Privacy Policy & Data Protection

2.3 Information You Provide Through Our AI Tools

When you use our AI assessments (the AI Readiness Assessment, Frontier Readiness and AI Readiness for People), Technology Advisor or Benedict Chat (hosted at radar.ttdconsulting.net), we collect the information described in Section 4. This may include your name, email address, company, job title, role, industry, organisation size, your answers and your chat messages. If you request a Pro report or take part in an Enterprise Workspace, we also collect the information described in Section 4.5.

This section explains how we handle personal information when you use our AI tools: the free AI Readiness Assessment, Frontier Readiness and AI Readiness for People assessments, Technology Advisor and Benedict Chat, and the paid Pro reports and Enterprise Workspaces built on the assessments. It forms part of this Privacy Policy and applies alongside the rest of it.

4.1 What We Collect

• AI Readiness Assessment and Frontier Readiness: your name and work email address (required before your full report is shown), company, role, industry, organisation size, your current use of AI and priorities (Frontier Readiness), your answers to the assessment questions, your follow-up and marketing choices, and the report generated from your answers.
• AI Readiness for People: your name and email address (required before your report is shown), and optionally your job title and organisation; the role profile you choose (such as people manager or knowledge worker); your self-ratings and your choices in the scenario questions; a team code, if you joined through a link from your organisation; your follow-up and marketing choices; and the report generated from your answers.
• Technology Advisor: the contact details you provide (such as name, work email address, company and role) and your answers about your project, goals and requirements, together with the recommendations generated for you.
• Benedict Chat: the messages you type, the responses generated, and technical session information (such as a session identifier and IP address) used for rate limiting and security. Please do not enter sensitive personal information into the chat.
• Security checks: our forms use Google reCAPTCHA to protect against automated abuse. reCAPTCHA collects hardware and software information (such as device and application data) and sends it to Google for analysis.

4.2 Why We Use It

• To generate and deliver your assessment report, recommendations or chat responses
• To email your assessment report to you and give you access to it through a private link
• To contact you about your results, but only if you ask us to (see 4.4)
• To send you marketing communications, but only if you separately opt in (see 4.4)
• To protect our services from fraud and automated abuse, and to monitor and improve their quality
• To produce Pro reports and Enterprise Workspace dashboards for organisations that have arranged them with us (see 4.5)
• To build combined peer benchmarks from AI Readiness and Frontier Readiness scores, in which no individual person, organisation or result can be seen (see 4.5)

4.3 AI-Generated Reports and Responses

Assessment reports, Technology Advisor recommendations and Benedict Chat responses are produced by automated analysis, including large language models provided through Azure OpenAI. In the AI Readiness Assessment and Frontier Readiness, your score is calculated from your own self-reported answers and placed against TTD's maturity framework. In AI Readiness for People, your score is calculated from your self-ratings and your scenario choices, weighted for the role profile you chose; only your skill scores, not your contact details, are sent to the AI model.

• For the AI Readiness Assessment, Frontier Readiness and Technology Advisor, the automated analysis relates to your organisation's readiness and technology choices. It is not a decision about you as a person and does not have legal or similarly significant effects on you.
• AI Readiness for People is about your own AI skills and is for your personal development only. It is not a test, certification or performance evaluation, and it does not have legal or similarly significant effects on you. We do not share your individual result with your employer or anyone else. If you joined through a team code from your organisation, your organisation will only ever receive anonymous, aggregated results for the group, never your individual result.
• AI-generated content may contain errors and is indicative only. It is not professional advice. See our Terms of Use.
• You can ask for a TTD consultant to review your report or results by emailing info@ttdconsulting.net.

4.4 Follow-Up Contact and Direct Marketing Are Separate

In each of our assessments you will see two separate, optional choices. Neither is required to receive your results.

• Expert follow-up: a tick-box asking a TTD expert to contact you about your results. If you tick it, we will use your contact details only to follow up on your assessment.
• Marketing opt-in: a separate tick-box to receive marketing communications (such as news, insights and event invitations) from TTD Consulting. In line with section 69 of POPIA, we will only send you electronic direct marketing if you have opted in, or if you are an existing customer and the marketing relates to similar products or services.

You can withdraw either choice at any time by using the unsubscribe link in any marketing email or by emailing info@ttdconsulting.net with the subject line "Opt out". Withdrawing does not affect processing that took place before you withdrew.

4.5 Pro Reports and Enterprise Workspaces

The assessments stay free. Organisations can also arrange paid access with us to a Pro report, built on an AI Readiness or Frontier Readiness result, or to an Enterprise Workspace, where many people in one organisation take an assessment through an invite link.

• Requesting access: when you ask for a Pro report or an Enterprise Workspace from your results page, we collect your name, email address, role, company, which option you are interested in and any message you add. We use these details to contact you about access and to manage it. A request does not sign you up for marketing.
• Pro reports: we keep your answers and organisation profile alongside your result so that we can build the report. Its figures (compliance map, peer benchmarks, business case, roadmap and risk register) are calculated by fixed rules from your answers and our reference data. Azure OpenAI writes only the wording, and it never receives your name or email address. A TTD consultant reviews your result and may add commentary. The compliance map is indicative only and is not legal advice.
• Peer benchmarks: a Pro report compares your organisation's scores with the combined scores of other organisations that completed the same assessment. Only group figures are shown (such as percentile, median and group size), and only for groups of at least 30 organisations. No other person's or organisation's name, answers or result is ever shown. TTD staff and Enterprise Workspace answers are left out. Your scores may count towards the combined benchmarks that other organisations see, in the same form.
• Enterprise Workspaces: if your organisation invites you to take AI Readiness or Frontier Readiness through a workspace link, we also collect your seniority level and business unit. Your organisation's sponsor sees combined results only. Nothing is shown until a minimum number of people have taken part (agreed with your organisation, normally 5 and never fewer than 3). A business unit or seniority level is shown separately only when it reaches the same minimum. Individual answers, individual scores, highest and lowest scores and per-question averages are never shown. The answers used for the combined view are stored separately from your contact details, against a one-way code made from your email address, which is used only to count each person once. We do not give your organisation your individual result.
• People team scans in a workspace: handled as described for team codes in 4.3. Your organisation sees only the combined team report.

4.6 How Long We Keep It

• Assessment results and reports (all three assessments): kept for 90 days, after which the private link stops working and the results are deleted. There are two exceptions. If you have requested a Pro report or an Enterprise Workspace, the result is kept until 90 days after your latest request. While paid access is active, the result is kept for as long as that access lasts (normally 12 months, unless agreed otherwise).
• Pro report content and downloads: deleted when paid access ends.
• Access requests and records: kept for 2 years after the last activity (your latest request, or when access started, ended or was withdrawn).
• Enterprise Workspace answers and combined results: kept for 2 years from submission.
• Assessment lead records (your contact details, organisation details, role profile, summary scores and choices): kept for 2 years from submission, unless you withdraw consent or ask us to delete them sooner.
• Technology Advisor submissions: handled as contact inquiries and kept for 2 years from last contact, unless you ask us to delete them sooner.
• Benedict Chat messages: kept only for as long as needed to operate, secure and improve the chat service.

6.4 Operators Who Process Information on Our Behalf

Under POPIA, the following providers act as operators, processing personal information on our behalf and under our instructions:

• Microsoft (Microsoft Azure, including Azure OpenAI): hosting, storage, email delivery and the AI models that generate assessment reports, Technology Advisor recommendations and Benedict Chat responses. Under Microsoft's terms for Azure OpenAI, your prompts and outputs are not used to train Microsoft's or OpenAI's foundation models.
• Google (reCAPTCHA and Google Analytics): protecting our forms from automated abuse and, if you accept analytics cookies, website analytics.

These providers may process information outside South Africa. See Section 10.

Complaints to the Information Regulator (South Africa)

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Information Regulator:

• Website: https://inforegulator.org.za
• Complaints email: complaints.IR@inforegulator.org.za