The plain-English version.

AI Sustained is a personal editorial project run by Kevin Clubb. This note explains what data is collected when you visit the site or subscribe, why, and what control you have. It's written to be readable; the short version is that I collect as little as possible and never sell it.

Who's responsible

The data controller is Kevin Clubb, operating as AI Sustained (ai-sustained.com), United Kingdom. You can reach me at [email protected] for anything in this note.

Email subscription (HubSpot)

When you subscribe, your email address, and anything else you choose to enter, is stored and processed in HubSpot, which I use as my CRM and email platform. I use it to send you new editorials and case studies as they're published, plus occasional updates, promotions and new products. The legal basis is your consent, given when you submit the form. You can withdraw it at any time using the unsubscribe link in any email, or by emailing me.

HubSpot may set cookies to record that you submitted a form and to measure email engagement (opens and clicks). HubSpot, Inc. processes data in line with its own privacy policy and standard data-protection terms.

Ask a question (email, WhatsApp, live chat)

The learn hub (ai-sustained.com/learn) invites you to ask me questions three ways. Each is optional, and you choose which to use:

• Email: if you email [email protected], your email address and message are stored in my inbox and in HubSpot alongside your contact record, so I can reply and remember the conversation.
• WhatsApp: if you message the AI Made Simple WhatsApp number, I see your WhatsApp profile name and phone number, and the conversation is stored in WhatsApp. WhatsApp (Meta) processes your messages under its own privacy terms. I don't add your number to any marketing list.
• Live chat: the chat widget runs on HubSpot Conversations. It sets a cookie so the conversation follows you between pages (you're asked to agree before the chat starts), and the transcript is stored in HubSpot so I can reply properly. Asking a question in chat does not subscribe you to anything.

The legal basis for all three is legitimate interest: you asked me a question, I need your message and reply address to answer it. Email me to have any conversation deleted.

The AI Survival Score (learn hub)

If you take the AI Survival Score at ai-sustained.com/learn/score, your quiz answers are scored in your browser. When you enter your first name and email to see the breakdown, I store in HubSpot: your name, email, your overall score, your result tier and your weakest pillar. I use this to send you your pillar-by-pillar report and practical follow-up emails from AI Sustained.

If you retake the quiz, your latest score replaces the previous one on your contact record. HubSpot holds the history of your scores behind the scenes; it isn't currently displayed when you retake, but you can email me and I'll send you your history on request. Aggregate, anonymised score data (never your name or email) may be used in AI Sustained editorial content, for example how scores are distributed across everyone who has taken it. That comparison is what powers the "how you compare to others" part of your result.

The legal basis is your consent, given when you submit the form. Every email has an unsubscribe link. You can also email me to have your score data deleted entirely.

The "Want more details?" form (learn hub)

If you use the sign-up form on the learn page, I store your first name and email in HubSpot, marked as having requested the AI Made Simple ways-of-working details, and subscribe you to "AI Made Simple updates". I use this to send you the details you asked for and occasional related updates, and nothing else.

The legal basis is your consent, given via the tick box on the form. Every email has an unsubscribe link, and unsubscribing stops these emails immediately.

Booking and sessions

If we arrange a session together, the booking runs through HubSpot Meetings, which stores your name, email and the appointment details alongside your contact record. Session notes I keep are limited to what's needed to prepare for and follow up your sessions, and are never shared. Payment details are handled by the payment provider named at booking. I never see or store card numbers.

Nothing runs until you choose

When you first arrive, a banner asks what you're willing to share. Until you answer, every non-essential cookie and script is blocked — enforced technically through Google Consent Mode, not just promised. Rejecting everything takes one click, in a button identical in size and prominence to the accept button, and the site behaves exactly the same afterwards.

You can change your mind whenever you like using the Cookie choices link in the footer of every page. Your decision is remembered for six months, then I ask again.

Website analytics (Google Analytics)

With your consent, this site uses Google Analytics 4 to understand, in aggregate, which articles are read and how people arrive. It collects approximate location, device, browser and the pages you view. It helps me write more of what's useful and retire what isn't. I do not use it to identify you personally, and it does not run at all if you decline.

Session recording (Microsoft Clarity)

With your consent, I use Microsoft Clarity to record anonymised session replays and heatmaps — where people scroll, what they click, and where they stop reading. Text you type into any field is masked before it leaves your browser, so I never see it. This exists so I can tell which articles lose people halfway down, which is not something aggregate analytics will tell you. Decline and no recording happens.

Advertising

The site currently carries no advertising and no advertising pixels. If I add TikTok or Meta pixels to measure whether social posts actually bring anyone here, they will sit behind the marketing toggle in the cookie banner, off by default, and this page will be updated before they go live. Any sponsored content will be clearly labelled, and no advertiser will be given your personal data. The position on partnerships is set out on the advertising page.

Cookies

Four categories, three of them optional:

• Strictly necessary: remembers your cookie choice and keeps the site secure. Always on, exempt from consent under PECR, holds nothing that identifies you.
• Audience measurement: set by Google Analytics. Optional.
• Session recording: set by Microsoft Clarity. Optional.
• Marketing: advertising pixels. Optional, and not currently active.
• Form and chat: set by HubSpot when you interact with the subscribe form, the AI Survival Score, the “Want more details?” form or the booking pages, and if you agree to start a live chat so the conversation follows you between pages. You're asked before these are set.

You can also block or delete cookies in your browser settings; the site will still work.

Legal basis, plainly

Cookies and similar technologies are governed by the Privacy and Electronic Communications Regulations (PECR), which require consent for anything not strictly necessary. Personal data is governed by UK GDPR. I rely on consent for analytics, session recording and any future pixels.

Narrow exemptions to consent exist for statistical purposes. I've chosen not to rely on them, because the tools I use send data to third parties who process it for their own purposes too. Consent is the honest position.

Other services I link to

• Substack: long-form posts and podcasts live there under Substack's own privacy terms.
• Cloudflare: hosts the site and processes basic request logs for security and delivery.
• Social platforms: LinkedIn, TikTok and Facebook links take you to those platforms, which track you under their own policies.

How long data is kept

Subscriber, score, opt-in and chat data is kept in HubSpot until you unsubscribe or ask me to delete it. Question emails and WhatsApp messages are kept as long as needed to deal with the conversation. Analytics data is retained according to Google Analytics' standard retention window.

Your rights

Under UK GDPR you can ask to access, correct, export or delete the personal data I hold about you, and object to or restrict its processing. Email [email protected] and I'll action it. If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office (ICO).