CrowsNest AI — a product of Manibus Ltd
CrowsNest AI is a product of Manibus Ltd, a company registered in England and Wales under company number 14652898, whose registered office is at 22–26 Bank Street, Herne Bay, England, CT6 5EA. CrowsNest AI is a trading name of Manibus Ltd, and CROWSNEST is a registered UK trade mark (UK00004178034) held by the Company.
Manibus Ltd is the data controller for the personal data described in this notice. We are registered with the Information Commissioner's Office under registration number ZC211196.
If you have any question about this notice, or you want to exercise any of the rights described in section 9, contact:
Data Protection Contact, Manibus Ltd
Email: privacy@manibushealth.com
Post: Data Protection Contact, Manibus Ltd, 22–26 Bank Street, Herne Bay, England, CT6 5EA
We aim to acknowledge every enquiry promptly and to respond substantively within one month.
Most privacy notices address only the people who visit a website or buy a product. Ours has to do something more, because of what CrowsNest AI does.
CrowsNest AI reads information that public bodies have already published — NHS trust and integrated care board papers, procurement notices, published strategies and news — and organises it so that our customers can identify organisations that have stated a need for the products and services they supply. Those published documents name people: the officers, committee members and senior staff who hold the relevant roles.
That means we hold personal data about people who have never contacted us and may not know we exist. We think those people are entitled to a clear explanation, so section 4 is written for them. Sections 3 and 5 to 7 cover the more ordinary situations — visiting our website, contacting us, or using the platform.
What we collect. Your name, business email address, job title, employer, telephone number if you give it, and the content of your correspondence with us. When you visit crowsnestai.net we also collect technical data such as your IP address and browser information.
Why. To answer your enquiry, to provide information you have asked for, to send you business-to-business marketing where we are permitted to, and to keep our website secure and working.
Our lawful basis. Our legitimate interests in responding to enquiries and marketing our services to businesses, and your consent where we ask for it. You can object to marketing at any time and we will stop immediately and permanently.
How long we keep it. Enquiry and marketing records are kept for 24 months from your last meaningful engagement with us, then deleted — or sooner if you ask us to stop contacting you.
This section applies if you work for an NHS organisation, a local authority or another public body, and your name appears in a document your organisation has published.
Only professional information, drawn from what has already been published: your name, job title or role, the organisation you work for, any committee or board membership recorded in the document, and statements, decisions or positions attributed to you in your professional capacity.
From documents and web pages that public bodies publish openly and without restriction — board and committee papers and minutes, procurement and contract notices, published strategies and plans, public registers, organisational websites and news reporting. We only collect from sources that are freely and lawfully accessible. We do not circumvent paywalls, login screens or other technical restrictions to obtain personal data.
We organise the material into a structured, searchable library. Our customers — businesses that supply products and services to the public sector — use it to identify organisations with a stated need, to understand the context of that need, and to see who within the organisation holds the relevant role, so that they can make a relevant approach rather than an untargeted one.
We rely on legitimate interests under Article 6(1)(f) UK GDPR. Our legitimate interests, and those of our customers, are in providing and using accurate market intelligence. We have carried out and documented a balancing assessment, and these are the points that matter most in it:
We keep this assessment under annual review. If you disagree with our conclusion, section 9 explains how to object — and we will normally uphold an objection, because the organisational insight our customers need can generally be provided without naming you.
Our customers, through their own secure instance of the platform, and our sub-processors — the suppliers who host and support the platform for us, who act on our instructions and are contractually bound to the same standards. We do not sell personal data to anyone.
The library operates on a rolling window and is refreshed continuously, so information ages out of the active library by design. If you object and we uphold your objection, we remove your personal data and add you to a suppression list so that later collection cycles do not reintroduce it.
If your employer is a CrowsNest AI customer and you are one of its authorised users, we process your name, business email, job title, account credentials and your use of the platform, in order to provide and support the service.
For this data, your employer is the data controller and we act as its processor, under a written data processing agreement. Please read your employer's own privacy notice, and direct requests about this data to your employer in the first instance — though you are welcome to contact us and we will help.
We do not use analytics, advertising or tracking cookies on crowsnestai.net. We do not use Google Analytics, Google Tag Manager, advertising pixels, session recording or any other behavioural tracking. We do not profile visitors to our website, and we do not share website visitor data with advertising networks.
The one third-party service on our website is Google reCAPTCHA, which protects our contact form from automated abuse and spam. reCAPTCHA is provided by Google and works by assessing whether a visitor is a person or a bot. To do this it sets a cookie and collects limited technical information — including your IP address and interactions with the page — which is transmitted to Google. We use it solely to keep the contact form usable and to prevent abuse; we do not receive any advertising or profiling data from it, and we do not use it for any other purpose.
Google's handling of that information is governed by the Google Privacy Policy and the Google Terms of Service.
If you would prefer not to have reCAPTCHA applied to you, you can contact us by email at privacy@manibushealth.com instead of using the contact form.
All data processed by the CrowsNest AI platform is held and stored exclusively within the United Kingdom. That includes everything described in sections 4 and 5 — the knowledge library, customer documents, search queries, generated outputs, audit logs, backups and disaster recovery. We do not transfer that data outside the UK, and our suppliers are contractually required to store and process it within the UK only. This is a contractual commitment we give to our customers, not simply a preference.
Where we use third-party artificial intelligence services as part of the platform, we ensure by contract that data submitted to them is not used to train their models.
One exception applies, and only to our website. As explained in section 6, the reCAPTCHA protection on our contact form transmits limited technical information to Google, which may process it outside the United Kingdom under its own safeguards. This affects visitors to crowsnestai.net only. It does not apply to the CrowsNest AI platform, to any customer data, or to any of the information described in section 4. We would rather state this plainly than make a blanket claim we cannot stand behind.
CrowsNest AI scores and ranks opportunities — organisations and their published needs. It does not score, evaluate or make decisions about individual people. We do not make any decision producing legal or similarly significant effects on you by automated means. Any approach you receive from one of our customers is a decision made by a person at that customer, not by our software.
You have the right to:
Email privacy@manibushealth.com with your name and employer and tell us you object. You do not need to give a reason, use any particular form of words, or mention data protection law.
We will acknowledge your objection, pause the use of your data while we consider it, and respond within one month. In practice we will normally uphold the objection: we will remove your personal data from our library and from anything derived from it, and add you to a suppression list so that later collection cycles do not bring it back. If we do not uphold your objection, we will explain why in writing and tell you how to complain.
There is no charge for exercising any of these rights.
If you are unhappy with how we have handled your personal data, please tell us first at privacy@manibushealth.com — we would rather put it right. We will acknowledge your complaint within 30 days and respond substantively without undue delay.
You also have the right to complain to the Information Commissioner's Office at any time:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
ico.org.uk · 0303 123 1113
We review this notice at least annually and whenever our processing changes materially. The version number and date at the top show when it was last updated. Where a change materially affects you and we hold your contact details, we will tell you directly.