This Privacy Policy explains how the HR AI Maturity Index (the “Service”) collects, uses, and protects the personal data you provide when you use the assessment. We are committed to handling your data lawfully, transparently, and in line with the UK GDPR and EU GDPR.
Who we are
The HR AI Maturity Index is operated by [COMPANY LEGAL NAME], registered at [REGISTERED ADDRESS], company number [COMPANY NUMBER]. For any data protection queries, contact us at [CONTACT EMAIL].
For the purposes of data protection law, we are the “data controller” of the personal data described in this policy.
What data we collect
We collect the following information when you use the Service:
- Identity and contact details you provide, such as your name, work email address, job title, and organisation.
- Your responses to the assessment questions.
- The results generated from your responses, which we email to you.
- Technical data such as your IP address, browser type, and usage data collected automatically (see our Cookie Policy).
How we use your data and our legal basis
We process your personal data for the following purposes:
- To deliver the assessment and email you your results (legal basis: performance of a contract / your request).
- To improve the assessment and understand aggregate trends (legal basis: legitimate interests).
- To send you related communications where you have asked us to (legal basis: consent). You can withdraw consent at any time.
- To comply with legal obligations and to protect the security of the Service (legal basis: legal obligation / legitimate interests).
Sharing your data
We do not sell your personal data. We share it only with trusted service providers who help us operate the Service (for example hosting, database, and email delivery providers), and only to the extent necessary. These providers act on our instructions under appropriate data processing agreements.
We may disclose data where required by law or to protect our legal rights.
International transfers
Where personal data is transferred outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision.
How long we keep your data
We retain your personal data only for as long as necessary to fulfil the purposes set out above, after which it is deleted or anonymised. Assessment responses and results are retained for [RETENTION PERIOD] unless you ask us to delete them sooner.
Your rights
Under data protection law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data.
- Object to or restrict our processing of your data.
- Data portability, where applicable.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with a supervisory authority (in the UK, the Information Commissioner’s Office).
Contact us
To exercise any of your rights or ask a question about this policy, contact us at [CONTACT EMAIL]. We will respond within the timeframes required by law.