Privacy Notice

This site collects very little, because it does very little. There are no accounts, no mailing list and no tracking. The readiness assessment runs entirely inside your own browser. What follows sets out the small amount that is left.

1. Who we are

AI Human Proof is published by 3rd4 Public Relations. In this notice, "we" and "us" mean the company named in section 16, which is the data controller for the personal data described here. You can reach us at any time at info@aihumanproof.com.

2. What this site does not do

Stated plainly, because it removes most of what a privacy notice normally has to cover:

• There is no sign-up and no account.
• The contact form stores nothing. It emails us your message and keeps no copy on this site.
• There is no analytics, no tag manager, no advertising and no cross-site tracking.
• This site sets no cookies.
• There is no mailing list, and we do not send marketing.
• Nothing is bought or paid for on this site.
• The readiness assessment transmits nothing. See section 5.
• Our typefaces are served from this site's own domain, not from Google Fonts or any other third-party service — loading a page here means your browser talks to this website and nobody else.

Because of all that, the small notice you may see in the corner is a statement, not a consent request — there is nothing here to consent to. One exactness: if you close that notice, we remember the choice in your browser's own local storage (key aihp.notice.v1) so it does not reappear. That value is a single yes/no flag, it identifies nothing about you, and it never leaves your device. It is separate from your assessment progress (section 5) and does not touch it.

3. What you send us

If you use the contact form, we receive the name, email address, organisation (if you give one) and message you typed. That is all the form asks for and all it sends. It is emailed to us and is not saved on this site — there is no database behind it and no copy kept here.

If you email us — a correction, a question about the standard, a citation request, a press enquiry — we hold whatever you chose to put in that message: your name, your email address, your organisation if you mention it, and the substance of your enquiry, together with our reply.

Please do not send confidential, sensitive or special-category personal data by email unless it is genuinely necessary and we have agreed to receive it. Ordinary email is not a secure channel.

4. What the hosting collects automatically

Serving a web page requires the server to receive your request. Our hosting provider processes, in its logs:

• IP address.
• Browser, device and operating-system information.
• The page requested and the referring URL.
• Date and time of access.
• Server errors and security events.

This is standard infrastructure logging, used to keep the site running and secure. It may still be personal data even though it does not name you. We do not use it to build a profile of you, and we do not combine it with anything else.

5. The readiness assessment

The assessment is deliberately built so that there is nothing for us to hold. Every question, every answer and every score is processed by code running in your browser. No answer is sent to us or to anyone else, and there is no server to send it to.

Your progress is saved in your browser's local storage, on your own device, so that you can leave and come back to it. That storage is strictly necessary to provide the assessment you asked for, which is why it does not require a cookie banner. You can erase it at any time with the assessment's own "Start over" control, or by clearing site data in your browser. Clearing it deletes your answers permanently — we hold no copy to restore.

"Save as PDF" uses your browser's own print function. The document is produced on your device and is not uploaded.

One exception, and it is yours to trigger. At the end of the report there is a button through to the paid pre-audit bundle on the 3rd4 Public Relations site. If you click it, the link carries two things in the web address: your overall score as a number, and a tag identifying which page you came from. Nothing else goes with it — not your answers, not the individual findings, not anything identifying you. That number will appear in the destination site's ordinary server logs, as any address does. If you would rather it did not, reach the bundle page through the site's own navigation instead of the button.

Because we never receive your answers, no automated decision is taken about you by us. The score is a self-assessment result, not a judgement, and it is not a certification or legal advice.

6. Why we process it, and our lawful basis

Where we rely on legitimate interests, we have considered whether those interests are proportionate and whether your rights override them. We rely on consent for nothing, because we do nothing that requires it.

7. Who else sees it

Two categories of supplier, and no others:

• Website hosting. Vercel Inc., which serves this site and keeps the request logs described in section 4. See the Vercel Privacy Notice.
• Contact form delivery. Resend, which takes the message the form collects and emails it to us. Resend does not store the submission for us and we keep no copy on this site; it holds its own sending records for its own operational purposes. See the Resend privacy policy.
• Where enquiries are read. A message sent through the form is delivered to an address at 3rd4.com, whose mail is handled by Hosts.co.uk and forwarded to a Google mailbox, where it is read and kept. So Hosts.co.uk carries it and Google stores it. See the Google Privacy Policy.
• Email. Microsoft, which receives and stores mail sent to our address through Microsoft 365. For correspondents in the United Kingdom and Europe the Microsoft entity is Microsoft Ireland Operations Limited. See the Microsoft Privacy Statement.

These providers process information only to deliver their service to us, under contract.

We may also disclose information where the law, a court, a regulator or another competent authority requires it, or where it is reasonably necessary to establish, exercise or defend a legal claim.

We do not sell personal data and we do not give it to advertisers.

8. Transfers outside the UK

Vercel Inc. is a United States company, so serving this site involves a transfer of the log data in section 4 outside the United Kingdom. Vercel states in its own privacy notice that it complies with the EU–U.S. Data Protection Framework, the UK Extension to that framework and the Swiss–U.S. framework, and that it otherwise uses standard contractual clauses or another appropriate legal mechanism. That is the safeguard this transfer relies on.

Microsoft states in its own privacy statement that Microsoft Corporation complies with the EU–U.S. Data Privacy Framework, the UK Extension to it and the Swiss–U.S. framework, and that it otherwise uses standard contractual clauses approved by the European Commission. That is the safeguard the transfer of email correspondence relies on.

Google states that Google LLC complies with the EU–U.S. and Swiss–U.S. Data Privacy Frameworks and the UK Extension to the EU–U.S. DPF, and that it relies on standard contractual clauses where a transfer is not covered by an adequacy decision. That is the safeguard covering enquiries once they reach the mailbox described in section 7.

9. How long we keep it

We may keep something longer where a legal obligation, an unresolved dispute or a security investigation requires it.

10. Security

We use proportionate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. No system is completely secure, and email in particular is not. Do not send us anything highly confidential by email.

11. Your rights

In relation to the data described above you have the right to:

• Be told how your data is used — this notice.
• Ask for a copy of the personal data we hold about you.
• Ask us to correct anything inaccurate or incomplete.
• Ask us to delete it.
• Ask us to restrict how we use it.
• Object to our use of it, since we rely on legitimate interests.
• Complain about how it has been handled.

These rights carry conditions and exemptions in the legislation. Two rights a longer notice might list are missing here for a reason: data portability applies to processing based on consent or contract, and we rely on neither, and there is no consent to withdraw because we ask for none.

To exercise a right, email info@aihumanproof.com. We may need to ask for enough information to be satisfied of your identity. We will respond within one month.

12. Complaints

Please raise it with us first — it is usually quicker. You also have the right to complain to the UK Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
ico.org.uk

13. Children

This site and its assessment are written for organisations and professional users. They are not directed at children, and we do not knowingly collect personal data from them.

14. Other sites we link to

We link out heavily, because every factual claim here cites a primary source. We are not responsible for the privacy practices of those sites. That includes the paid pre-audit bundle offered at the end of the assessment, which is delivered by 3rd4 Public Relations on a separate site under its own privacy notice. Following that link takes you off AI Human Proof, and it carries your overall score with it — see section 5.

15. Changes to this notice

If what we do changes, this notice changes with it, and the date at the top changes too. The current version is always the one on this page.

16. Contact us

For any question, request or complaint about personal data, email info@aihumanproof.com, or write to us at 3rd Dimension Media (3rd4) Limited, Sandfield House, St Albans, Hertfordshire AL1 4JZ, England. Registered in England and Wales, company number 06752007. Trading as 3rd4 Public Relations.