AI Use
Policy
Prepared with ETHIQ AI
25 August 2026
AI Use Policy Wonderful World of Websites
Owner Lisa Rees Owner.
Version 1.0. Effective date 25 August 2026.
1. Purpose This policy sets out how Wonderful World of Websites uses artificial intelligence (AI) responsibly, lawfully, and in a way that protects our people, our customers, and their data. It applies to every AI tool we use, including Website Success Report, and it exists so that everyone knows what good AI use looks like and where the lines are.
2. Scope This policy applies to all staff, contractors, and freelancers of Wonderful World of Websites who use AI in the course of their work, whether the tools are provided by us or used on personal accounts for work purposes. It covers AI used for Operations, Content creation, Customer communication, Data analysis, and Website Success Report.
3. Definitions AI and AI tools: software that performs tasks normally needing human intelligence, including generative AI and large language models. Personal data: information that identifies a living person, as defined under UK data protection law. Special category data: more sensitive personal data such as health, ethnicity, or biometric data. Our AI asset: Website Success Report, described in section 9.
4. Roles and responsibilities Lisa Rees Owner owns this policy, keeps the approved tools register current, answers questions, handles incidents, and reviews this policy on schedule. Everyone covered by this policy is responsible for following it and for raising concerns.
5. Acceptable and prohibited use You may use approved AI tools to draft, summarise, research, and analyse non-confidential material, with a person reviewing the output before it is used. You must not enter personal data, customer data, confidential information, or login credentials into any AI tool unless it is approved for that data. You must not use AI to make final decisions about people without human review, present AI output as fact without checking it, or create misleading or defamatory material.
6. Data handling and confidentiality If you would not post it publicly, do not put it into an AI tool unless that tool is approved for that kind of data. Never enter special category data into AI without explicit sign-off. Where we process personal data using AI, we do so in line with UK data protection law, with a lawful basis and appropriate transparency. Our privacy policy is available at https://wonderfulworldofwebsites.com/privacy-policy.
7. Human oversight AI supports our work, it does not replace our judgement. A named person is always responsible for any AI output we act on or share. We do not let AI make significant decisions about people on its own without an appropriate human review process.
8. Transparency and compliance Where applicable, we are transparent when people interact directly with an AI system. Where the EU AI Act applies to our activities, we comply with relevant transparency requirements under Article 50, including requirements relating to disclosure of AI interaction and the marking or labelling of certain AI-generated or manipulated content where applicable. These transparency obligations apply from 2 August 2026, subject to limited transitional provisions for certain systems already on the market. We use AI in line with the law that applies to us, including the Data (Use and Access) Act 2025 and the Data Protection Act 2018, and we follow ICO guidance. Because we offer our AI asset to users in the EU, or its output may affect people in the EU, the EU AI Act may apply to our activities and we assess the obligations relevant to our role and use case.
9. Our AI asset What it does: When users put in their website it runs an audit of the website to give them a score based on numerous factors, as well as improvement they can make to the website. It uses the following data: it processes names, email addresses and website URL of which names and email addresses are personal data. Its limits: it should not be used for legal advice and me be inaccurate so should always be checked. It is maintained by Wonderful World of Websites. Everyone must work within its stated limits and not treat its output as infallible.
10. Incidents If something goes wrong, report it to Lisa Rees Owner as soon as you notice. Where an incident involves personal data, we follow our data breach procedure and consider whether the ICO must be notified within the required time.
11. Review This policy is reviewed at least every 12 months and whenever the law or our AI use changes significantly.