Privacy Notice

Introduction

AI Right™ helps Irish SMEs and organisations assess and improve their AI readiness. We take your privacy seriously and aim to explain, in plain English, what information we collect, why we collect it, and what happens to it. This policy applies to visitors to airight.ie and to anyone who completes the AI Right™ Assessment.

AI Right™ and associated branding, platform content and materials are proprietary to their respective owner and are protected by applicable intellectual property rights.

Data controller. AI Right™ is operated by Adeltus, trading as AI Right™, based in Cork, Ireland. For any privacy question or request, contact hello@airight.ie.

Where your organisation takes part through a partner organisation, such as an enterprise agency, industry association or representative organisation, that partner sees aggregated programme information and the member records it administers. It does not see your private Workspace content.

Workspace and Partner Hub Data

If your organisation uses the AI Right™ Workspace, we process the records you choose to create there, such as your AI register entries, policy status, actions, evidence notes, incident records and review history. This content belongs to your organisation and is only visible to your organisation's authorised users and to authorised AI Right™ administrators for support purposes.

Please avoid entering unnecessary personal or sensitive information into free-text fields. Governance records rarely need to identify individuals.

If your organisation switches on the Staff Hub, employees can open it through a link without an account. We record anonymous activity totals (such as visits and checks run) and any AI opportunity suggestions or tool requests employees choose to submit, which are shared only with their organisation.

Partner administrators see aggregated programme statistics and the member records they manage. Private Workspace content is not shared with partner organisations.

Pilot Participation

AI Right™ is currently operating a controlled pilot. When an organisation joins, an authorised user is asked to confirm acceptance of the Pilot Participation Terms and this Privacy Notice. We record the organisation, the accepting user, the date and time, and the exact document versions accepted. Publicity permission is a separate optional choice and does not affect access. See the Pilot Participation Terms.

Processor Agreements

We use a small number of service providers acting as processors on our behalf. Data processing terms with each provider are reviewed and recorded internally before live pilot deployment. The status of these agreements is maintained in our internal processor register and is available on request to participating organisations.

We do not permit our providers to use your personal data for their own purposes, including training their own models, except where a provider's terms have been reviewed and accepted by us and recorded in that register.

How the AI Right™ Assessment Works

When you complete the AI Right™ Assessment, your answers are processed to produce:

• a personalised AI Right™ Readiness Report (PDF)
• tailored recommendations and a suggested action roadmap
• access to your private AI Right™ Workspace
• benchmarking comparisons against other participants, where enough data is available

Reports are generated automatically using the AI Right™ assessment framework. See the "Automated Assessment" section below for more detail on how this works.

Information We Collect

Depending on how you use the site, we may collect:

• Your name, email address and organisation name (only if you choose to request a report or contact us)
• Your industry sector
• Your assessment answers, calculated pillar scores, overall score and recognition level
• Basic website usage information (see Cookies and Analytics below)

You can complete the assessment and view your on-screen result without providing contact details. Contact details are only required if you want a copy of your PDF report by email.

Purpose of Processing

We use the information we collect to:

• Generate and deliver your personalised AI Right™ Readiness Report
• Provide access to the AI Right™ Workspace and related resources
• Respond to enquiries you send us
• Produce anonymous, aggregated benchmarking of AI readiness across sectors
• Improve the AI Right™ assessment, resources and website
• Support educational content and research-informed publications (using anonymous, aggregated data only)

Lawful Basis for Processing

Under the GDPR we rely on the following lawful bases:

• Consent. This applies when you choose to submit your contact details to receive a report, when you opt in to non-essential cookies, and when you sign up for optional updates.
• Legitimate interests. This covers operating and securing the website, producing anonymous, aggregated benchmarking and research insights, and improving the AI Right™ assessment and resources. We only rely on legitimate interests where these do not override your rights and freedoms.
• Performance of a request. This covers responding to enquiries you send us and delivering a report you have requested.
• Performance of a contract. This covers providing a Workspace to a participating organisation under an annual organisational licence, and administering payment, renewal and billing records for that licence.
• Legal obligation. This applies where we are required to retain or disclose information to comply with the law.

Automated Assessment

The AI Right™ Readiness Report is generated automatically using a predefined scoring framework that we designed. Your answers are scored against fixed criteria to produce pillar scores, an overall score, a recognition level and a set of recommendations drawn from predetermined guidance.

No Large Language Model (LLM) or other generative AI system writes, edits or alters the assessment recommendations. This means reports are consistent, repeatable and based entirely on the AI Right™ methodology.

The assessment is intended as a practical readiness tool, not as legal, regulatory or professional advice. You are free not to be subject to the automated result and can contact us to discuss it.

Benchmarking & Confidentiality

Your individual assessment results remain confidential. We never publish or share results in a way that identifies you or your organisation.

Benchmarking figures shown on the site or in reports are:

• anonymous: no names, emails or organisations are used
• aggregated: calculated from a group of responses, not individual records
• only shown once there are enough responses to protect confidentiality (small sample sizes are hidden)

Benchmarking is used to help participants understand overall AI readiness trends across sectors, and to improve AI Right™ over time.

Research & Educational Use

We may analyse anonymous, aggregated assessment data to:

• understand AI readiness trends among Irish SMEs and organisations
• improve the AI Right™ assessment and Workspace
• develop educational resources and guidance
• produce sector-level insights
• support research-informed publications

We will never publish personally identifiable information as part of this work.

Data Storage

Assessment responses, contact details and generated reports are stored securely in our managed cloud database and file storage. Access is restricted to authorised administrators and to the automated systems that generate and deliver your report. We use appropriate technical and organisational safeguards, including access controls, encrypted connections and row-level security policies, to protect your information. No system can be guaranteed to be 100% secure, and we do not overstate the level of protection provided.

Data Sharing

We do not sell your personal information to anyone, ever. To operate AI Right™, we rely on a small number of trusted service providers acting as data processors on our behalf. These may include providers of:

• secure cloud hosting and application delivery
• managed database and file storage
• transactional email delivery (for sending your report and any updates you have requested)
• payment processing for annual organisational licences
• website analytics and error monitoring, where used

These providers only process your information under contract and in line with this policy. We may also disclose information where required by law or to protect our legal rights.

International Data Transfers

We aim to keep your data within the European Economic Area (EEA) wherever possible. Some of our service providers (for example cloud hosting or email delivery providers) may process data outside the EEA. Where that happens, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to ensure your information continues to be protected to an equivalent standard.

Data Retention

Assessment responses

Assessment responses that are linked to an identifiable individual or organisation (including name, email address, organisation name and assessment results) are retained for up to 24 months from your most recent assessment. This allows AI Right™ to:

• generate your personalised report
• provide benchmarking against sector and overall participants
• allow you to revisit previous assessments where applicable
• improve the AI Right™ platform

You can request deletion of your personal information at any time by emailing hello@airight.ie, unless AI Right™ is legally required to retain certain information.

Anonymous benchmarking data

Once assessment data has been irreversibly anonymised, it may be retained indefinitely. Anonymous aggregated information may be used for:

• benchmarking
• sector insights
• educational resources
• improving AI Right™
• understanding AI readiness trends
• research-informed publications

Individual organisations will never be identified. Individual people will never be identified. Anonymous benchmarking cannot be linked back to an identifiable organisation.

Contact and enquiry emails

Contact form submissions and email correspondence are normally retained for 12 months after the conclusion of the correspondence, unless a longer period is legally required or an ongoing matter requires it.

Research and Educational Purposes

AI Right™ may use anonymous, aggregated assessment data to:

• understand AI readiness trends across SMEs;
• improve the AI Right™ platform and resources;
• develop educational materials and practical guidance;
• produce anonymised benchmarking and sector insights; and
• support research-informed publications and reports.

No individual or organisation will be identified in any published material. AI Right™ assessment data does not currently form part of a formal academic research study and is not collected under university research ethics approval. If, in the future, AI Right™ assessment data is used within a formal academic research project, this will only occur where appropriate ethical approval has been obtained and participants have been provided with the relevant information and consent process where required.

Service Providers & Data Transfers

The following services support the AI Right™ platform. Personal information is kept within the European Economic Area (EEA) wherever possible. Where a processor may transfer data outside the EEA, we rely on approved safeguards such as the European Commission's Standard Contractual Clauses.

The AI Right™ site does not currently load third-party analytics or advertising scripts. If we add analytics in future, it will only load after you opt in via the cookie banner, and this list will be updated.

Your Rights

Under the GDPR you have the right to:

• request access to the personal information we hold about you
• request correction of information that is inaccurate or incomplete
• request deletion of your personal information
• object to, or request restriction of, certain processing
• withdraw your consent at any time, where processing is based on consent
• request a copy of your data in a portable format
• contact AI Right™ with any privacy questions

You also have the right to lodge a complaint with the relevant supervisory authority.

To exercise any of these rights, email hello@airight.ie.

Marketing Communications

We only send marketing communications to people who have specifically asked for them. The option to receive AI adoption insights, AI Right™ updates and resources is an optional tick box that is never pre-selected, and it is entirely separate from creating an account, completing the assessment, receiving your report, accepting our Terms of Use or using your Workspace.

The lawful basis for these communications is your consent. We keep a record of the wording you agreed to, the date and where you gave consent, so we can evidence it. We do not sell or share your details with third parties for their own marketing, and partner organisations have no access to this list.

You can withdraw consent at any time, either through the unsubscribe option in any message or by contacting hello@airight.ie. Withdrawing has no effect on your account, assessment, report or Workspace, and we keep a record of the withdrawal so that it is respected.

Cookies and Analytics

We use a small number of essential cookies and local browser storage to remember your preferences (for example whether you have accepted the cookie notice, and any saved progress). We may also use privacy-respecting analytics to understand how the site is used and to improve it.

You can control cookies through your browser settings. See our Cookie Notice for more information.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes to the AI Right™ service or to legal requirements. The "Last updated" date at the top of this page will always show when it was most recently revised.

Contact

For privacy-related enquiries contact: