Privacy notice

1. Who is responsible

Baby Elephant provides AI adoption services (readiness check, optional Adoption Assessment, and related delivery). For personal data collected through this website, we act as the organisation responsible for deciding how that data is used.

Privacy contact: hello@babyelephant.pro (subject “Privacy request”).

2. What this notice covers

• The marketing site at babyelephant.pro (including start, methodology, and assessment pages).
• The free AI Readiness Check (/check/).
• The optional AI voice/text guide on the home page (anonymous session id; if you ask a question we store the conversation text to improve the guide—no account, not sold to third parties).
• Optional follow-up on the check report and the Adoption Assessment enquiry form.
• Email you send us directly (e.g. hello@babyelephant.pro).

Separate written agreements (statements of work, data processing addenda) may apply when you become a paying client.

3. Free check without contact details

You can complete the check and view your full report without creating an account or giving us your email. Your answers are used only in your browser to calculate and display your report.

Progress in your browser

To let you leave and return on the same device, we store your in-progress answers in session storage in your browser (key: be-readiness-check-v1). That data stays on your device until you close the browser tab or session, or until you choose “Start over” on the report. We do not receive those answers unless you optionally submit the follow-up form (see below).

The check asks about types of data your business may handle (e.g. “customer records”)—not names, account numbers, or other identifiable information. Do not type personal or confidential data into any free-text fields.

4. Data we collect when you contact us

If you submit an optional follow-up or assessment enquiry, we may collect:

• Identity and contact: first name, work email, company, role, company size, industry, country.
• Phone number, if you choose to provide it.
• Your message (assessment enquiry form).
• A summary of your check result (stage, scores, top findings) and a snapshot of your check answers, if you submitted follow-up from the report—so we can respond in context.
• Consent choices: whether you opted into marketing emails, whether you consented to phone contact, and confirmation that you read this notice for the request.
• Technical metadata needed to operate forms securely: submission time, page URL, privacy notice version, and basic server or hosting logs (see processors).

5. Why we use data and our legal bases

• Respond to your request (follow-up or assessment enquiry): to reply by email or phone (with consent), scope optional work, and reference your check result when you shared it. Basis: your consent when you submit the form after reading this notice, and our legitimate interest in operating a professional services business.
• Marketing (optional): practical AI adoption guidance and occasional information about our services—only if you tick the separate marketing checkbox (off by default). Basis: consent; you may withdraw at any time.
• Improve the check (future): we may use anonymised or aggregated answer patterns for benchmarking. We will not identify your organisation in published benchmarks without permission.
• Security and fraud prevention: hosting logs, abuse prevention, and maintaining HTTPS.

Separate purposes. Sending a response about your enquiry is not the same as marketing. We do not subscribe you to marketing unless you opt in.

6. Singapore, Thailand, and other locations

Where Singapore PDPA applies, we collect, use, and disclose personal data for the purposes above with consent or another permitted basis. Before calling or sending marketing SMS to Singapore numbers, we check the Do Not Call Registry unless we hold clear consent to contact that number for that purpose.

Where Thailand PDPA applies to marketing, we obtain consent with an equally easy way to withdraw it (unsubscribe link in emails and email to our privacy contact).

Where laws differ, we apply the more protective standard when we are unsure.

7. How long we keep data

• Identifiable lead and enquiry records: up to twenty-four (24) months after our last meaningful engagement with you, then deletion or anonymisation unless we must keep records longer for legal, tax, or dispute reasons.
• Marketing suppression list: kept after unsubscribe so we do not contact you again.
• Browser session storage (check progress): until you end the session or clear site data in your browser—not on our servers.
• Anonymised check statistics: may be kept indefinitely for product improvement.

8. Who processes data on our behalf

We use service providers that host or transmit data only as needed to run the site and respond to you:

• Hosting (e.g. Netlify): serves static pages over HTTPS and may process standard web logs (IP address, user agent, timestamps). Location may include the United States or other regions where the provider operates.
• Email: messages to and from hello@babyelephant.pro are handled by our email provider.
• Future CRM / automation (e.g. intriQ or similar): when connected, form submissions may be sent to our CRM via a secure webhook. We will update this notice when that goes live.
• Booking (e.g. Cal.com or similar): if you book a call via a third-party scheduler, their privacy policy applies to that booking flow.

We require processors to protect personal data and use it only for our instructions. Cross-border transfers may occur; we describe relevant safeguards in client contracts when we deliver paid work.

9. Temporary storage in your browser (forms)

Until our server-side lead endpoint is fully configured, submitted forms may also be queued in local storage in your browser (key: be-lead-queue) so nothing is lost if transmission fails. That queue can contain the same contact and consent fields you submitted. Anyone with access to your device and browser profile could read it—use a shared or public device only if you accept that risk, or contact us by email instead. When our backend is live, submissions are transmitted over HTTPS and handled under this notice.

10. Cookies and analytics

We do not use advertising cookies or third-party analytics on the site today. The check uses session storage as described above, which is not a cookie but serves a similar on-device function. If we add analytics or non-essential cookies later, we will update this notice and, where required, ask for consent before using them.

11. Security

We serve the site over HTTPS. Access to lead data in our systems is limited to people who need it. Check reports are shown on screen only—we do not publish your results at guessable public URLs. Please use a work email and secure device when sharing business contact details.

12. Your rights and choices

Depending on your location, you may have the right to:

• Ask what personal data we hold about you and receive a copy.
• Ask us to correct inaccurate data.
• Withdraw consent for marketing or phone contact (we will still handle lawful requests already in progress).
• Request deletion where we have no overriding reason to keep data.

Email hello@babyelephant.pro with “Privacy request” in the subject. We aim to respond within a reasonable time. You may also complain to your local data protection authority.

Marketing unsubscribe: every marketing email will include a one-click unsubscribe; we honour opt-outs promptly across our systems.

13. Children

Our services are aimed at business users. We do not knowingly collect data from children.

14. Changes to this notice

We may update this page when our practices or providers change. The version date at the top will change. Material changes to how we use contact data will be reflected in form consent text where required.

15. Contact

Privacy questions or requests: hello@babyelephant.pro