our trust statement
Last updated: May 2026
We're an AI consultancy. We talk about data for a living. So you have every right to expect us to be straight with you about what happens to yours when you use this site.
This page is plain English. It sits alongside — and in tension with, on purpose — our formal privacy policy. If anything here disagrees with the privacy policy, the privacy policy wins. But this is the spirit of how we operate.
the data you give us
the things that identify you
Your name, email, business name, phone number (if you give it), the answers to our Snapshot, anything you tell us in contact forms or on calls.
This is yours. We use it to personalise your report, follow up if you've asked us to, and run our consultancy. We do not sell it, swap it, or hand it to a third party for marketing. You can ask us to delete the lot at any time and we'll do it within 30 days.
the four numbers — only if you opt in
If you tick the “include me in the benchmark” box on the Snapshot, we add four numbers to a separate, aggregated pool: your scores for People, Documents, Data and Strategy, plus your sector, size band and region.
That's it. Not your name, not your business name, not your contact details, not your free-text answers, not your industry-specific question — just the four scores and the cohort labels. We never publish a cohort with fewer than five respondents, so no one can be identified.
If you don't tick the box, none of your data goes into this pool — your Snapshot is just for you.
Those are the two kinds of data you hand us directly. How you actually use the site is a third — we only ever collect it with your consent, and it is what lets us keep making nura better for you. See cookies — your call below.
our principles for your data
- Active consent. If we ever want to use your data in a way you haven't already agreed to, we ask. No pre-ticked boxes. No buried clauses.
- Plain English. If we need to use legal language to comply with the law, we'll translate it. The privacy policy stays formal; this page stays human.
- No sales of your data. Ever. Not to advertisers, not to other consultants, not to AI training partners. Your information is for the relationship between you and us, full stop.
- UK-hosted where it matters. Our consultancy systems and Snapshot data are held in the UK or EU. We use named subprocessors — Supabase, Resend and Google Cloud Run for our infrastructure; Plausible for cookieless traffic figures; and, only if you agree to it, Google Analytics for site analytics and Meta, Google and LinkedIn for advertising. We are happy to list them all in writing if you ask.
- Models we don't train. We use Gemini and Claude through their APIs to draft your Snapshot report. We do not opt into model-training pathways. Your responses are not used to train anyone's foundation model.
- Right to leave. If you ever want everything we hold on you erased, email hello@nura.solutions. We confirm in 48 hours and complete within 30 days. UK GDPR gives you that right anyway — we'd rather you didn't have to invoke it to be heard.
the benchmark, in detail
When we publish UK SME AI-readiness benchmarks (on the Snapshot result page, in reports, on stage), they come from people who actively opted in. Each cohort cell — sector × size band × region — has to have at least five respondents before we'll show a number. Below five, we say so. Above five, the numbers are means and medians of the four pillar scores; we don't share individual rows, ever.
You can withdraw from the benchmark in future. The opt-in flow isn't a one-way door. Email us and we'll remove your anonymised scores from the cohort.
questions
Anything unclear, anything that feels off, anything you'd like us to put in writing — email hello@nura.solutions. A real human reads it. Our formal privacy and DSAR processes live in our privacy policy.
read this and still have questions?
That is the right instinct. Ask us anything about how we handle your data, who sees it, and what we will not do with it — before you commit to anything.