Privacy Notice
Last updated: 25/7/2026
This notice explains how ISME (the "association") and the AI Readiness Navigator platform (the "platform") collect, use, store and protect the data you provide when completing an AI readiness assessment. This is a pilot service; the notice will be reviewed before general availability.
Who is the data controller?
ISME is the joint data controller for personal data submitted through the platform. Contact: info@isme.ie.
What we collect
- Contact details you enter (name, work email, phone, job title).
- Company details (name, industry, employee band, county, website, member number).
- Your answers to the readiness questions.
- Technical metadata (browser type, approximate IP, timestamps) for security and analytics.
Legal basis
We rely on your consent to process the answers and contact information you submit. Where you opt in to be contacted or receive marketing, that consent is captured explicitly and you can withdraw it at any time via a data request.
How we use it
- To score your assessment and generate your personalised report.
- To send you the report by email (via Resend, our email processor).
- To share aggregated, anonymised statistics with association administrators.
- Where you opt in, to allow an ISME-approved consultant to follow up.
Sharing
Your identifiable answers are visible only to platform administrators and, where you opt in to contact, to the consultant assigned to you. Aggregated data shown to association admins is anonymised and only rendered when at least five completions exist in the segment.
Retention
Assessment records are retained for up to 24 months, after which they are anonymised or deleted. You may request earlier deletion at any time.
Your rights
You can request access, correction, export or deletion of your data via our data request form. You also have the right to lodge a complaint with the Data Protection Commission (dataprotection.ie).
Security
Data is stored in an EU-hosted Supabase project with row-level security. Access is restricted by role. Result links use unguessable tokens and can be revoked by an admin on request.