Privacy notice
How we use your information
Last updated: 18 September 2026
This notice explains what personal information SourcingAI collects when you use this website, contact us or use the SourcingAI EVO platform at app.sourcingai.co.uk, what we do with it, and your rights.
Who we are
SourcingAI is operated by AIGoGo Group Limited, a company registered in England and Wales (company number 17228320), registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
AIGoGo Group Limited is the controller of your personal information. For any privacy question or request, email customer@sourcingai.co.uk.
What we collect
When you complete the “Get in touch” form, we collect:
- your name
- your work email address
- your organisation
- your role
- anything you choose to write in the message box
If you email us, we also receive your email address and whatever your message contains.
If you create a SourcingAI EVO platform account, we also hold:
- your name, work email address and a securely hashed version of your password (we cannot read your password)
- whether you have turned on two-step sign-in
- for each active sign-in session: when it started and was last used, your IP address and browser type (deleted when the session ends)
- the business information you enter about your organisation, and public information about it from the Companies House register
- a record of the changes you make, so you can see and verify your own history
This website and the platform do not use advertising or tracking cookies, and do not load third-party analytics. The platform sets one strictly necessary cookie that keeps you signed in. Private administration uses a Secure, HttpOnly, SameSite=Strict session cookie (__Host-evo_admin) with a one-hour lifetime. The illustrative demonstration uses browser session storage to retain its current example state. Our hosting providers keep standard technical logs to run and secure the services.
Why we use it, and our lawful basis
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Reply to your enquiry and arrange your EVO Review | Our legitimate interests in responding to business enquiries, and taking steps you have asked for before entering into a contract |
| Record, organise and prepare our response to enquiries using automated and AI-assisted (“agentic”) workflows — for example to summarise your request, route it to the right person and draft next steps | Our legitimate interests in handling enquiries efficiently |
| Provide your SourcingAI EVO account: sign-in, security, your workspaces, estimates and exports | Performing our contract with you or your organisation |
| Send account emails, such as confirming your email address and resetting your password | Performing our contract with you or your organisation |
| Keep the website and platform secure and working | Our legitimate interests in operating a secure website |
We do not sell your information, and we do not use it to make decisions about you that have legal or similarly significant effects based solely on automated processing.
AI-assisted processing
The details you submit are passed into automated workflows that use AI models to help us understand and act on your enquiry. The information is used only for handling your enquiry and our relationship with your organisation, and is processed under contracts with our service providers.
Who we share it with
We use trusted providers who process information on our behalf, under contract and only on our instructions:
- Netlify — hosts this website and receives form submissions
- Microsoft (Azure, UK South region) — hosts the SourcingAI EVO platform and its database
- Brevo — sends platform account emails such as email confirmation and password reset
- Microsoft (Microsoft 365 / SharePoint) — stores and organises enquiries
- Google (Google Workspace) — our email
- AI model and automation providers — run the workflows described above
We may also disclose information if the law requires it. The platform looks up companies on the public Companies House register; this sends the company name or number you search for, not information about you.
International transfers
Some of these providers may process information outside the UK, including in the United States. Where that happens, we rely on protections recognised under UK data protection law, such as UK adequacy regulations (including the UK–US data bridge) or the UK International Data Transfer Agreement or Addendum.
How long we keep it
We keep enquiry information for up to 24 months after our last contact with you, then delete it — unless you become a client, in which case we keep what we need for that relationship and our legal obligations.
Platform account information is kept while your account is open. You can export or delete your workspaces at any time, and deleting your account removes your account and all your workspaces straight away. Deleted data leaves our database backups within 14 days.
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- ask us to correct it
- ask us to delete it
- object to, or ask us to restrict, how we use it
- ask for it in a portable format (platform users can export their data themselves)
To make a request, email customer@sourcingai.co.uk. We will respond within one month.
If you are unhappy with how we have handled your information, please tell us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
We may update this notice. The date at the top shows when it last changed.