Privacy Policy

Who we are

Daio is an AI operations consultancy for independent agencies, operated by Daniel O'Sullivan and based in the United Kingdom. For the purposes of UK data protection law, Daio is the data controller for the personal data described in this policy.

You can reach us about anything in this policy at daniel@daio.uk.

What we collect

When you take the assessment

The AI Operations Readiness Assessment is run through an embedded form. When you complete it, we collect your name, your agency's name, your email address, and the answers you give. We use these to generate and send your report.

When you email us

If you contact us directly, we receive your email address and whatever you choose to put in your message.

Technical data

Like most websites, our hosting and content-delivery provider automatically logs standard technical information, such as your IP address, browser type, and the time of your request. This is used to deliver the site and keep it secure, not to identify you.

Why we use it, and our lawful basis

• To respond to you and deliver your report, on the basis of your consent and our legitimate interest in answering enquiries.
• To run and secure this website, on the basis of our legitimate interest in operating a safe, working site.
• To meet any legal obligations we are subject to, where the law requires it.

We do not use your data for automated decision-making, and we do not sell it to anyone.

Who we share it with

We use a small number of trusted providers to run the service. They process data on our behalf, under contract, and only for the purposes we set:

• Tally hosts the assessment form and stores your responses.
• Cloudflare hosts and delivers this website and handles the technical logs above.
• Google Workspace handles our email when you write to us.

We share data with these providers only as needed to run the service. We do not pass your data to advertisers or sell it on.

International transfers

Some of these providers operate outside the United Kingdom. Where your data is transferred abroad, it is protected by an appropriate safeguard recognised under UK law, such as a UK adequacy decision or standard contractual clauses with the relevant International Data Transfer Addendum.

Cookies

This site sets no advertising or analytics cookies. The embedded assessment form and our hosting provider may set strictly necessary cookies so that the form works and the site stays secure. These are not used to track you across other sites.

How long we keep it

We keep your assessment responses and any correspondence only for as long as we need them to provide your report, follow up on your enquiry, and keep reasonable business records. When we no longer need them, we delete them. You can ask us to delete your data sooner at any time.

Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct anything that is inaccurate or incomplete.
• Ask us to delete your data.
• Ask us to restrict or object to how we use it.
• Ask for your data in a portable format.
• Withdraw your consent at any time, where we relied on it.

To exercise any of these, email daniel@daio.uk. We will respond within the timeframe the law allows, normally one month.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK regulator, the Information Commissioner's Office, at ico.org.uk.

Changes to this policy

We may update this policy as the service changes or as the law requires. When we do, we will update the date at the top of this page.

Contact