Privacy Notice

Who we are

ValarAudit is operated by Mawdsley Advisory. We are the data controller for any personal data collected through this website.

If you have any questions about how we handle your personal data, contact us at alistair@mawdsleyadvisory.com.

What data we collect and why

During the assessment

When you complete the AI regulatory assessment, you provide information about your business and AI deployment. Your answers are processed by Claude, an AI model developed by Anthropic, to generate the assessment questions and map your responses to relevant regulatory regimes. Anthropic processes this data as a sub-processor on our behalf. You can read Anthropic's privacy policy at anthropic.com/privacy. This may include your business sector, a description of your AI system, and details about how it is used.

This information is used only to generate your assessment results. It is not stored after your session ends. We do not link it to your identity unless you choose to contact us or purchase a report.

We process this data on the basis of legitimate interests: providing you with the regulatory guidance you have requested.

When you purchase a report

If you purchase a full report via Stripe, Stripe processes your payment details directly. We do not receive or store your payment card information.

When you complete a purchase, Stripe notifies us of the transaction. We use your email address to deliver your report. We retain your email address and the details of your assessment for up to 12 months in order to handle any queries about your report, after which it is deleted.

We process this data on the basis of contract performance: you have purchased a service and we need your contact details to deliver it.

Payment processing

Stripe processes payments on our behalf. Stripe is the data controller for payment data. You can read Stripe's privacy policy at stripe.com/gb/privacy.

What we do not do

We do not sell your data. We do not share it with third parties except as described above. We do not use it for marketing without your consent. We do not make automated decisions about you as an individual. The assessment generates regulatory guidance about your AI deployment, not decisions about you personally. If you wish to query or discuss your results, contact us at alistair@mawdsleyadvisory.com.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, correct inaccurate data, request deletion of your data, object to our processing, and request that we restrict processing while a complaint is resolved.

To exercise any of these rights, contact us at alistair@mawdsleyadvisory.com. We will respond within one calendar month.

Cookies

This website does not use tracking or advertising cookies. We may use a session cookie to maintain your assessment progress within a single visit. This cookie is deleted when you close your browser.

Changes to this notice

If we make material changes to this notice we will update the date at the top. We recommend checking this page periodically.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.