Privacy policy

Data controller

COHEAL LTD, company number 15208848, VAT number GB459961337, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Stochastic AI is a brand of COHEAL LTD. For anything concerning personal data, write to hello@stochasticcompany.com.

What we collect and why

Contact form: your name, email address and — if you choose to give them — company and role, together with your message. We use them solely to reply. Legal basis: steps taken at your request before entering a contract, and our legitimate interest in business correspondence (Article 6(1)(b) and (f) UK GDPR).

Consultation booking: your name, email address, the slot you pick and your time zone. We use them to create the calendar event, send the invitation with a Google Meet link and email you a confirmation. Legal basis: Article 6(1)(b) UK GDPR.

Server logs: IP address, browser type and request time, recorded automatically by our hosting provider to keep the site running and detect abuse. Legal basis: Article 6(1)(f) UK GDPR.

We do not collect special category data, we do not profile visitors and we make no automated decisions about you.

Cookies and tracking

This site sets no analytics or marketing cookies. There are no tracking tools, advertising pixels or social media plugins.

We load no fonts or scripts from third-party servers — everything is served from this domain, so simply visiting the site does not disclose your IP address to anyone else.

The only technical cookie appears in an administration panel available to the site owner alone; it secures sign-in and expires after ten minutes. Visitors to the public pages never receive it.

Who processes data for us

Vercel Inc. — hosting and request handling.

Resend and Amazon Web Services (Amazon SES) — delivery of form messages and booking confirmations, sent from the Ireland region.

Google Ireland Limited — mail, calendar and Google Meet: the mailbox your message reaches and the meeting you book.

Upstash — a store holding the encrypted credentials for the owner’s calendar. No form data is kept there.

Each of these acts only on our instructions. We do not sell data and do not share it for marketing purposes.

Transfers outside the UK and EEA

Vercel and Google may process data outside the United Kingdom and the European Economic Area, including in the United States. Such transfers rely on standard contractual clauses with the UK addendum, or on an adequacy decision.

How long we keep data

Form correspondence: up to 24 months after our last contact, unless it leads to an engagement — then for as long as tax and accounting rules require.

Calendar events and their confirmations: up to 24 months after the meeting date.

Server logs: up to 30 days.

Your rights

You have the right to access your data, correct it, erase it, restrict its processing, object to processing based on legitimate interest, and receive your data in a portable form.

To exercise any of these, write to hello@stochasticcompany.com. We reply within one month.

If you believe we handle your data unlawfully, you may complain to the UK supervisory authority, the Information Commissioner’s Office (ico.org.uk). If you live in the European Union, you may also contact your national supervisory authority.

Security

The connection to this site is encrypted (HTTPS). Form data is never written to a database — it goes straight to a mailbox. Calendar credentials are stored encrypted with AES-256-GCM.

Changes to this policy

If the way we handle data changes, we will update this document and the date at the top of it.