Who we are
ShiftAi Systems Ltd (company number 15487606) is the controller of the personal data described here.
Contact: hello@shiftaiconsulting.co.uk
What we collect, why, and our lawful basis (UK GDPR)
| What | Why | Lawful basis |
|---|---|---|
| Your name, organisation, email address and the options you pick, if you email us to register interest in the Health AI Governance Evidence Index | To tell you about the index | Consent (Article 6(1)(a)). You can withdraw it at any time. |
| Emails you send us, and what you tell us when you book a call | To reply and to arrange the call | Legitimate interests (Article 6(1)(f)): answering people who contact us |
| Technical data, such as your IP address, logged by our hosting provider | To serve you the website | Legitimate interests (Article 6(1)(f)): running a website |
We collect no more than we need.
The ComplyAI self-assessment
Your answers stay in your browser. If you choose “Book a call”, your score and the gaps flagged are added to the Calendly link, so Calendly and we can see them. Nothing is sent unless you click.
The research crawler and Evidence Index
The index is about organisations, not people. To build it, our crawler collects publicly available documents: NHS trust web pages, published board papers, and public procurement and transparency records.
These original documents may contain names and job titles of staff, because they appear in published papers. We hold the originals privately, only so that quotations can be checked against their source. We never publish personal details. Email addresses and phone numbers are removed from the text we keep for analysis, and any record containing personal details is blocked before review.
Lawful basis: legitimate interests (Article 6(1)(f)): building an accurate, verifiable record of how organisations govern AI.
Originals are deleted after 12 months unless they back a published record. If you are named in a document we hold, you can object or ask us to delete it by emailing hello@shiftaiconsulting.co.uk. See also our research crawler page.
Who processes your data for us
- IONOS: email.
- GitHub Pages: website hosting. It may log technical data such as IP addresses.
- Calendly: booking calls, under its own privacy notice.
GitHub Pages and Calendly may process data in the United States. They rely on the safeguards in their published data protection terms.
We do not use analytics or advertising cookies, and fonts are served from this website, so visiting it does not send your details to Google.
How long we keep it
- Interest list: until you withdraw consent, or 2 years after our last contact with you, whichever comes first.
- Enquiry emails: 2 years.
- Crawler data: as described on the research crawler page.
Automated decisions
We do not make decisions about you based solely on automated processing.
Your rights
You can ask to see, correct or delete your data, to restrict or object to its use, to receive it in a portable form (where applicable), and to withdraw consent. This includes people named in documents collected by our crawler. We will respond within one month.
Email hello@shiftaiconsulting.co.uk. You can complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.
Changes
We will update the date above when this notice changes.