Privacy Policy

1. Who we are

Found Revenue (formerly Business AI Accelerator) is a trading name of Accelerate (YS) Ltd, a company registered in Scotland (company number SC614896), VAT registration number SC477296637, incorporated on 28 November 2018, with its registered office at 5 South Charlotte Street, Edinburgh, EH2 4AN, and offices in Edinburgh, Chester and London.

Accelerate (YS) Ltd is registered with the Information Commissioner's Office (ICO) as a data controller, registration reference ZB867905 (registered 20 February 2025). Contact: audit@foundrevenue.co.uk.

2. Scope of this policy

This policy explains how we handle personal data when you visit this website, enquire about or use our services, book an audit/demo, or when we obtain your business contact details for business-to-business outreach. It applies to data for which we are the controller. Where we operate AI and automation systems on a client's own customer database, we generally act as a processor on that client's behalf — see section 8.

3. Personal data we collect

• Enquiry and booking data — name, email address, phone number, company, and anything you include in a message or audit/demo booking.
• Business contact data — name, job title, business email, business phone number and company information obtained through business contact research (see section 4).
• Client relationship data — contact, contractual and billing information for clients and suppliers.
• Website usage data — IP address, browser type, pages visited and similar analytics data collected via cookies (see our Cookie Policy).

We do not intentionally collect special category data and we do not offer services to, or knowingly collect data from, children.

4. Business contact research (legitimate interests)

In plain English: as a business-to-business agency, we research companies that we believe may benefit from our services and collect the publicly available business contact details of relevant people at those companies. You can object at any time and we will stop.

We collect business contact information from publicly available sources, including:

• Companies House and other public registers;
• company websites and published contact pages;
• professional networking platforms and business directories;
• trade press and other published material.

Our lawful basis for this processing is legitimate interests (Article 6(1)(f) UK GDPR): the legitimate interest of marketing our business-to-business services to people whose professional role makes them relevant to those services. We have carried out a legitimate interests assessment and concluded that this processing has minimal privacy impact: it is limited to professional (not personal) contact details, obtained from public sources, and used for relevant business communication.

We apply the following safeguards:

• we collect only business contact details relevant to a professional role — never financial, family or other private information;
• every direct marketing communication identifies who we are and offers a simple way to opt out;
• where we contact individuals by electronic means we comply with the Privacy and Electronic Communications Regulations (PECR), including screening telephone numbers against the Telephone Preference Service (TPS) and Corporate Telephone Preference Service (CTPS);
• contact data is reviewed periodically and deleted when no longer relevant (see section 9).

Your right to object: you have an absolute right to object to the processing of your personal data for direct marketing (Article 21(2)–(3) UK GDPR). Email audit@foundrevenue.co.uk with the word "object", or use the opt-out in any message we send. We will stop processing your data for these purposes without exception, and add your details to our suppression list so you are not contacted again.

5. How we use personal data, and our lawful bases

6. Who we share personal data with

We do not sell personal data. We share it only:

• Service providers who process data on our instructions under contract — website hosting, CRM and automation platforms, calendar and booking tools, email and communications providers, and analytics providers;
• Professional advisers — accountants, lawyers and insurers where necessary;
• Authorities — where required by law or to protect legal rights.

7. International transfers

Some of our service providers process data outside the UK. Where they do, we ensure an adequate level of protection through UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate security measures.

8. When we process data on behalf of our clients

Our services include operating AI communication systems (for example database reactivation and enquiry response) on databases owned by our clients. For that data, the client is the controller and we act as their processor: we process the data only on the client's documented instructions, under a data processing agreement that meets Article 28 UK GDPR. If you receive a message through a system we operate for one of our clients, the client's own privacy policy applies to that data; contact them, or contact us and we will direct your query to them.

9. How long we keep personal data

Cookie Policy

10. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and vendor due diligence. Our systems and processes are operated to be GDPR-compliant and SOC 2 aligned. No system is perfectly secure; if a breach affecting your rights occurs, we will notify you and the ICO as required by law.

11. Your rights

Under UK GDPR you have the right to:

• Access — obtain a copy of your personal data;
• Rectification — have inaccurate data corrected;
• Erasure — have your data deleted in certain circumstances;
• Restriction — limit how we use your data in certain circumstances;
• Portability — receive data you provided to us in a machine-readable format;
• Object — to processing based on legitimate interests, including an absolute right to object to direct marketing;
• Withdraw consent — at any time, where processing is based on consent;
• Rights relating to automated decision-making — we do not make solely automated decisions with legal or similarly significant effects about you.

To exercise any right, email audit@foundrevenue.co.uk. We will respond within one month. There is no fee unless a request is manifestly unfounded or excessive.

12. Complaints

We would welcome the chance to resolve any concern first — please contact us. You also have the right to complain to the UK supervisory authority:

13. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the date above. Material changes will be highlighted on the website.