless analytics.
• Supabase stores bookings, course accounts, progress and course videos.
• Resend sends account emails such as sign-in links and email confirmations.
• Stripe takes payments.
• Make.com receives enquiry form submissions and passes them to us.
• MailerLite stores the course waitlist and student lists, and sends course emails.
• Google provides Google Analytics (cookies only if you accept them).
• Buzzsprout streams podcast audio when you press play.

Some of these providers process data outside the UK. When they do, it’s covered by UK-approved safeguards such as the International Data Transfer Addendum or an adequacy decision.

How long we keep it

• Booking and payment records: six years, because UK tax law requires it.
• Enquiries and emails: up to 12 months after we last spoke, unless you become a client.
• Course waitlist and course emails: until you unsubscribe or ask us to remove you.
• Course accounts and progress: for as long as you have an account. Ask us and we’ll delete it (we keep the payment record for tax, as above).
• Google Analytics data: up to 14 months, then Google deletes it.

Your rights

Under UK GDPR you can ask us to show you the data we hold, correct it, delete it, limit how we use it, object to us using it, or give you a copy to take elsewhere. Where we rely on consent, you can withdraw it at any time. Email hello@makeautomations.ai and we’ll respond within a month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to sort it out first.

Changes

If we change how we handle data, we’ll update this page and the date at the top. Questions? Get in touch.