Skip to main content

Privacy Policy

Your privacy matters. Here's how we collect, use, and protect your personal data.

Last updated: June 2026

1 Data Controller

This website is operated by the Safer Agentic AI Community of Practice. For data protection queries, please contact us through the contact form on our home page.

2 What Data We Collect

When you contact us through our website form, we collect:

  • Your name
  • Your email address
  • The content of your message
  • Timestamp of submission

When you subscribe to our newsletter, we collect:

  • Your name
  • Your email address

Newsletter subscriptions are handled through the Mailchimp sign-up form on our website. You provide this information voluntarily when you choose to subscribe, and you may unsubscribe at any time.

3 How We Use Your Data

We process your personal data for the following purposes:

  • Responding to inquiries: We use your contact information to respond to your questions or feedback about our research.
  • Research collaboration: If relevant, we may contact you about research opportunities or collaborations.

4 Legal Basis for Processing

We process your data based on:

  • Consent: You explicitly consent when submitting the contact form
  • Legitimate interests: For responding to inquiries and managing research collaborations

5 Data Sharing

Your data may be shared with:

  • Formspree: Our form processor (see their privacy policy (opens in new tab))
  • Mailchimp (Intuit Mailchimp): Our email-marketing processor for newsletter delivery. We share your name and email address, on the legal basis of your consent given when you subscribe (see their privacy statement (opens in new tab))
  • Research team members: Only as necessary to respond to your inquiry

We never sell or share your data for marketing purposes.

If you use our assessment tools, additional processing applies to the documents and evidence you submit. For details on how the Auto-Assessor and Safety Advisor handle your data (including evidence sent to Anthropic or OpenAI for analysis, and summaries stored locally in your browser via IndexedDB), please see our Data Handling Notice.

6 International Data Transfers

Several of our service providers are based in the United States, including Formspree, Mailchimp (Intuit Mailchimp), Anthropic, OpenAI, and GitHub. When you contact us, subscribe to our newsletter, use our assessment tools, or access this website, your personal data may be transferred to and processed in the United States.

Where personal data is transferred outside the United Kingdom or the European Economic Area, we rely on appropriate safeguards to protect it, such as Standard Contractual Clauses (SCCs) and the data protection terms offered by these providers.

7 Data Retention

We retain your contact information and messages:

  • For as long as necessary to complete our correspondence with you
  • As required to comply with legal obligations
  • Until you request deletion

8 Your Rights

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a portable format
  • Object: Object to certain types of processing
  • Withdraw consent: Withdraw consent at any time

9 California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you certain rights regarding your personal information. In the past twelve months, we have collected the following categories of personal information:

  • Identifiers: Such as your name and email address
  • Customer records: The content of any message you send us through our contact form
  • Internet activity: Limited technical information, such as the timestamp of a form submission

We do not sell or share your personal information, as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding twelve months.

As a California resident, you have the right to:

  • Know: Request the categories and specific pieces of personal information we have collected about you
  • Delete: Request deletion of the personal information we have collected from you
  • Correct: Request correction of inaccurate personal information
  • Opt out: Opt out of the sale or sharing of your personal information (we do not sell or share it)
  • Non-discrimination: Not receive discriminatory treatment for exercising any of these rights

To exercise any of these rights, please contact us through the contact form on our home page.

10 Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • HTTPS encryption for data in transit
  • Secure form processing through Formspree
  • Limited access to personal data

11 Cookies

This website uses only essential cookies for basic functionality. We do not use analytics or marketing cookies.

12 Contact Us

For any privacy-related questions or to exercise your rights, please contact us through the form on our main page, clearly stating your data protection request.

Use our contact form for all privacy inquiries.

13 Complaints

If you're not satisfied with how we handle your data, you have the right to lodge a complaint with your local data protection authority.