Privacy Policy

Last Updated: 17th May 2025

Introduction

Mercia AI (“we”, “us”, or “our”) is committed to protecting your personal data and ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Children’s Code (Age-Appropriate Design Code). This Privacy Policy explains how we collect, use, and protect your personal data when you use our services, including AI consulting, training, and data analysis.

Data We Collect

We collect and process the following types of personal data:

Identity Data: Name, age, date of birth, and contact details.
Account & Payment Data: Billing information, payment details (processed securely via third-party providers).
Communication Data: Emails, chat messages, and interactions related to your services.
Technical Data: IP address, browser type, and cookies (if applicable).
AI Consultation Data: Information you provide during AI consultations, which may include business or project details.

For individuals under 18 years old, we require explicit parental or guardian consent before processing personal data.

How We Use Your Data

We process personal data for the following purposes:

To provide AI consulting, training, and data analysis services.
To manage bookings, payments, and communication.
To comply with legal obligations and prevent fraud.
To improve our services and website experience.
To ensure compliance with safeguarding policies for minors.

We do not sell or share your data with third parties for marketing purposes.

Legal Basis for Processing Data

We process personal data based on:

Contractual Obligation: When you book a service.
Legitimate Interest: To enhance our services.
Consent: For processing minors’ data or using cookies.
Legal Compliance: Where required by UK law.

Children’s Data & Age Restrictions

Under 13 Years Old: We do not collect or process data from children under 13 without verified parental consent.

Ages 13-17: We process data only with appropriate safeguards. Parental consent may be required in some cases.

18+: Users aged 18 and above can book services independently.

If we discover that a child’s data has been collected without appropriate consent, we will delete the data immediately.

Data Security & Retention

We take appropriate security measures to prevent unauthorized access to your data. Data is retained for as long as necessary for legal and business purposes, after which it will be securely deleted.

Your Rights Under
UK GDPR

You have the right to:

Access your personal data.
Rectify incorrect data.
Request deletion of your data in certain circumstances.
Restrict processing under specific conditions.
Object to processing based on legitimate interests.
Withdraw consent where applicable.

To exercise your rights, please contact us at:

Email: contact@merciaai.com
Address: Mercia AI, 85 Farndale Avenue, Holbrooks, Coventry,
West Midlands CV6 4LT

AI Tools & Data Processing

Some services provided by Mercia AI involve the use of third-party artificial intelligence (AI) platforms to generate content such as images and video. These platforms include, but are not limited to:

OpenAI – for image generation via the gpt-image-1 model (used in ChatGPT 4o) and short-form video via Sora
Kling AI – for cinematic AI-generated visuals and videos

If you request a service involving AI-generated content, we may process the data you provide—such as names, descriptions, logos, images, or other brand-related materials—through one or more of these platforms to generate the outputs you’ve requested.

We do not submit client data to AI platforms without a valid service request, and we do not use any AI service that lacks a commercial-use licence.

⚠ Important: Please do not submit any confidential, sensitive, or legally protected information (e.g. trade secrets, personal health data, protected identity data, etc.) unless explicitly agreed in writing. If you’re unsure, contact us before submitting.

International Data Transfers

Some AI platforms used by Mercia AI may process data on servers located outside the UK or EU, including in countries like the United States or China. These jurisdictions may not offer the same level of data protection as required under UK GDPR.

By using our AI-powered services, you acknowledge and accept that your data may be processed in these jurisdictions. Where possible, we use platforms that apply appropriate safeguards (e.g. Standard Contractual Clauses, secure encryption, or anonymisation practices).

If you have any concerns about how your data may be processed in connection with AI tools, please contact us at contact@merciaai.com before using these services.

How do you communicate with your site visitors?

We may contact you to notify you to troubleshoot problems to resolve a dispute, to collect fees or monies owed, to poll your opinions through surveys or questionnaires, to send updates about our company, or as otherwise necessary to contact you to enforce our User Agreement, applicable national laws, and any agreement we may have with you. For these purposes we may contact you via email, telephone, text messages, and postal mail.

Events and Attendance Information

If you register for a Mercia Minds event via a third-party platform such as Eventbrite, your name and contact details may be shared with us as the event organiser. This information is used solely to manage attendance, send event-related updates, or gather optional feedback. We do not add event attendees to marketing lists without explicit consent, and your data is not shared with third parties.

How do you store, use, share and disclose your site visitors' personal information?

Our company is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.

All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

We may use third-party service providers (e.g., Zoom) to facilitate bookings. These providers have their own privacy policies.

Cookies & Tracking Technologies

Our website may use cookies to improve user experience. You can manage cookie preferences via your browser settings.

Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

Contact Information

If you have any concerns or requests regarding your personal data, contact us at: