Exec x AI's Cookie Policy

1. Introduction and scope

Exec X AI UKS02 Ltd, registered in England and Wales with company number 16535629, is the data controller for personal data processed through cookies on www.execxai.com. Exec x AI advises organisations on AI strategy and builds cloud-native AI solutions within clients' own cloud environments.

By using this website you acknowledge this policy. You can manage your preferences at any time using the controls described below. Your right to withdraw consent is not affected by anything in this policy.

2. What are cookies

Cookies are small text files placed on your device when you visit a website. They allow a site to recognise your device on return visits and store information about your preferences or session state.

This policy also covers local storage, session storage, web beacons, and third-party tracking pixels.

Cookies can be set by us (first-party) or by third-party services we have integrated. First-party cookies support essential functionality. Third-party cookies typically support analytics or social media features.

We process cookie data on the following legal bases: consent for non-essential cookies; legitimate interests for security and fraud prevention; contractual necessity for services you have requested; and legal obligation where applicable. Consent must be freely given, specific, informed, and unambiguous. Pre-ticked boxes are not used.

3. How we use cookies

Strictly necessary cookies keep the site functioning. They enable secure areas, form submission, load balancing, and protection against cross-site attacks. They do not require your consent because they are technically essential.

Performance cookies collect anonymised data about how pages are used: which pages receive visits, how long sessions last, and where errors occur. This data informs improvements to the site. It does not identify you personally.

Preference cookies remember choices you have made, such as language or display settings, to avoid you repeating them on each visit.

With your consent, marketing cookies may deliver content aligned to your professional interests and measure the effectiveness of our communications. Security cookies detect and block malicious activity. That data is used for security only.

4. Types of cookies

We categorise cookies by purpose, duration, and origin.

By purpose: strictly necessary (essential, no consent required); performance (anonymised analytics); functionality (personalisation); marketing (targeted communications, consent required); analytics (usage measurement).

By duration: session cookies are deleted when you close your browser; persistent cookies remain for a defined period listed in the inventory below.

By origin: first-party cookies are set by www.execxai.com and managed by us; third-party cookies are set by external services we have integrated and managed by those providers.

5. Cookie inventory

This inventory is reviewed and updated when our integrations change.

6. Your choices and consent

When you first visit the site, a consent banner gives you the option to accept or reject each category of non-essential cookies. You can accept all, reject all, or make category-by-category choices.

Your consent applies to your device and browser. It does not expire before 12 months. You can change your choices at any time through the preference centre or by clearing your cookies and revisiting the site.

Withdrawing consent does not affect any processing that took place while consent was in force.

7. Managing your preferences

You can manage cookies through our on-site preference centre, through your browser settings, or through third-party opt-out tools.

Browser controls vary by product. In Chrome: Settings, then Privacy and security, then Cookies and other site data. In Firefox: Settings, then Privacy and Security. In Safari: Settings, then Privacy. In Edge: Settings, then Cookies and site permissions. Browser-level controls apply to all sites, not just ours.

For Google Analytics, an opt-out browser add-on is available at tools.google.com/dlpage/gaoptout.

8. Third-party cookies

Google Analytics collects anonymised data about how visitors use our site, processed under Google's privacy policy and our data processing agreement. Google's privacy practices are described at policies.google.com/privacy.

Our site includes LinkedIn and Bluesky social features. These platforms may set their own cookies when you interact with those features, subject to their own privacy policies.

We use Common Ninja for form and newsletter management. If you subscribe to our communications, Common Ninja may set cookies to manage subscription preferences and track engagement, processed under our data processing agreement with them.

9. International transfers

Some cookie data is processed by services based outside the UK and EEA. Where personal data is transferred to countries without an adequacy decision, we rely on standard contractual clauses or, where applicable, adequacy regulations and data bridge arrangements.

You can request details of the safeguards in place for any specific transfer by writing to compliance@execxai.com.

10. Data retention

Session cookies are deleted when you close your browser. Persistent cookies are retained for the periods listed in the inventory above. Analytics data collected by Google Analytics is retained for 13 months by default. Marketing cookie data is retained for 30 to 90 days. Preference data is retained for up to 12 months.

When personal data collected through cookies is no longer needed, it is deleted or anonymised in accordance with our data retention procedures.

11. Your rights

Under the GDPR, UK DPA 2018, and DIFC Data Protection Law, you have the right to access personal data we hold about you through cookies, to request its erasure, to object to processing based on legitimate interests, and to withdraw consent for any processing based on consent.

To exercise any of these rights, contact our Data Protection Officer at compliance@execxai.com. We will respond within one calendar month.

12. Contact and complaints

If you are not satisfied with our response, you may complain to the Information Commissioner's Office (UK) at ico.org.uk/makeacomplaint, to your local EU supervisory authority, or to the DIFC Commissioner of Data Protection.

13. Changes to this policy

We update this policy when our cookie practices or legal obligations change. The effective date at the top of this page reflects the current version. Previous versions are available via the archive link in the header of this page.

Significant changes will be communicated through the consent banner on your next visit.

14. Jurisdiction information

• EU visitors: we obtain explicit consent for all non-essential cookies in compliance with the GDPR and ePrivacy Directive. You may complain to your local data protection authority.
• UK visitors: we comply with PECR and UK GDPR. You may complain to the ICO.
• DIFC visitors: we comply with DIFC Data Protection Law No. 5 of 2020. You may complain to the DIFC Commissioner of Data Protection.
• All other visitors: we apply the highest applicable standard regardless of your location.