Privacy & Cookie Policy

Last updated: 07 July 2026

This Privacy Policy explains how AI Fairness CIO, a Charitable Incorporated Organisation registered in England and Wales under charity number 1218464, processes information when individuals use our website ai-fairness.com (“the Website”).

AI Fairness CIO (“we”, “us”, “our”) is committed to handling all personal data lawfully, fairly and transparently in accordance with UK GDPR, the Data Protection Act 2018, and good practice standards recommended by the Information Commissioner’s Office (ICO).

1. Who We Are

AI Fairness CIO
Charity No: 1218464
Registered Office: No. 4, 88 Harrowdene Road, London, HA0 2JG, United Kingdom
Email: hello@ai-fairness.com.

We have not appointed a Data Protection Officer as we are not legally required to do so. However, all privacy enquiries should be directed to the contact email above.

2. Purpose of the Website

The Website enables users to upload de-identified CSV datasets relating to decision-making within the following seven domains:

  • Justice

  • Health

  • Hiring

  • Education

  • Business

  • Governance

  • Finance

The Website processes these datasets using internal Python fairness-analysis pipelines.
No external AI models or third-party data processors receive the uploaded datasets.

The platform performs analysis only for the duration of the session and does not store uploaded datasets at any time.

3. Mandatory User Confirmation — No Personal Data

To use the Website, users must confirm that all datasets uploaded are fully anonymised and contain no personal data or special category data as defined under UK GDPR.

By uploading a dataset, the user warrants that:

  1. The dataset contains no personal data, no special category data, and no identifying information about any living individual.

  2. Any anonymisation required by law (including sector regulatory requirements such as in health or justice) has been completed before upload.

  3. AI Fairness CIO is not responsible for any personal data breach arising from the user’s failure to anonymise data.

  4. AI Fairness CIO cannot be held liable for any alleged data leakage because datasets are processed in-session only and never stored.

These terms form part of your agreement with us when using the Website.

4. Types of Data We Collect

A. Data Uploaded by Users

  • No personal data or special category data may be uploaded.

  • Datasets remain in system memory only during the active session.

  • Automatic deletion occurs at logout or session expiry.

B. Information You Provide Voluntarily

Depending on your usage, we may collect:

  • Contact information (e.g., email) if you communicate with us

  • Account information if you create an optional user account

  • Payment information if you purchase services
    (Payment processing is handled by external payment providers.)

C. Technical Data

We may collect:

  • IP address

  • Device/browser type

  • Basic operational logs

  • Non-identifying analytics

D. Cookies (Consent-Based)

The Website may use cookies for analytics or service optimisation only with your consent.

You may accept or decline non-essential cookies at any time. Declining does not restrict your access to the Website’s core functionality.

This model complies with ICO guidance requiring a genuine alternative to cookie consent.

5. Lawful Basis for Processing

We use a hybrid lawful basis:

Legitimate Interests

For:

  • Real-time analysis of anonymised datasets

  • Ensuring Website functionality and security

  • Preventing misuse or system abuse

We rely on legitimate interests only where datasets contain no personal data.

Consent

For:

  • Cookies

  • Optional communications

  • Analytics

  • Any optional personal information submitted by users

Consent may be withdrawn at any time.

6. How We Use Information

We may use information to:

  • Provide fairness auditing tools

  • Improve system performance

  • Maintain security and prevent misuse

  • Process payments

  • Respond to enquiries

  • Perform aggregated, non-personal statistical research

We do not:

  • Sell data

  • Profile individuals

  • Train external AI models

  • Store uploaded datasets

  • Disclose data except as strictly necessary

7. Third-Party Service Providers

We may share minimal necessary information with trusted third parties:

Hosting Provider

  • Mattrs (mattrs.co.uk) — UK-based hosting

Analytics Providers

  • Google Analytics (when activated — consent-based)

Payment Providers

  • PayPal

  • Visa and Mastercard payment gateways

These providers have their own privacy policies and comply with applicable data protection requirements.

8. International Transfers

Although hosting is UK-based, some third-party providers (e.g., analytics, payment processors) may process limited data outside the UK.

Where transfers occur, we ensure appropriate safeguards under UK GDPR, such as:

  • International Data Transfer Agreements (IDTAs)

  • Standard Contractual Clauses (SCCs)

  • Adequacy decisions where applicable

9. Data Retention

  • Uploaded datasets: deleted immediately at the end of the active session (logout or session expiry).

  • Account, contact, or payment information: retained for up to 12 months, unless required longer for accounting, fraud prevention, or legal obligations.

  • Operational logs: kept only as long as necessary for security.

We never retain uploaded data beyond the session.

10. Security Measures

We implement the following safeguards:

  • HTTPS/TLS encryption

  • Server-side encryption at rest

  • Session-only processing of uploaded datasets

  • Automated deletion on logout or expiry

  • MFA-protected administrative access

  • Firewall and edge protections

  • Regular patching and security monitoring

  • Access controls with least-privilege principles

  • Continuous system integrity checks

Despite these controls, online transmission can never be completely secure, and users upload datasets at their own risk.

11. Age Restrictions

The Website is intended for individuals aged 16 and over.
We do not knowingly permit use by anyone under 16.

12. Your Rights

Depending on your location, you may have rights including:

  • Right to access

  • Right to rectification

  • Right to erasure

  • Right to restriction

  • Right to object

  • Right to withdraw consent

  • Right to portability

  • Right to lodge a complaint with a supervisory authority

For UK users, the relevant supervisory authority is the ICO (ico.org.uk).

13. Links to External Websites

We are not responsible for the content or privacy practices of external websites linked from our Website. Users should review external privacy policies before accessing third-party sites.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date. Continued use of the Website constitutes acceptance of the updated terms.

🍪 Cookie Policy

15. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance user experience, analyze website traffic, and optimize service delivery. This Cookie Policy explains what cookies are, how we use them, and how you can manage your preferences.

16. What Are Cookies?

Cookies are small text files that are stored on your device when you visit our website. They help the website remember your actions and preferences over time, enabling improved functionality and personalization.

17. Types of Cookies We Use

Essential Cookies (Always Active)

These cookies are necessary for the basic functionality of our website and cannot be disabled. They include:

  • Session management cookies

  • Security and fraud prevention cookies

  • Load balancing cookies

  • Consent preference cookies

Analytical/Performance Cookies (Consent-Based)

These cookies help us understand how visitors interact with our website by collecting anonymous information. They include:

  • Website usage statistics

  • Page load times

  • Error reporting

  • Feature usage metrics

Functional Cookies (Consent-Based)

These cookies enable enhanced functionality and personalization:

  • Language preferences

  • Regional settings

  • UI customization choices

Marketing Cookies (Consent-Based)

Currently, we do not use marketing or advertising cookies on our platform.

18. Cookie Consent Management

We use CookieYes as our cookie consent management platform. When you first visit our website, you will see a cookie banner that allows you to:

  • Accept All Cookies: Enable all consent-based cookies

  • Reject All Cookies: Disable all non-essential cookies

  • Customize Settings: Choose specific cookie categories

  • Change Preferences: Modify your choices at any time via the cookie settings icon

19. Third-Party Cookies

We limit third-party cookies to essential service providers:

  • Google Analytics: For website analytics (consent-based)

  • Payment Processors: For transaction processing (essential)

  • Hosting Provider: For service delivery (essential)

20. Cookie Duration

  • Session Cookies: Expire when you close your browser

  • Persistent Cookies: Remain for periods ranging from 24 hours to 12 months

  • Consent Cookies: Remember your preferences for 6 months

21. Managing Your Cookie Preferences

You can control cookies through:

  1. Our Cookie Banner: Use the “Customise” button to select specific categories

  2. Browser Settings: Most browsers allow you to refuse cookies

  3. Device Settings: Mobile devices often have privacy controls for cookies

Note: Disabling essential cookies may affect website functionality and your ability to use our fairness auditing tools.

22. Updates to This Cookie Policy

We may update this Cookie Policy to reflect changes in technology, legislation, or our services. Significant changes will be notified through our website banner.

 

Contact Us

For any enquiries or to exercise your data rights, contact:

AI Fairness CIO
Email: hello@ai-fairness.com.
Address: No. 4, 88 Harrowdene Road, London, HA0 2JG, United Kingdom