Last updated 18 August 2026
Privacy Policy
This policy explains what personal data this website collects, why, on what legal basis, how long we keep it, and what rights you have. It applies to www.aiizationboard.com and to any enquiry sent through it.
It is written plainly rather than in legal boilerplate. If anything here is unclear, write to us and we will explain it.
Who is responsible
The controller of your personal data is Digitizationboard LLC, a limited liability company registered in the State of New Mexico, United States of America, trading as AIIZATION BOARD.
Registered address: 1209 Mountain Road PL NE, #5462, Albuquerque, NM 87110, United States of America.
For any privacy matter, including a request to exercise your rights, write to legal@aiizationboard.com.
What this website collects
If you send an enquiry through the contact form, we receive and store your name, your email address, your telephone number if you choose to provide one, the content of your message, and the date and time of submission.
Together with the enquiry we record the fact that you ticked the consent box, the wording you agreed to, the date and time, your IP address and your browser identification string. That record exists so that we can demonstrate, if asked, that the enquiry came from you and that you agreed to be contacted about it.
Like every web server, the server hosting this site automatically records each request it receives: your IP address, the date and time, the page requested, the referring page if there is one, and your browser identification string. We do not use these logs to identify or profile visitors. They exist so that the site can be operated securely and so that faults and abuse can be investigated. Cloudflare, which delivers this site, records equivalent information at its own network edge for the same purposes.
Cookies and tracking
This website sets no cookies. It uses no analytics, no tracking pixels, no advertising technology, no social media plug-ins, and no third party fonts or scripts. The typeface is served from this domain.
The site is delivered through Cloudflare, which can set a cookie when its bot detection features are switched on. They are deliberately switched off here, so no cookie is set.
Nothing on this site follows you across other websites. There is no cookie banner because there is nothing to consent to.
We do not sell personal data. We send no marketing emails and no newsletters. We build no profiles of visitors, take no automated decisions about you, and carry out no automated profiling.
Why we process it, and on what legal basis
Where the General Data Protection Regulation applies to you, the legal bases are as follows.
| What | Why | Legal basis |
|---|---|---|
| Enquiry details and message | To read your enquiry and reply to it, and where it concerns a possible advisory engagement or board mandate, to take steps at your request before entering into a contract | Article 6(1)(b) GDPR. Where the enquiry is general business correspondence rather than a possible engagement, Article 6(1)(f) |
| Consent record, including IP address and timestamp | To demonstrate that the enquiry and the consent were genuine, and to defend against a claim that contact was made without a basis | Article 6(1)(f) GDPR, accountability and defence of legal claims |
| Server access logs | To operate the website, keep it secure, and investigate faults and abuse | Article 6(1)(f) GDPR, security and integrity of our systems |
Providing your data is voluntary. You are not obliged to use the contact form; you can write to us by email instead. Without a name, an email address and a message, we cannot answer an enquiry.
How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not lead to a further exchange | Deleted within 12 months of the last message |
| Enquiries that lead to an engagement or a mandate discussion | Kept for the duration of that relationship and then for as long as required by applicable commercial and tax law |
| Consent record | Kept alongside the enquiry it belongs to and deleted at the same time |
| Server access logs | Overwritten or deleted within 30 days |
Who else has access to it
We do not sell, rent or trade personal data, and we do not share it for anyone else's purposes.
Hosting and email. The website is hosted by GoDaddy and our email is operated by Microsoft as part of Microsoft 365. Both act as our processors, under contract, and process personal data only on our instructions. GoDaddy Operating Company, LLC is self certified under the EU to US Data Privacy Framework, including the UK Extension and the Swiss to US Data Privacy Framework.
Delivery and security. This website is delivered through Cloudflare, which sits between you and our server. Cloudflare does not host the site. It filters malicious traffic, absorbs denial of service attacks, and serves the site from a location near you. To do that it necessarily processes your IP address, the page you requested and your browser identification string, and it terminates the encrypted connection. Cloudflare, Inc. acts as our processor under its data processing addendum and is self certified under the EU to US Data Privacy Framework, including the UK Extension and the Swiss to US Data Privacy Framework.
Professional advisers and authorities. Where disclosure is legally required, for example to a court or a competent authority, we will make it. We would also disclose data to our lawyers or accountants where necessary to establish, exercise or defend a legal claim.
Nobody else receives your data.
Where your data is processed
We are a United States company. Our servers, our email and our records are located in the United States of America. If you contact us from the European Economic Area, the United Kingdom or Switzerland, your personal data is transferred to the United States and processed there.
Where the GDPR applies, the transfer to us as controller relies on Article 49(1)(b) GDPR, because it is necessary to take steps at your request before entering into a contract. You initiate that transfer yourself by sending us an enquiry. Onward processing relies on the certifications of GoDaddy, Microsoft and Cloudflare under the EU to US Data Privacy Framework, together with the data processing terms we have agreed with each of them.
Cloudflare operates a global network and may serve this website to you from a location closer to you than the United States. Where that happens, your request is handled at that location before reaching our server.
You should be aware that United States law gives public authorities powers of access to data held by United States providers that go beyond what is permitted in the European Economic Area, and that the legal remedies available to you may be narrower than those you have at home. If you would prefer not to transfer data to the United States, do not use the contact form and contact us by another means.
Your rights
Where the GDPR or comparable law applies to you, you have the right to access the personal data we hold about you and receive a copy of it, to have inaccurate or incomplete data corrected, to have your data erased where there is no overriding reason for us to keep it, to have processing restricted in certain circumstances, to receive a copy in a structured, commonly used, machine readable format, to object to processing based on our legitimate interest on grounds relating to your particular situation, and to withdraw consent at any time where processing rests on consent, without affecting what was done before you withdrew it.
To exercise any of these, write to legal@aiizationboard.com. We will respond within one month. We do not charge for this. We may ask you to confirm your identity if the request is not obviously from you.
If you are unhappy with how we have handled your data, you can complain to a supervisory authority. In the European Economic Area this is the authority in the country where you live or work. In the United Kingdom it is the Information Commissioner's Office. You are also free to raise it with us first, and we would prefer that you did.
If you are a resident of California or another United States state with comparable law, you have equivalent rights of access, deletion and correction, and the right not to be discriminated against for exercising them. We neither sell nor share personal information as those terms are defined in that legislation.
Security
The website is served exclusively over an encrypted connection. The contact form is protected against automated abuse and rejects submissions that attempt to manipulate the mail system. The consent record is stored outside the publicly accessible part of the server. Access to enquiries is limited to those who need it in order to answer them.
No system connected to the internet is completely secure, and we do not claim otherwise. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify you and the competent supervisory authority as required by law.
Children
This website is directed at organisations and their boards. It is not intended for anyone under the age of 18 and we do not knowingly collect data from children. If you believe a child has sent us personal data, write to us and we will delete it.
Changes to this policy
If we change what we collect or why, we will update this page and the date at the top. Where a change materially affects your rights, we will say so clearly rather than quietly revising the text.
Contact
Digitizationboard LLC, trading as AIIZATION BOARD, 1209 Mountain Road PL NE, #5462, Albuquerque, NM 87110, United States of America.
Privacy and legal matters: legal@aiizationboard.com. General enquiries: info@aiizationboard.com.
This policy describes the setup as operated on 18 August 2026.