Privacy notice

Who is responsible

People Team AI and TransformLayer are run by Mark North, who is the controller for the personal data described here, except where a company uses TransformLayer (see below). Questions, requests and complaints go to Mark through the contact form, or by email . There is no separate data protection officer.

What we collect, and why

When you ask about a workshop, the PROVEN Framework™ or TransformLayer. Your name, work email, company, role and anything you write in the form, and for a Health Check review request, your score and answers. We use it to reply and arrange what you asked for. The legal basis is our legitimate interest in answering a business enquiry, and taking steps you asked for before any contract.

When you use the Health Pack. Your full name and work email to open it, and then the answers you give to the Health Check or the AI Champion scorecard. We use them to email you your results and to understand where AI programmes need help. The legal basis is our legitimate interest in providing the pack you asked for and following up with a business contact about it. We only send marketing emails if you ticked the box.

When you use the free tools or the readiness survey. If you save a result or start a survey, your email, and where asked your name, organisation and team size, with what you entered. Answers from team members taking a readiness survey are recorded without their names. The same legitimate interest applies, and the same rule on marketing.

When you browse. Pages viewed and simple events, such as a tool result being saved, linked to a random identifier rather than to your name unless you are signed in. We also record how long a page was open and roughly how far down it you scrolled, and the name of the site that sent you here, such as linkedin.com. That is the site's name only, never the address of the page you came from, and never anything you searched for. We use all of this to see which parts of the site are read rather than just opened. The legal basis is our legitimate interest in running and improving the site.

We do not collect special category data on purpose. Please do not put health, disciplinary or other sensitive details about named people into any form.

TransformLayer

If your company uses TransformLayer, your company is the controller for what is recorded there: the ideas, cases, decisions, results and the people involved. We process it on your company's behalf, under our agreement with them, to run the service. Requests about that data are best made to your company, and we will help them answer.

For your own account we hold your email address, your name or job title if your company adds them, your role, department and choices such as email reminders. Signing in uses a link sent to your email; there is no password.

Emails

We send emails you asked for (a sign-in link, your results, a reply to an enquiry) and, in TransformLayer, reminders when something needs you, which you can turn off in Settings. Marketing emails and the newsletter only go to people who chose them, and every one has a way to unsubscribe.

Cookies and your browser

• Sign-in cookies, set when you sign in, so you stay signed in. Needed for the service to work.
• ptai_sid, a random identifier that lets us count visits and events without knowing who you are. It lasts up to 13 months.
• Settings kept in your browser, such as light or dark mode in TransformLayer, and that you have already opened the Health Pack. These stay on your device and are not sent to us.

Site analytics from Vercel do not use cookies. Fonts load from Google Fonts, which means your browser asks Google for them and Google sees your IP address.

Who else handles it

These providers process personal data for us, only to provide their service:

• Supabase: the database for accounts, TransformLayer, leads and saved results. London region.
• Resend: sends our emails. EU region.
• Vercel: hosts the websites and provides cookieless analytics.
• Formspree: receives enquiry and review request forms.
• beehiiv: runs the newsletter, if you join it.
• Google Fonts: serves the typefaces.
• Microsoft: only if your company connects TransformLayer to a Teams channel, which then receives the posts your company chose.

Some of these providers are based in the United States. Where data goes outside the UK or EU, we rely on the safeguards those providers offer for that transfer, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework. We never sell or rent personal data, or pass it on for anyone else's marketing.

How long we keep it

• Health Pack, free tool and readiness survey results: two years after you gave them, then deleted automatically.
• Enquiries: two years after we last corresponded, unless they became a contract.
• Marketing consent: until you unsubscribe, and a record that you did, so we do not email you again.
• Browsing events: 13 months, then deleted automatically.
• TransformLayer: for as long as your company's subscription runs, then deleted within 90 days of it ending, unless your company asks for an export first.

Your rights

Under UK and EU data protection law you can ask to see the personal data we hold about you, correct it, delete it, restrict or object to how we use it, and receive a copy to take elsewhere. You can withdraw consent to marketing at any time. Ask through the contact form or by email , and we will reply within a month.

If you are unhappy with how we handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live in the EU.