AI usage policy for a brand team

Draft a practical AI usage policy for [BRAND], a UK [CATEGORY] business with [X] staff.

Tools in use or under consideration: [LIST, e.g. ChatGPT Business, Claude Team, Gemini, Granola]
Data we handle: [e.g. customer emails and addresses, retailer EPOS, supplier pricing, unreleased product plans]
Category rules: [e.g. cosmetics claims, HFSS, ASA guidance]

Write a one-page policy (plain English) with: purpose; approved tools and account types (business accounts only, training on our data switched off); what data must never be pasted into AI; human review rules for anything published; disclosure rules for AI-generated images and content; meeting recording consent; how to request a new tool; and who owns the policy. Add a one-paragraph note on UK GDPR considerations (lawful basis, DPAs, international transfers) and suggest we get legal review.

Replace everything in [BRACKETS]. Use a business or team account with training on your data switched off, and remove customer personal data before pasting.