Last updated 18 August 2026
Privacy Policy
This policy explains what personal data this website collects, why, on what legal basis, how long we keep it, and what rights you have. It applies to aiizationboard.com and to any enquiry sent through it.
It is written plainly rather than in legal boilerplate. If anything here is unclear, write to us and we will explain it.
Who is responsible
The controller of your personal data is Digitizationboard LLC, a limited liability company registered in the State of New Mexico, United States of America, trading as AIIZATION BOARD.
Registered address: 1209 Mountain Road PL NE, #5462, Albuquerque, NM 87110, United States of America.
For any privacy matter, including a request to exercise your rights, write to legal@aiizationboard.com.
What this website collects
If you send an enquiry through the contact form, we receive and store your name, your email address, your telephone number if you choose to provide one, the content of your message, and the date and time of submission.
Together with the enquiry we record the fact that you ticked the consent box, the wording you agreed to, the date and time, your IP address and your browser identification string. That record exists so that we can demonstrate, if asked, that the enquiry came from you and that you agreed to be contacted about it.
Cloudflare, which hosts and delivers this site, automatically records each request it receives: your IP address, the date and time, the page requested, the referring page if there is one, and your browser identification string. We do not use these records to identify or profile visitors. They exist so that the site can be operated securely and so that faults and abuse can be investigated.
Cookies and tracking
This website sets no cookies. It uses no analytics, no tracking pixels, no advertising technology and no social media plug-ins. No third party fonts or scripts are loaded into the page; the typeface is served from this domain. Enquiries you choose to send through the contact form are transmitted to a third party processor, which is described under "Who else has access to it".
The site is delivered through Cloudflare, which can set a cookie when its bot detection features are switched on. They are deliberately switched off here, so no cookie is set.
Nothing on this site follows you across other websites. There is no cookie banner because there is nothing to consent to.
We do not sell personal data. We send no marketing emails and no newsletters. We build no profiles of visitors, take no automated decisions about you, and carry out no automated profiling.
Why we process it, and on what legal basis
Where the General Data Protection Regulation applies to you, the legal bases are as follows.
| What | Why | Legal basis |
|---|---|---|
| Enquiry details and message | To read your enquiry and reply to it, and where it concerns a possible advisory engagement or board mandate, to take steps at your request before entering into a contract | Article 6(1)(b) GDPR. Where the enquiry is general business correspondence rather than a possible engagement, Article 6(1)(f) |
| Consent record, including IP address and timestamp | To demonstrate that the enquiry and the consent were genuine, and to defend against a claim that contact was made without a basis | Article 6(1)(f) GDPR, accountability and defence of legal claims |
| Server access logs | To operate the website, keep it secure, and investigate faults and abuse | Article 6(1)(f) GDPR, security and integrity of our systems |
Providing your data is voluntary. You are not obliged to use the contact form; you can write to us by email instead. Without a name, an email address and a message, we cannot answer an enquiry.
How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not lead to a further exchange | Deleted within 12 months of the last message |
| Enquiries that lead to an engagement or a mandate discussion | Kept for the duration of that relationship and then for as long as required by applicable commercial and tax law |
| Consent record | Kept alongside the enquiry it belongs to and deleted at the same time |
| Request logs held by Cloudflare | Retained by Cloudflare under its own retention periods. We do not operate a separate server log. |
Who else has access to it
We do not sell, rent or trade personal data, and we do not share it for anyone else's purposes.
Hosting. This website is hosted and delivered by Cloudflare, Inc. Cloudflare stores and serves the site, filters malicious traffic, absorbs denial of service attacks, and serves the page from a location near you. To do that it necessarily processes your IP address, the page you requested and your browser identification string. Cloudflare acts as our processor under a data processing addendum and is self certified under the EU to US Data Privacy Framework, including the UK Extension and the Swiss to US Data Privacy Framework.
Contact form. Enquiries sent through the form on this site are transmitted by your browser to Web3Forms, operated by Web3Forms LLC in the United States, which relays them to our mailbox. Web3Forms therefore receives the contents of your enquiry together with your IP address and browser identification string. It acts as our processor under its data processing terms. If you would prefer not to send your details through a third party, write to us by email instead; the address is at the foot of this page.
Email. Our mail is operated by Microsoft as part of Microsoft 365. Microsoft acts as our processor under contract and processes data only on our instructions.
Professional advisers and authorities. Where disclosure is legally required, for example to a court or to a competent authority, we will make it. We would also disclose data to our lawyers or accountants where necessary to establish, exercise or defend a legal claim.
Nobody else receives your data.
Where your data is processed
The controller is a United States company, and our mail and our records are held in the United States. Cloudflare serves this website from a global network and will normally serve you from a location near you; your request is handled at that location. If you contact us from the European Economic Area, the United Kingdom or Switzerland, your personal data is transferred to the United States and processed there.
Where the GDPR applies, the transfer to us as controller relies on Article 49(1)(b) GDPR, because it is necessary to take steps at your request before entering into a contract. You initiate that transfer yourself by sending us an enquiry. Onward processing relies on the certifications and contractual terms we have agreed with Cloudflare, Microsoft and Web3Forms.
You should be aware that United States law gives public authorities powers of access to data held by United States providers that go beyond what is permitted in the European Economic Area, and that the legal remedies available to you may be narrower than those you have at home. If you would prefer not to transfer data to the United States, do not use the contact form and contact us by another means.
Your rights
Where the GDPR or comparable law applies to you, you have the right to access the personal data we hold about you and receive a copy of it, to have inaccurate or incomplete data corrected, to have your data erased where there is no overriding reason for us to keep it, to have processing restricted in certain circumstances, to receive a copy in a structured, commonly used, machine readable format, to object to processing based on our legitimate interest on grounds relating to your particular situation, and to withdraw consent at any time where processing rests on consent, without affecting what was done before you withdrew it.
To exercise any of these, write to legal@aiizationboard.com. We will respond within one month. We do not charge for this. We may ask you to confirm your identity if the request is not obviously from you.
If you are unhappy with how we have handled your data, you can complain to a supervisory authority. In the European Economic Area this is the authority in the country where you live or work. In the United Kingdom it is the Information Commissioner's Office. You are also free to raise it with us first, and we would prefer that you did.
If you are a resident of California or another United States state with comparable law, you have equivalent rights of access, deletion and correction, and the right not to be discriminated against for exercising them. We neither sell nor share personal information as those terms are defined in that legislation.
Security
The website is served exclusively over an encrypted connection. The contact form is protected against automated abuse and rejects submissions that attempt to manipulate the mail system. The consent record is stored outside the publicly accessible part of the server. Access to enquiries is limited to those who need it in order to answer them.
No system connected to the internet is completely secure, and we do not claim otherwise. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify you and the competent supervisory authority as required by law.
Children
This website is directed at organisations and their boards. It is not intended for anyone under the age of 18 and we do not knowingly collect data from children. If you believe a child has sent us personal data, write to us and we will delete it.
Changes to this policy
If we change what we collect or why, we will update this page and the date at the top. Where a change materially affects your rights, we will say so clearly rather than quietly revising the text.
Contact
Digitizationboard LLC, trading as AIIZATION BOARD, 1209 Mountain Road PL NE, #5462, Albuquerque, NM 87110, United States of America.
Privacy and legal matters: legal@aiizationboard.com. General enquiries: info@aiizationboard.com.