AIML Partners is committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and any applicable Irish data protection legislation.
1. Data Controller
AI Machine Learning Partners Ltd. (trading as AIML Partners) is the Data Controller for information we process in connection with the public website and our business operations.
If you have any questions about this policy or how we handle your data, please contact us at:
- Email: info@aimlpartners.com
- Website: www.aimlpartners.com
For data protection enquiries, please use the email address above and include “Data Protection” in your subject line.
2. Data We Collect and Why
We collect and process personal data only for specified, explicit, and legitimate purposes. The table below sets out what data we collect, the lawful basis for processing, and how long we retain it.
| Data Type | Source | Purpose | Lawful Basis (GDPR Art. 6) | Retention Period |
|---|---|---|---|---|
| Name and email address | Direct email enquiries | Responding to enquiries and providing requested information | Legitimate interests or pre-contractual steps (Art. 6(1)(f)/(b)) | As set out in the business retention schedule |
| Business engagement information | Consulting clients | Delivering contracted AI and cybersecurity advisory, implementation or assessment services | Contract, legitimate interests or legal obligation, as applicable | As required by the applicable contract and retention schedule |
| Technical request and security information (such as IP address) | Web hosting and security systems | Website delivery, security, bot management and abuse detection | Legitimate interests in operating a secure website | According to hosting and security log retention settings |
| Name, job title, email address, organisation name, and AI system information | A4C001 EU AI Act Classification Intake Form (intake.aimlpartners.com) | Processing EU AI Act classification assessment requests; delivering advisory classification reports; follow-up consultation | Consent (Art. 6(1)(a)) / Performance of a contract (Art. 6(1)(b)) | 2 years from date of submission, unless an ongoing client relationship requires longer retention |
| Name, email address and AI readiness responses/scores | Self-service AI Readiness Assessment (only if you explicitly submit) | Creating an assessment record in our business systems and responding to a requested follow-up where applicable | Consent (Art. 6(1)(a)) | Subject to the assessment record retention policy; confirm the applicable period before publication |
You can complete the on-page AI Readiness Assessment and view the results without entering your name or email. If you choose to submit your details and results, that information is sent to our secure website endpoint and, when configured, to our business records system (Notion). The website does not require an account to complete the assessment.
We use encrypted connections for website communications. Storage, processing locations and transfer safeguards are governed by the relevant service-provider arrangements and should be verified for each connected service.
3. Third-Party Data Sharing and International Transfers
We do not sell your personal data. Depending on the services used, we may share data with service providers acting on our instructions, including the following existing or proposed service providers (the list and current use should be verified before publication):
- Google LLC — website analytics (Google Analytics). Google may transfer data outside the EEA under Standard Contractual Clauses (SCCs). See Google Privacy Policy.
- LinkedIn Corporation — insight and advertising tags. See LinkedIn Privacy Policy.
- Supabase Inc — database and backend infrastructure used to store EU AI Act intake form submissions submitted via intake.aimlpartners.com. Supabase is a US-incorporated company; however, all intake form data is stored exclusively in the EU West (Ireland, AWS eu-west-1) region. Any support access and international transfers should be reviewed against the relevant processor terms. A Data Processing Agreement (DPA) is available from Supabase at supabase.com/privacy . Transfer safeguard: Standard Contractual Clauses (SCCs).
- Notion Labs, Inc. — records of AI readiness assessment submissions when you explicitly choose to submit. Service location, subprocessors, international transfer safeguards and the applicable retention schedule must be confirmed against the current agreement before publication.
Where any personal data is transferred outside the EEA, we ensure appropriate safeguards are in place (e.g., SCCs or adequacy decisions) as required by Chapter V of the GDPR.
4. Your GDPR Rights
Under the GDPR, you have the following rights in relation to your personal data:
- Right of Access (Art. 15) — You can request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16) — You can ask us to correct inaccurate or incomplete data.
- Right to Erasure / "Right to be Forgotten" (Art. 17) — You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
- Right to Restriction of Processing (Art. 18) — You can ask us to restrict how we use your data in certain circumstances.
- Right to Data Portability (Art. 20) — You can request that we transfer your data to you or to another organisation in a structured, machine-readable format.
- Right to Object (Art. 21) — You can object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop processing immediately.
- Right to Withdraw Consent (Art. 7(3)) — Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Marketing Communications & Opt-Out
We will only send you marketing or promotional communications if you have given us your explicit consent to do so.
You can opt out of marketing communications at any time by:
- Clicking the "Unsubscribe" link at the bottom of any marketing email we send you; or
- Emailing us at info@aimlpartners.com with the subject line "Opt-Out".
We will process your opt-out request promptly and within no more than 5 business days. Please note that opting out of marketing does not affect our ability to contact you for transactional or service-related purposes (e.g., responding to a query you raised).
7. Right to Lodge a Complaint
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Irish supervisory authority:
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie
Phone: +353 (0)761 104 800
We would, however, appreciate the opportunity to address your concerns before you approach the DPC, so please contact us in the first instance.
8. Contact Us
For any questions about this policy, to exercise your rights, or to opt out of communications, please contact:
AIML Partners — Data Protection
info@aimlpartners.com
Last Updated: 31 October 2026