What we hold, and why.
Last updated: 21 July 2026 · Replaces the version of 11 June 2026
Who we are
Industrial Strategic Ltd, registered in Scotland, company number SC685479. Registered office: 5 South Charlotte Street, Edinburgh, EH2 4AN, Scotland. We are the data controller for personal information collected through this website and aicommand.industrialstrategic.com. Questions and requests: office@industrialstrategic.com.
What we collect, and why
The 777 score. When you take the free assessment you give us your name, email address, organisation, what prompted you, and your answers and scores. We use these to send your results, open your private results room, and prepare the reading you asked for. Your results room is reached by a personal link; keep it to yourself.
The Deep Read. If you purchase the Deep Read, payment is processed by Stripe (their privacy policy); we never see or store your card details. Your interview answers – typed or spoken – become a transcript we use to write your report. Drafting the report and running the interview uses AI services from Anthropic (text processing), ElevenLabs (where you choose a spoken interview) and OpenAI (transcription of recorded answers); your answers are processed by them under contract as our processors and are not used to train their models. Spoken answers are transcribed and the audio is then discarded; only the text is kept. Every report is reviewed and signed off by a person before it reaches you.
Introductory-call bookings. Bookings are processed on our behalf by Cal.com, Inc. (their privacy policy). You provide your name, email and a description of your challenge; we use this solely to prepare for and hold the conversation.
The letters and the first-edition list. If you subscribe to the letters or join the book’s first-edition list, we hold your email address to send you what you asked for. Every email carries an unsubscribe that works first time.
Course purchases. Payments for AI Command are processed by Stripe; we hold your name, email and purchase record to deliver the course and meet our accounting obligations.
Email. If you write to us, we hold the correspondence for as long as it remains relevant to our dealings with you.
Server logs. Our hosting keeps standard technical logs (IP address, pages requested) for security, retained briefly.
Our lawful basis
We rely on three bases, and it is always clear which applies. Consent covers the letters, the first-edition list, and any analytics or advertising cookies: you tick a box or press Accept, we record what you agreed to and when, and you can withdraw at any time – one click in any email, or by writing to us. Withdrawing is as easy as giving it, and costs you nothing else. Performance of a contract covers work you have bought – the Deep Read, an audit, a course. Legitimate interests cover replying to your enquiry, delivering the free reading you asked for, keeping the site secure, and our own record-keeping; we have weighed these against your rights and use the minimum data that does the job.
Cookies and analytics
Nothing that measures or advertises loads until you say yes. On your first visit a small card asks; decline and the site works exactly as it does otherwise, with no measurement cookies set at all. Accept and we load Google Analytics (with your IP address anonymised) to count visits and see which pages earn their place, and – where we are running campaigns – the Meta and LinkedIn advertising tags, which let us show our work to people who have already visited. Your choice is remembered on your device and you can change it by clearing your browser storage for this site. Separately, the embedded booking calendar (Cal.com) and payment pages (Stripe) may set strictly necessary cookies solely to make booking and payment work; those are never used for advertising.
Third parties
We never sell your information, and we never share it for anyone else’s advertising. The third parties that process data when you use this site are listed in full, with what each one does, on our suppliers page – Cal.com (booking), Stripe (payments), Google Fonts, Anthropic (AI interviews and report drafting), ElevenLabs (spoken interviews), OpenAI (transcription of spoken answers), and – only if you accept measurement – Google Analytics, Meta and LinkedIn. All act as our processors, under contract, and none of them uses your material for their own purposes or to train models. That page changes before any supplier does. Where a provider processes data outside the UK, it does so under recognised safeguards such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.
How long we keep it
Assessment and enquiry records are kept while our conversation is live and for a reasonable period after, then deleted. Client records are kept for the engagement and the period the law requires for accounting. Deletion on request is deliberately simple: one email removes you completely, subject only to records we must keep by law.
Your rights – UK and EU
Under UK and EU data protection law you may ask us for access to, correction of, or deletion of your personal information; ask us to restrict or object to processing; and take your data elsewhere. To exercise any right, email us. You may also complain to the Information Commissioner’s Office or, in the EU, your local supervisory authority.
Your rights – United States
If you are a resident of California or another US state with a consumer privacy law, you have rights to know what personal information we hold, to correct it, to delete it, and to opt out of its sale or sharing. For the avoidance of doubt: we do not sell your personal information, and we do not share it for cross-context behavioural advertising – so there is nothing to opt out of; the other rights work by emailing us, and we honour them for every visitor regardless of state. We will never treat you differently for exercising a privacy right.
Governing law
We are bound by the laws of Scotland, and this notice is governed by Scots law – without displacing protections that apply to you mandatorily where you live.