Privacy notice
This notice explains what happens to information you submit through AI Governance Check.
Who is responsible?
AI Governance Check is responsible for this website and for the information you submit through it. You can reach us through the contact page.
What you share, and when it reaches us
The free checks and the downloads work differently, on purpose.
The checks (EU AI Act, ISO 42001, AI policy). Your answers stay in your browser and your result is shown in full on screen. We ask for your organisation because it is printed into your report, but nothing reaches us unless you tick the box asking a specialist to walk through your results. Tick it and your answers and contact details are sent to us so we can prepare; leave it and nothing is sent.
The downloads (the one-page timeline, the readiness gap sheet, the policy skeleton). To send you one of these documents we ask for your name, work email and organisation, and those details are sent to us when you submit the form. The document itself is produced in your browser. There is a separate, unticked box if you would also like a specialist to walk through it with you.
The site uses Google Analytics, and only if you accept analytics cookies. Until you do, the Google Analytics script is never fetched and it counts nothing. Nothing you type into any form is ever put into an analytics event. Our cookie policy lists every cookie involved, and you can change your choice at any time through cookie settings.
Our lawful basis
For the walkthrough, whether you reach it through a check or a download, we rely on your consent: the tick you give. The box is unticked by default, and you can withdraw your consent at any time by contacting us. Google Analytics runs on the same basis, through the choice you make in cookie settings.
For the downloads we rely on our legitimate interests (UK GDPR Article 6(1)(f)): responding to a business request for a resource we produce, and following up appropriately with the organisations that ask for it. We have weighed this against your interests and consider it proportionate. The details are work contact details, not special-category data; we ask for no more than we need to send the document and, where you ask for it, to arrange a conversation; and you can object to this processing at any time using the contact details above, after which we will stop.
How long do we keep it?
We keep a download submission or a walkthrough request only as long as we need it to answer you and to run any follow-up you asked for, and then we delete it. Ask us to delete it sooner and we will.
What are your rights?
Depending on the circumstances, UK GDPR gives you the right to:
- ask for access to your personal data;
- ask for inaccurate data to be corrected;
- ask for your data to be erased;
- ask for use of your data to be restricted;
- object to our legitimate-interests processing for the downloads, which we will then stop;
- receive data you provided in a portable format;
- withdraw consent at any time.
You also have the right to complain to the Information Commissioner's Office. Guidance and contact details are available at ico.org.uk.