What we do with your address.

In one sentence

This site asks you for one thing only: your email address, and only if you want to receive the updates. It is used for that and for nothing else, it is neither sold nor passed on, and you can have it erased at any time by dropping us a line.

Who processes your data

The data controller is Mehdi Benmeradi, company number 0556.910.454, publisher of the site aiactexpress.com. For any question or request concerning your data: [email protected].

What data, and why

• Your first name and your email address, when you sign up for the updates — to send you the regulatory updates and, where applicable, the result of your assessment.
• Your answers to the assessment, if you complete one — to work out the guidance we give you back. They are linked to your address only if you ask to receive the result.
• Your name, your sector and your question, if you post a question in the community area — those details are then public, apart from your email address, which stays private.
• Your suggested improvement to the wiki, where applicable, with the name and address you give, so that we can reply to you.

No data is collected without your knowledge: the site carries out no profiling, no advertising and no reselling, and uses no third-party audience measurement tool.

On what legal basis

On your consent, within the meaning of Article 6.1.a of the General Data Protection Regulation. That consent is obtained through a tick box that is not pre-ticked. The newsletter has not started to appear yet: when it launches, a first email will ask you to confirm your subscription — this is what is known as double opt-in — and every mailing will carry an unsubscribe link. Until then, your address is simply stored, and no message is sent to you. You can withdraw your consent at any time, without having to give a reason; that withdrawal does not call into question what was done before it.

For how long

• Email address signed up to the updates: kept until you unsubscribe, and for a maximum of three years without any interaction on your part.
• Address not confirmed within seven days of the newsletter launching: deleted.
• Questions posted in the community: kept for as long as the page exists; deleted on simple request.
• Assessment answers not linked to an address: kept in a non-identifying form for statistical purposes.

Who else has access

No one, apart from the publisher. The data is stored in a Cloudflare D1 database, with our hosting provider, which acts as a processor and makes no use of it on its own account. No data is passed on to a marketing service, an advertiser or a data broker. No transfer is made outside the European Economic Area beyond what is strictly necessary for hosting.

Cookies

The site sets no cookie for audience measurement, advertising or social networks. It uses only your browser’s local storage, to remember the state of certain forms on your device. That information never leaves your computer and is accessible to no one but you.

Your rights

You have, at any time, a right of access, a right to rectification, a right to erasure, a right to restriction of processing, a right to object and a right to data portability, as well as the right to withdraw your consent. Simply write to the contact address above; you will receive a reply within one month.

Last updated: 26 August 2026.