Levellers ("we", "us", "our") operates the website levellers.ai. We are the controller of the personal data described in this notice. You can write to us at: The Jellicoe, 5 Beaconsfield Street, King's Cross, London, N1C 4EW, United Kingdom. For all data-protection matters, including to exercise your rights or to withdraw consent, email reception@levellers.ai. We have not appointed a statutory Data Protection Officer, as we do not believe we are required to.

When you complete our workflow assessment form, we collect: your name; job title; work email; phone number (optional); organisation; organisation size; country; and the free-text descriptions of your situation that you choose to give us. We also record whether you ticked the box authorising contact by us and our partners, and whether you opted in to marketing.

Technical and usage data: our analytics provider records limited, aggregate information about visits, such as pages viewed and approximate country. As explained in the Cookie Notice below, this is collected without cookies and is not used to identify you.

A note on free-text fields: please do not enter confidential information, or special-category data (such as data about health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric data, sex life or sexual orientation, or data about criminal offences) in the free-text boxes. We do not ask for this and do not need it. If you include it anyway, we will treat it under this notice and may redact or delete it where appropriate.

• Replying to your own enquiry. Where you contact us or submit the form, we use your data to respond. Lawful basis: legitimate interests under Article 6(1)(f) UK GDPR (our interest in answering people who approach us, and your interest in a reply).
• Proactive contact across the channels you choose. Where you tick the consent box, we contact you about your enquiry and our services on the channels you agreed to. Lawful basis: consent under Article 6(1)(a) UK GDPR.
• Sharing leads with partners. See section 4 below. Lawful basis: legitimate interests under Article 6(1)(f) UK GDPR, supported by a Legitimate Interests Assessment.
• Marketing. Where you give a separate opt-in, we send you marketing. Lawful basis: consent under Article 6(1)(a) UK GDPR, and consent under PECR for electronic marketing.
• Running and securing the site, and meeting legal obligations. Legitimate interests under Article 6(1)(f), and legal obligation under Article 6(1)(c) where applicable.

You can withdraw consent at any time by emailing reception@levellers.ai. Withdrawing consent does not affect anything we did before you withdrew it.

Please read this section carefully.

A substantial portion of the leads we collect will be passed to third-party vendors ("partners"), who may then contact you directly about products or services relevant to your enquiry.

Categories of recipient: our partners are AI software vendors, consultancies and managed-service providers. Our partners are located in the European Union and the wider European Economic Area (EEA).

Lawful basis for sharing: legitimate interests under Article 6(1)(f) UK GDPR. We have carried out a Legitimate Interests Assessment weighing our interest in lead syndication, and our partners' interest in receiving relevant business enquiries, against your interests, rights and freedoms. We tell you about this sharing at the point of collection so that it is within your reasonable expectations.

Is your data "sold"? We want to be candid. Our arrangements with partners may be paid, for example through a referral fee, syndication fee or revenue share. For that reason we do not claim that we "never sell" your data. Under UK law there is no general prohibition on this kind of sharing provided we have a lawful basis and are transparent, which is what we aim to be. For California residents, this is addressed specifically in section 11.

You can object to this sharing at any time, and you can ask us not to share your data with partners, by emailing reception@levellers.ai.

Our partners are in the European Union and the wider European Economic Area (EEA). All EEA countries are treated as adequate under the UK's data-transfer rules, so transfers from the UK to partners in the EEA can be made without any additional safeguard.

Some of our processors may be located outside the UK. Where we transfer personal data to a country not covered by UK adequacy rules, we use appropriate safeguards under Article 46 UK GDPR. These may include the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, supported by a Transfer Risk Assessment. To request details of the safeguards in place, email reception@levellers.ai.

Our website analytics are provided by Fathom Analytics (see the Cookie Notice below).

We keep enquiry and lead data for 24 months from your last interaction with us, after which we delete or anonymise it, unless we need to keep limited information for another purpose. Where you opt out or unsubscribe, we keep the minimum information needed to honour your choice on a suppression list. We keep a record of our retention periods and review what we hold.

You have the right to: access your data; have inaccurate data corrected; have data erased; restrict processing; object to processing (including to our sharing with partners and to direct marketing); data portability; and to withdraw consent at any time. To exercise any right, email reception@levellers.ai. From 19 June 2026 you will also have a statutory right to complain to us directly about how we handle your data, under the Data (Use and Access) Act 2025; we will acknowledge such a complaint within 30 days.

Withdrawal when data has already been shared: if your data has already been shared with an EEA partner before you withdraw consent or object, we will stop sharing it further and tell that partner of your request. However, once a partner has received your data, that partner is a separate controller, and you may need to contact the partner directly to exercise your rights against them. We will give you the partner's details so you can do this.

You can complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; ico.org.uk; helpline 0303 123 1113.

We do not make decisions about you by solely automated means that produce legal or similarly significant effects. Enquiries and leads are reviewed by a person. We do not carry out the kind of automated scoring covered by Article 22 UK GDPR.

Our site uses Fathom Analytics, a privacy-first analytics tool that sets no cookies, collects no personal data and does not track you across sites. Because it does not store or access information on your device, it does not require consent under PECR. If we add non-essential technologies such as marketing pixels in future, we will treat them as a separate, consent-gated category and update our Cookie Notice first. Full detail is in the Cookie Notice below.

UK and EU/EEA (UK GDPR / EU GDPR): the rights in section 8 apply.

California (CCPA as amended by the CPRA): this section is both our "notice at collection" and our California disclosure.

• Categories of personal information we collect: identifiers (name, work email, phone); professional or employment-related information (job title, organisation, organisation size); geographic information (country); and the contents of your free-text descriptions.
• Purposes: to respond to and follow up on your enquiry, to share with partners, and (with your opt-in) for marketing.
• Your California rights: the right to know, the right to delete, the right to correct, the right to opt out of the sale or sharing of your personal information, and the right to limit the use of sensitive personal information.
• Do we "sell" or "share" your personal information? Because we pass leads to partners and our arrangements may be paid, our transfers to partners are likely to be a "sale" under California law (Cal. Civ. Code 1798.140). We also consider whether any future advertising activity is "sharing" for cross-context behavioural advertising. We therefore provide a "Do Not Sell or Share My Personal Information" mechanism (Cal. Civ. Code 1798.120 and 1798.135). To opt out, use the "Do Not Sell or Share My Personal Information" link on our site or email reception@levellers.ai.
• Opt-out preference signals: we treat a recognised browser opt-out preference signal (such as Global Privacy Control) as a valid opt-out of sale or sharing.

Other jurisdictions: as we enter new markets and add language versions, we will extend this notice with jurisdiction-specific sections as required.

We may update this notice. The current version and effective date are shown at the top of this page. We will notify material changes on the site.

These terms govern your use of levellers.ai. By using the site you accept them. They apply to all visitors and readers. If you do not accept them, please do not use the site.

Please read this section carefully.

The explainer articles and all other content on this site are GENERAL INFORMATION about law, regulation and AI governance. They are NOT legal, compliance, regulatory, financial, tax or professional advice. Reading the site does not create any client, advisory or professional relationship between you and us. You must not rely on any content for any decision. Law and regulation change and vary by country, and our content may be out of date or incomplete. Before you act, verify the position against primary sources and take advice from a suitably qualified professional in the relevant jurisdiction.

Our content is provided "as is" and "as available". To the maximum extent permitted by law, we give no warranty that the content is accurate, complete, current or fit for any purpose. Any reliance you place on the content is at your own risk.

To the maximum extent enforceable under the law of England and Wales, we exclude liability for any loss or damage arising from your use of, or reliance on, the site or its content, including indirect or consequential loss, loss of profit, loss of business or goodwill, and loss arising from decisions taken on the basis of the content.

Nothing in these terms excludes or limits any liability that cannot lawfully be excluded or limited. This includes liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, and any liability that the Unfair Contract Terms Act 1977 or applicable consumer-protection law (including the Consumer Rights Act 2015) does not allow us to exclude. We intend every exclusion and limitation in these terms to be fair and reasonable. If any one of them is held unenforceable, the others continue to apply.

Some content is produced with the assistance of AI tools under human editorial oversight and review, consistent with our editorial standards. This does not change the no-advice position in section 2.

The site may link to or cite external sites and sources. We are not responsible for the content, accuracy or availability of those external sites or sources.

The content of the site is owned by us or our licensors and is protected by intellectual-property laws. You may read it and share links to it for your own non-commercial use. You may not copy, republish, sell, or systematically extract or re-use the content without our written permission.

You must not misuse the site, including by attempting to gain unauthorised access, introducing malicious code, scraping at scale without permission, or using the site in breach of any law.

To the extent enforceable, you agree to indemnify us against losses arising from your breach of these terms or your misuse of the site. This clause does not apply to a consumer to the extent it would be unfair under the Consumer Rights Act 2015.

These terms are governed by the law of England and Wales. The courts of England and Wales have jurisdiction, subject to any non-excludable right a consumer may have to bring proceedings in, or rely on the mandatory law of, their country of residence.

If any provision is held unenforceable, the rest continues to apply. These terms are the entire agreement between you and us about use of the site. We may change these terms; the current version and effective date are shown at the top of this page.

Cookies are small files placed on your device when you visit a website. Similar technologies do the same job by other means. The rules on these technologies in the UK are in the Privacy and Electronic Communications Regulations 2003 (PECR) and, where personal data is involved, the UK GDPR.

There are four common categories: strictly necessary; analytics/performance; functional; and marketing/targeting.

We currently use cookieless analytics. Our analytics provider, Fathom Analytics, sets no cookies, collects no personal data, and does not track you across sites. Because it does not store or access information on your device, it does not require consent under PECR.

Strictly-necessary technologies: we may use a small number of strictly-necessary items, for example for hosting and security, to remember your language preference, and to record any cookie choices you make. These do not require consent.

We do not currently use functional or marketing/targeting cookies.

If we add non-essential cookies or similar technologies in future (for example marketing pixels), we will ask for your consent first. Consent will be opt-in, and rejecting will be as easy as accepting (with an "Accept all" and a "Reject all" option of equal prominence, no pre-ticked boxes, and nothing set before you choose). You will be able to withdraw consent at any time. We will tailor the consent experience to your location, so that we apply the relevant regime: for example UK GDPR and PECR for UK and EU visitors, and the CCPA "Do Not Sell or Share" approach for California visitors.

You can manage non-essential cookie choices through your browser settings. Today, because we use only cookieless analytics and strictly-necessary items, there is nothing for you to consent to.

For full details of how we handle personal data, see the Privacy Notice at the top of this page.