Privacy policy
Plain English, no burying the important parts. Because you should know exactly what happens to your data.
Last updated 26 September 2026
Who we are
Fordi Group Ltd ("Fordi", "we", "us") operates fordi.ai — an AI-native service agency for UK small businesses. This policy covers the website, the free AI & digital readiness audit, and our services (together, the "Service").
It applies to everyone who uses the Service: visitors, audit users, clients, and businesses we contact by email. For anything in this policy, contact hello@fordi.uk.
What we collect
When you run a free audit: the website address you enter, your chosen industry, and a hashed (never raw) IP address used only for rate limiting.
When you unlock a full report or contact us: your email address, and optionally your first name and business name.
When you book a call: the details you give Cal.com — name, email, and your answers to the booking questions.
When you browse: anonymised usage data (pages visited, device type, region) through our analytics — see the cookies section below.
How we use it
To generate and send your audit report. To reply when you ask us to. To prepare for a call you have booked. To improve the website by understanding how it is used. To send a short series of follow-up emails about your report where you have ticked the consent box — you can opt out at any time.
Business outreach
We sometimes contact UK limited companies and LLPs that have not contacted us, to point out something specific about their business and offer our help. We do this by email and on LinkedIn.
Where the details come from: the company's name, number and address from the public Companies House register, and the name of one director from that same public register. For email, one contact email address published on the company's own website; we read the company's public homepage to write the email. For LinkedIn, the address of that director's LinkedIn profile, which Ricky finds himself. We keep the director's name and that profile address with the company's details, so that we contact the right person. We never buy lists, never guess addresses, and never collect anything else from social media.
Who contacts you: Ricky Bell, by email from ricky@fordi.co.uk, or from his own LinkedIn account. A person reads and sends every message. By email he sends one email and at most three short follow-ups, and stops as soon as you answer. On LinkedIn he sends a connection request first, and a message only if you accept it, with at most two short follow-ups. There are no automatic messages.
Why we may do this: our legitimate interest in telling businesses about work that is relevant to them. We contact limited companies and LLPs only, never sole traders or partnerships. Our written assessment is available on request.
Stopping it: use the unsubscribe link in an email, or reply "stop" by email or on LinkedIn. The company goes on our do-not-contact list at once, and we never contact it again, by email or on LinkedIn.
How long we keep it: details of a company we never contacted are deleted after 90 days. Details of a company we contacted are deleted 12 months after the last contact. The do-not-contact list is kept for good, because deleting it would let us contact you again.
How the AI analysis works
When you run an audit, the publicly visible content of the website you enter is fetched and sent to Anthropic's Claude model for analysis, alongside performance data from Google PageSpeed Insights. Because trust needs specifics:
We send only public page content — never your email, name, or any account data.
Your data is not used to train any AI model. Anthropic does not train on API traffic, and we have no training arrangements with anyone.
The analysis is stored against your audit alone and is never mixed with anyone else's.
Our processors
We run on a small set of services, each processing only what it needs, each bound by its own data processing terms: Vercel (hosting), Neon (database), Resend (email delivery), Sanity (site content), Cal.com (bookings), PostHog, EU region (product analytics), Anthropic (the Claude model that writes the audit analysis and drafts outreach emails), Google PageSpeed Insights (performance measurement), Firecrawl (reading the public homepage you ask us to audit, or of a business we contact) and Google Workspace (the outreach mailbox).
What we never do
We do not sell your data. We do not share it with advertisers. We do not use advertising cookies or cross-site tracking.
Beyond the processors above, we would share data only where the law requires it, or — with advance notice to you — if the business were ever merged or sold.
Cookies and analytics
We use essential cookies for the site to function, and two analytics tools to understand how the site is used: PostHog, hosted in the EU, and Google Analytics. PostHog sets a first-party identifier so a repeat visit counts as one visitor, and session recording is switched off. Google Analytics sets its own cookies and is operated by Google, which may use that data across its own services.
Analytics tells us which pages perform. Because it should tell us that, not who you are.
You can opt out of Google Analytics on any site using Google's browser add-on at tools.google.com/dlpage/gaoptout.
Lawful basis
Consent — for the report email and any follow-up, given via the tick box when you unlock a report. Legitimate interest — for running the audit you requested, anonymised analytics, and rate limiting to keep the free tool available. Legitimate interest also covers business outreach to limited companies and LLPs, described above.
Retention
Audit reports and lead details are kept while they are useful for delivering the service, and reviewed periodically. Booking and billing records are kept for as long as the law requires. Business outreach details follow the periods in the business outreach section.
Ask us to delete your data at any time and it is removed within 30 days, except where retention is legally required.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, receive it in a portable format, and object to or restrict our use of it. Email hello@fordi.uk — we respond to every legitimate request within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).
Changes to this policy
If this policy changes, the update appears here with a new date. If a change is significant and we hold your email address, we will tell you directly before it takes effect.
Contact
Fordi Group Ltd is a private limited company registered in Scotland, company number SC877688.
Registered office: Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, G2 1BP.
Email: hello@fordi.uk. Because a real reply beats a web form.