somai studio (“somai”, “we”, “us”) respects your privacy. This policy explains what personal data we process in connection with the somai.studio website, why we process it, and the rights you have under UK data protection law.

Who we are

somai is the studio behind somai.studio. We are the data controller for the personal data described in this policy. You can reach us at hello@somai.studio.

The short version

somai.studio is a static brochure website. It runs no advertising and no cross-site tracking, and it has no forms that collect your data. It uses Google Analytics to measure site usage, but only if you accept it on the cookie banner; decline, and no analytics run. The other personal data we process is the content of emails you choose to send us.

The AI-Native Diagnostic is a separate service, at benchmark.somai.studio (opens in a new tab). It collects what you enter and the work email you ask your brief to be sent to, and it tells you what it keeps before you start. Nothing on this website submits anything to it. What it does with your data is set out below.

Personal data we process

  • Email correspondence. If you email us, we process your name, your email address and anything else contained in your message, so that we can read it and reply.
  • Analytics data, only with your consent. If you accept analytics cookies, Google Analytics processes data about your visit: pages viewed, how you move through and interact with a page (such as the sections you scroll to and the links you select), approximate location, device and browser type, and how you reached the site. See “Website analytics” below.
  • Technical and delivery data. Our hosting provider automatically processes limited technical information (such as IP address, browser type and the pages requested) in server logs, in order to deliver the site and keep it secure. We do not use this information to identify or track individual visitors.
  • The AI-Native Diagnostic. If you choose to take the diagnostic at benchmark.somai.studio, it processes your answers and the work email you ask your brief to be sent to; see The AI-Native Diagnostic below. This website does not collect those answers, and taking the diagnostic is not a condition of anything here.

Website analytics

We use Google Analytics 4 to understand how the site is used so we can improve it. Analytics run only if you give consent on the cookie banner; until then, Google Analytics is not loaded at all.

The data is pseudonymous. Google assigns a random identifier, and we read the results only in aggregate; we do not use analytics to identify you. Our legal basis is your consent (UK GDPR Article 6(1)(a)), which you can withdraw at any time using “Cookie Settings” in the site footer. Google LLC acts as our processor for this analytics data; our Cookie Policy lists the specific cookies involved.

The AI-Native Diagnostic

The ten-minute diagnostic at benchmark.somai.studio is a separate site, operated by somai. It tells you what it keeps before you start, and again where it asks for your email. This is what it keeps, and why.

  • Your answers and your reading. For every completed diagnostic we keep your answers, the bands you choose for sector, revenue and headcount, and the reading they produce. These are kept without your name or email unless you give us your email at the end. We use them to produce your reading and to improve the diagnostic.
  • Your work email, if you ask for your brief. We use it to send the brief. Unless you tick the box asking us not to, we also keep it so that we can follow up about your reading, and every email we send lets you opt out.
  • The AI-Native Index, only with your agreement. If you tick the box, your result may be included in the Index, anonymised and in bands. Nothing is included without it.
  • An anonymous count of how far people get. How far each visit gets through the diagnostic, with no identifier that lasts beyond the visit.

In your browser. The diagnostic sets no cookies. It saves your progress in your browser's storage so you can come back to it, and remembers which version you are shown for that visit only. Neither leaves your device, and you can clear both by starting over or clearing your browser's site data.

Our legal basis. Producing your reading, improving the diagnostic, sending the brief you ask for and following up about it are in our legitimate interests (UK GDPR Article 6(1)(f)). You can object to the follow-up at any time: tick the box when you give your email, reply to any email from us, or write to hello@somai.studio. Including your result in the Index is based on your consent (Article 6(1)(a)), which you can withdraw at any time.

Who processes it, and for how long. Cloudflare hosts the diagnostic and stores the readings, and Resend sends your brief and tells us when a diagnostic is completed. We keep readings for 24 months and your email for 12 months after our last contact with you, and we delete either sooner if you ask us to.

How we use it, and our legal basis

We process email and technical data under our legitimate interests (UK GDPR Article 6(1)(f)): to respond to enquiries, to operate, maintain and secure the website, and to run our business. Where you contact us about working with somai, we also process your data as necessary to take steps at your request before entering into a contract. Analytics data is processed on the basis of your consent, as described above, and the diagnostic's legal basis is set out in its own section.

Who we share it with

We do not sell personal data. We share it only with the service providers that help us run the website and our business:

  • Cloudflare, Inc.: website hosting and content delivery, and hosting the AI-Native Diagnostic and storing its readings.
  • Google LLC: website analytics (Google Analytics 4), only where you have consented.
  • Our email provider: to send and receive correspondence.
  • Resend, Inc.: sending the brief you ask the AI-Native Diagnostic for, and our notice that a diagnostic was completed.

These providers act on our instructions. Where any of them processes personal data outside the UK (as Google does), that transfer is covered by appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an equivalent mechanism.

How long we keep it

We keep email correspondence for as long as we need it to deal with your enquiry, and for a reasonable period afterwards for our business records, after which we delete it. Server logs are retained only briefly by our hosting provider. Google Analytics data is retained for the period set on our Google Analytics property, after which Google deletes it. Diagnostic readings are kept for 24 months, and the email you give the diagnostic for 12 months after our last contact with you.

Your rights

Under UK data protection law you have the right to access a copy of your personal data, and to have it corrected or erased; to restrict or object to our processing of it; and to data portability. Where we rely on your consent (as we do for analytics), you can withdraw it at any time. To exercise any of these rights, or to stop us following up about a diagnostic, email hello@somai.studio or reply to any email from us.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk (opens in a new tab).

Children

The website is not directed at children, and we do not knowingly collect personal data relating to them.

Cookies

somai.studio sets no cookies unless you consent to analytics. For the detail, see our Cookie Policy.

Changes to this policy

We may update this policy as the website or our practices change. The current version applies from the “last updated” date shown above.