Privacy policy
How we handle personal data when you visit this website, ask for a free assessment, or contact us.
Effective 7 October 2026
1. Who we are
Output Loop is a trading name of ALTIOR DIGITAL LTD, a company registered in England and Wales (company number 17106631), registered office Unit 82a James Carter Road, Mildenhall, Bury St Edmunds, IP28 7DE (“Output Loop”, “we”, “us” or “our”). We operate this website and are the controller of the personal data described in this policy.
Privacy contact: hello@outputloop.ai
2. What this policy covers
This policy explains how we handle personal data when adults and business users visit outputloop.co.uk, ask for a free assessment, contact us, or exercise a data-protection right. The website is intended for business users, not children. A third-party website or service linked from here has its own privacy policy.
3. Cookies, analytics and tracking
This website sets no cookies, uses no analytics and loads no advertising or tracking scripts. Our hosting provider, Cloudflare, processes technical data such as your IP address to deliver the site and protect it from abuse.
4. Personal data we collect
- Assessment requests. If you ask for a free assessment, the business name, trade, postcode, phone number and preferred call time you enter, and the page you sent it from. We use this to look at your business’s online presence and to call you about it.
- Calls and messages. If you phone, text, WhatsApp or email us, your number or address, the content of the conversation and any notes we make.
- Technical and security data. Information such as IP address, browser or device type, requested address, timestamps, and security or diagnostic events generated when the website handles a request.
- Client engagement data. Where we provide a service to a client, that work involves the client’s own data, including details of its customers. It is governed by the engagement documents rather than by this policy (see section 7).
Please do not send sensitive personal data through a general enquiry unless we specifically ask for it and explain why it is needed.
5. How we use personal data
| Purpose | Data used | Legal basis |
|---|---|---|
| Review your business and call you back after an assessment request | Assessment-request data | Our legitimate interests in responding to your request, and steps taken at your request before entering a contract |
| Reply to enquiries and follow up on a live opportunity | Communications data | Our legitimate interests in communicating and running our business |
| Keep a record of prospects and clients | Assessment, communications and engagement data | Our legitimate interests in running our business |
| Deliver, diagnose and protect the website | Technical and security data | Our legitimate interests in operating a secure and reliable website |
| Handle a privacy request | Communications, contact and verification data | Legal obligation |
| Deliver a paid engagement | As set out in the engagement documents | Contract, and the client’s own lawful basis where we act as processor |
6. Who receives personal data
We may share personal data with:
- our website host, Cloudflare, for hosting, content delivery and security;
- our customer-relationship and messaging platform, HighLevel (GoHighLevel), which stores enquiries and sends our messages;
- our telephone, text and WhatsApp providers, and our email provider;
- professional advisers; and
- courts, regulators, law-enforcement bodies or other public authorities where disclosure is required or permitted by law.
Service providers acting as processors must protect personal data, use it only for the agreed services, and assist us with our legal obligations. We do not sell personal data, and we do not share your details for third-party marketing.
7. Our AI assistants and our clients’ customers
When we run an AI chat or phone assistant, review requests or messaging for a client business, we do so on that business’s instructions. If you contact one of our clients, or are contacted by them through a system we run, that business is responsible for your personal data and its own privacy notice applies. We act as its processor under a written contract and use the data only to provide the service. The assistant tells people they are speaking to an AI assistant. Please contact the business concerned about your data; we will help them respond.
8. International transfers
Some service providers or their subprocessors may process personal data outside the UK, including in the European Economic Area and the United States. Before making a restricted transfer, we assess it and use a lawful route appropriate to the circumstances, such as UK adequacy regulations or contractual safeguards like the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Our customer-relationship and messaging platform, HighLevel, processes data in the United States under the UK Addendum to the EU Standard Contractual Clauses and the Data Privacy Framework (UK Extension). Contact us for information about the safeguards relevant to your personal data.
9. How long we keep personal data
We keep personal data only for as long as needed for the purpose it was collected for, including legal, security and dispute-resolution needs.
| Record | Retention period |
|---|---|
| Assessment requests that do not lead to work | 12 months after the last contact |
| General enquiries | 12 months after the last meaningful contact |
| Records relating to a client engagement | As set out in the engagement documents, and as required for legal and accounting purposes |
| Routine website and security logs | 90 days |
| Privacy-rights request records | 3 years after closure, limited to necessary compliance evidence |
We may keep information longer where required by law, and may delete or anonymise it earlier where it is no longer needed.
10. Your rights
Depending on the circumstances, UK data-protection law may give you the right to ask for access to your personal data; ask us to correct inaccurate or incomplete data; ask us to erase it; ask us to restrict processing; object to processing based on legitimate interests; object at any time to direct marketing; withdraw consent; and receive certain data in a portable form.
To exercise a right, email hello@outputloop.ai. We respond within one month and may ask for information to verify your identity. If you are not satisfied with our response you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather have the chance to put it right first.
11. Security
We use technical and organisational measures appropriate to the risk, including access control, encryption in transit, and keeping the number of people and systems that touch personal data as small as the work allows. No website or transmission method is completely secure, and we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy to reflect changes to the website, our services or the law. The current version is always published here with its effective date.
13. Contact
hello@outputloop.ai, or by post to ALTIOR DIGITAL LTD, Unit 82a James Carter Road, Mildenhall, Bury St Edmunds, IP28 7DE.