Legal

Webinar privacy notice

This notice covers the free live series "Where you actually are, and what it costs" and the account you create to attend it: what is collected, what is recorded, what happens in the chat, how referral and partner links work, who processes what, how long everything is kept, the lawful bases, and your rights. Version 3, last updated 29 September 2026.

Who is responsible

The controller is Eduard Vlase Limited, trading as AI Automation Hub. Eduard Vlase Limited is registered in England and Wales, company number 16832727. Registered office: 16 Hambleton Grove, Emerson Valley, Milton Keynes, MK4 2JS, United Kingdom.

Contact for anything in this notice, including rights requests: support@ai-automation-hub.net.

Your account

  • Registering creates an account: your email address, your first name, a password (stored only as a salted hash) and whether the address has been confirmed. The evenings are only open to confirmed addresses.
  • The registration records the exact wording you agreed to and when, the version of this notice at the time, whether you ticked the newsletter box, and whether you ticked a partner box (see below).
  • Two cookies are set by the account service at api.ai-automation-hub.net when you register or sign in: a session cookie and a CSRF protection cookie. Both are strictly necessary for the account to work and need no consent. They are not used for analytics or advertising.
  • Sign-in, registration and password-reset attempts are rate-limited by IP address to stop abuse. The address is not otherwise kept.

The emails

The account sends a confirmation email that doubles as your registration details and carries a calendar file; a reminder on the morning of each evening, which for nights two and three also carries the previous night's recording (or, if a recording is late, an email with the recording on its own later that day); a reminder one hour before; and the recording the morning after each evening to everyone who confirmed their email. Nothing else is sent from the account unless you tick the separate newsletter box. Bounces and complaints are recorded so the address is not written to again.

What is recorded

  • The presenter's video, audio and screen. The stream is one way: attendee cameras and microphones are never captured, and there is nothing to switch on.
  • If the presenter reads a chat question aloud, your first name may be audible in the recording and therefore in the published copy.
  • Questions that are not answered live may be answered in the recording email the next morning, with the first name of the person who asked.

The chat

  • Chat messages are visible to every signed-in attendee and to the moderators during the session, under first names only. Moderators can delete a message, mute an attendee (which hides their earlier messages) or rename a display name.
  • Messages are kept for 30 days after the session, only to follow up on questions that were not answered live, and are then removed. Any chat export downloaded for that purpose is deleted on the same schedule. The chat is never published.
  • The chat shows comments on the presenter's own content; it is not a general messaging service. To report a message, email support@ai-automation-hub.net.

Who receives the recording

  • Everyone who confirmed their email gets the recording by email the next morning, whether they attended or not, and can watch it signed in on this site.
  • The recording is also published publicly on YouTube within about 48 hours. Spoken first names, where a chat question was read aloud, may be audible in the published copy.
  • On this site, YouTube videos load only after you click them. Once you click, Google receives your request and acts as an independent controller under its own privacy policy.

Referral links

  • Every registrant gets a personal share link. When someone registers through it, the two registrations are linked, and your account shows how many people registered through your link and confirmed their email. That count therefore reveals to you that they did. Nothing about them beyond the count is shown, and the count is not shown to anyone else.
  • The referral code and any partner slug travel in the page address and the registration form only. Nothing is stored in your browser for attribution.
  • The form also records the page you registered from, the site that referred you to it and any campaign labels (UTM parameters) in the address, so we know which channels bring people.

Partners

Some people reach the registration form through a partner's link. A partner is an organisation that has agreed with Eduard Vlase Limited to promote the evenings to its own audience. When you register through a partner link the form says so, names the partner and shows this:

  • The partner receives a share of any fee from people who later buy something from us having registered through its link. The free evenings are unaffected. This is a paid affiliation and it is disclosed on the form so you know before you register.
  • The partner and Eduard Vlase Limited are joint controllers for the attribution under UK GDPR article 26. The arrangement between them sets out who answers your requests; you can always contact either, and support@ai-automation-hub.net answers for us.
  • What the partner receives: a count of registrations and of attendance attributed to its link. The partner receives your name and email address only if you ticked the separate box on the form allowing it to contact you. That box is never pre-ticked and leaving it empty changes nothing about the evenings. The partner never receives the chat.
  • The attribution lasts 90 days from your registration. People who registered through a friend's share link, where the friend came through a partner, are counted for the partner's share internally only and are never passed to the partner.
  • Partners are asked to delete what they hold when you ask us to delete your account, but deletion here cannot reach copies a partner already holds; contact the partner directly for those.

Attendance

While the live page is open it reports to the server about once a minute that you are watching. This records who attended and for roughly how long, and feeds the attendance counts in partner reports. It is not used to grade or rank anyone.

The newsletter

The newsletter box on the registration form is a separate choice with its own wording. If you tick it, your address is passed to the newsletter system, which sends its own confirmation email; you are on the list only once you click that link, and every newsletter email carries a one-click unsubscribe. The newsletter has its own privacy notice. Deleting your webinar account does not unsubscribe you from the newsletter: the two systems are separate. If you want both gone, say so in your email and both are handled.

Who processes your data

  • Amazon Web Services (London region) hosts the account service, the database and the email sending.
  • Vercel hosts this website. Requests to it may be served from Vercel's network outside the UK.
  • Video streaming and delivery for the evenings uses a streaming server and a content delivery network. The providers and their locations are named on this page before the first evening; the recording is stored privately and published on YouTube as described above.
  • Supabase and Resend process the newsletter only, and only if you ticked the newsletter box.
  • Stripe processes any payment you later choose to make for a paid session. Card details go straight to Stripe and never touch our systems.
  • When a guest joins the presenter live, a video-call tool carries the guest's audio and video into the stream. Attendees are not on that call.

Some of these providers, or parts of their networks, are in the United States or elsewhere outside the UK. Transfers rely on the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, or on an adequacy decision where one applies.

Lawful bases

  • The account, the emails about the evenings and the live and replay pages: performance of the registration you asked for, UK GDPR article 6(1)(b).
  • Recording the sessions and publishing the teaching content, referral attribution, attendance counts and partner reporting: legitimate interests, article 6(1)(f). A legitimate interests assessment is on file and you can object at any time.
  • The newsletter: consent, article 6(1)(a), confirmed by its own email and withdrawable with the unsubscribe link in every newsletter email.
  • A partner contacting you: consent, article 6(1)(a), given only by ticking the separate box on the form and withdrawable by telling the partner or us.
  • Rate limiting, bounce handling and abuse prevention: legitimate interests, article 6(1)(f).

How long it is kept

  • Account and registration data: 12 months after the last evening of the series, then deleted.
  • Chat messages and any chat export: 30 days after the session.
  • If you delete your account before then, your registration, attendance, chat messages and emails are removed straight away. A record that an address was deleted, and which partner it was attributed to, is kept as a hash until the 90-day partner window ends so the partner share is counted correctly; it cannot be turned back into your address. You can register again later with the same address.
  • Records of any payment are kept for six years for tax law, with your name and address removed once the account is deleted.
  • The published YouTube recordings stay up; they contain the presenter and not the attendees.
  • Addresses on the do-not-email list (after a permanent bounce, a spam complaint or a request not to be emailed): kept for as long as the webinar emails are sent, because the list is what stops an address being emailed again. The admin's change history keeps a record of each address added to the list for the same time.
  • Sign-in sessions: a session ends 60 days after you sign in, or two weeks after your last visit if you did not sign in (a registration or sign-in that was not finished keeps the address you typed in its session until then). Ended sessions are deleted within a day.
  • To stop anyone using the site to flood an inbox, we count the emails sent to an address that nobody signed in asked for (password resets and account notices) under a one-way code, not the address. Each count is deleted when its day is over.

Your rights

Under UK GDPR you can ask for access to your data, correction, erasure, restriction, a portable copy, and you can object. Your account page offers a download of everything the webinar system holds about you and a delete button that removes it. For anything else, or to reach the newsletter list as well, email support@ai-automation-hub.net from the address in question and you will get an answer within one month.

If you are unhappy with how your data is handled you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.