Who is responsible
Scotland AI Observatory is operated by Bryan Small. For any privacy enquiry, contact via LinkedIn.
What data we collect
We collect only the data you choose to provide through our forms. The SME AI Readiness Diagnostic capture form collects:
- Name
- Business / organisation name (optional)
- Business type / sector (optional)
- Preferred contact method (email, phone or LinkedIn)
- Contact details (email, phone number or LinkedIn profile)
- Brief description of your problem / requirements
- Approximate employee count (optional)
- Your SME Diagnostic readiness score (captured automatically)
We do not collect passwords, financial credentials, health information or other sensitive personal data, and we ask that you do not submit such data through our forms.
Purpose of processing
Your details are collected solely to respond to your enquiry about AI implementation, pilots or intelligence. We do not use your data for any other purpose without your separate, explicit consent.
Lawful basis
We process your personal data under the lawful basis of legitimate interest (responding to an enquiry you have initiated) and, where you provide it, consent for the specific purpose of being contacted about your enquiry. We do not add you to newsletters or marketing lists without a separate, explicit opt-in.
Recipients and processors
Your enquiry is sent by email to the site operator (Bryan Small) via Gmail (Google LLC). Google acts as a data processor for email delivery. We do not sell, rent or share your personal data with any third party for marketing purposes.
Retention
Enquiry details are retained only for as long as needed to respond to and follow up on your enquiry, and are then deleted. If you would like us to delete your data sooner, contact us via LinkedIn and we will remove it promptly.
Your rights
You have the right to access, correct or delete the personal data we hold about you, and to object to or restrict processing. To exercise any of these rights, contact us via LinkedIn.
Cookies and analytics
This site does not use advertising cookies or cross-site tracking. We may collect anonymous, aggregated analytics (such as page views and diagnostic completion events) to understand how the site is used. These do not identify you personally.
Changes to this policy
We may update this policy from time to time. The current version is dated 7 August 2026.