AI adoption with control
  • Services
    • AI Opportunity & Assurance Sprint
    • Governed AI Pilot & Integration
    • AI Governance Operating Model & Evidence Baseline
    • AI Procurement & Supplier Assurance
    • AI Literacy, Leadership & Role-Based Enablement
    • Managed Assurance, Reassessment & Evidence Operations
    • Specialist review Agentic AI Security & Runtime Review
  • Public Sector
  • Evidary
  • Insights
  • About
  • Contact
  • Discuss a project

Legal

Privacy Policy

This policy explains how Evidary AI Ltd, trading as DDAI, handles personal data collected through this website and DDAI enquiries.

Last updated: 17 July 2026

Who we are

Evidary AI Ltd is a private limited company registered in England and Wales under company number 17309245. DDAI is a trading name of Evidary AI Ltd.

Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

Evidary AI Ltd is the controller of personal data collected through this website and DDAI enquiries.

Information you give us

We may collect:

  • name;
  • work email;
  • organisation;
  • role;
  • enquiry and project context;
  • meeting information;
  • checklist requests;
  • consent choices;
  • information provided during a proposal or contracted engagement.

Do not include confidential, special-category or security-sensitive information in a website form unless we have agreed a suitable channel.

Technical information

The website and its providers may process limited technical information needed to deliver, secure and diagnose the service, such as internet protocol address, device and browser information, request time, page requested and error information.

Any analytics or non-essential cookies must remain disabled until they are listed in the Cookie Notice and the required consent mechanism is operating.

How we use information

We use personal data to:

  • respond to enquiries;
  • assess whether DDAI is suitable for the requested work;
  • schedule meetings;
  • prepare proposals and statements of work;
  • deliver contracted services;
  • manage customer and supplier relationships;
  • protect the website and investigate misuse;
  • maintain legal, tax and business records;
  • send optional marketing only where the applicable basis and preference permit it.

Legal bases

Depending on the context, we rely on:

  • steps requested before entering a contract;
  • performance of a contract;
  • legitimate interests in operating and developing our business;
  • compliance with legal obligations;
  • consent, where required.

Service providers

We use Firebase Hosting and Google Cloud to deliver the static website, Formspree to receive contact and checklist requests, Google Calendar for optional appointment booking, and Google Workspace for business email and related operations. The website also requests fonts from Google Fonts and icon styles from Cloudflare's content delivery network.

We require providers to process personal data only for the agreed purpose and under appropriate terms.

International transfers

Some providers may process personal data outside the United Kingdom. Where transfer rules apply, the controller must identify and document an appropriate transfer mechanism before relying on that processing. Contact DDAI for current provider-specific information.

Retention

We keep website enquiries and checklist requests only for as long as they are needed to respond, assess potential work, maintain necessary business records or manage legal claims. If an enquiry leads to a contract, relevant records may be kept for the contract period and any longer period required for tax, legal or claims purposes. Optional marketing preferences are kept until consent is withdrawn or the record is no longer needed. We may retain a minimal suppression record so that an opt-out remains effective.

Your rights

Depending on the applicable law, you may have rights to access, correct, erase, restrict or object to processing, and to request portability.

You may also withdraw consent where processing depends on consent.

Use the minimal privacy-request form below. We may need to verify identity before acting.

Make a privacy request

Provide only the information needed to identify and respond to your request. Do not include special-category, confidential or security-sensitive information in this form.

Complaints

You may complain to the Information Commissioner's Office. We would welcome the opportunity to address the concern first.

Security

We use proportionate technical and organisational measures. No website can guarantee absolute security.

Changes

We may update this policy. The current version and effective date will be published on this page.

Contact

Use the privacy-request form above for privacy rights and questions. Use the DDAI Contact page for project and service enquiries.

AI adoption with control

DDAI helps organisations choose, procure, build, and operate artificial-intelligence systems with accountable human control and evidence that can withstand review.

DDAI implements. Evidary proves.

Quick Links

  • Services
  • Public Sector
  • Evidary
  • Insights
  • Delivery Examples
  • About
  • Contact

Services

  • AI Opportunity & Assurance Sprint
  • Governed AI Pilot & Integration
  • AI Governance Operating Model & Evidence Baseline
  • AI Procurement & Supplier Assurance
  • AI Literacy, Leadership & Role-Based Enablement
  • Managed Assurance, Reassessment & Evidence Operations

Specialist review Agentic AI Security & Runtime Review

Contact

Registered Office

71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

in

Start

Bring one system, buyer, or service decision that must withstand review.

Discuss a project Use the readiness checklist

Company assurance

Verified public records

EVIDARY AI LTD, the legal entity behind DDAI.

Cyber Essentials certified, EVIDARY AI LTD, valid to 22 July 2027

Certificate

Cyber Essentials

The IASME Consortium Ltd.

Valid to 22 July 2027

Insurance

Cyber insurance

Sutcliffe Insurance Brokers Ltd.

Valid to 22 July 2027

Verify insurance evidence

Registration

Registered with the Information Commissioner's Office

Registration held by Evidary AI LTD

DDAI is listed as another name · ZC204042

Valid until 20 July 2027

Verify on the public register

© 2026 EVIDARY AI LTD. DDAI is a trading name and the implementation and assurance practice of Evidary AI Ltd. Registered in England and Wales under company number 17309245.

Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

  • Privacy Policy
  • Website Terms