What M.A.I. Consulting collects through this site, where it goes and how long it is kept. Last updated 16 October 2026. Data controller: M.A.I. Consulting, Geneva, Switzerland.
This policy explains what personal data M.A.I. Consulting ("we", "us") collects through mai4consulting.com, why, where it goes and how long we keep it. Each route into the site has its own entry below, so you can check exactly what happens when you use it.
M.A.I. Consulting, Geneva, Switzerland, is the data controller for everything described here. We are an AI training, policy and readiness practice serving clients worldwide. For anything to do with your data, write to q.mamdouh@mai4consulting.com.
Visiting the site. The pages are static files hosted on GitHub Pages. GitHub may log your IP address and request details for security purposes under GitHub's own privacy statement; we do not receive those logs. Fonts are loaded from Google Fonts, so Google receives your IP address and browser details when the font files are requested. The assessment and estimator pages also load two script libraries (jsPDF, EmailJS) from public content delivery networks (cdnjs by Cloudflare, jsDelivr), which see your IP address when the file is fetched. Nothing else happens until you submit something.
Contact form. Name, email address, sector, service of interest, your message and, if you give them, organisation, role, team size, how you heard about us and your preferred contact method. The form sends this to us by email through EmailJS when you press Send.
Site assistant. What you type stays in your browser while you use it; the assistant sends nothing to a language model. If you choose to leave your details at the end, the transcript and those details are sent to us by email through EmailJS, like the contact form.
Scope estimator. Your selections stay in your browser. If you send the estimate by email, your selections and the email address you give are sent to us through EmailJS and we reply from our mailbox.
The two free assessments (AI Readiness Check, 28 questions; Extended AI Readiness Assessment, 60 questions). To get the report you enter your name, organisation, role, sector, team size and email address; the extended assessment also asks about your EU AI Act exposure. Your answers are scored in your browser and the PDF report is generated there. When you press the download button, and only then, three things happen: the PDF is saved to your device; a copy of the PDF is uploaded to a folder in our Google Drive (our Google Workspace account) through a Google Apps Script we operate; and an email with your profile details, your scores, your top recommendations and a link to that PDF is sent to us through EmailJS. Once the respondent email is switched on, a copy of your results is also sent to the address you gave, through EmailJS. Until you press the button nothing leaves your browser. Both pages say this above the button and ask for your consent before the download starts.
Benchmarking (optional). The assessment pages offer a second, optional box: "You may use my anonymised answers in aggregate benchmarks." If you leave it unticked, your answers are used only to produce your report and to prepare one follow-up with you. If you tick it, we may add your answers, stripped of your name, organisation and email address, to a pool used to compare results across sectors and sizes. We never publish anything that could identify a respondent or an organisation.
Booking a call. The booking page opens Google Calendar appointment pages. Google collects your name, email address, the slot you choose and any note you add; Google's terms and privacy policy govern that page. The booking lands in our Google Workspace calendar and we receive it there.
We do not sell, rent or trade personal data, and we do not use it to train any AI model.
No one else receives your data unless the law requires it.
We are in Switzerland. The providers above are US companies, so your data may be processed in the United States. For those transfers we rely on the providers' standard contractual clauses, and on the Swiss-US and EU-US Data Privacy Framework where the provider is certified for the service concerned.
The site itself sets no cookies: no analytics cookies, no preference cookies, nothing stored in your browser by us. Booking opens on Google's own domain, where Google's cookies apply. We do not run analytics at present. If we switch analytics on, it will be GoatCounter, which counts visits without cookies or personal identifiers, and this policy will be updated before it goes live.
We use AI tools (including Claude by Anthropic and Microsoft Copilot) in our consulting work. We do not put your personal data into them. Where AI tools are used in delivering a service, personal information is removed or anonymised first.
Under the Swiss Federal Act on Data Protection (nFADP) and, where it applies, the GDPR, you can:
Email q.mamdouh@mai4consulting.com. We answer within 30 days.
The site and the assessments are for professionals and organisations. We do not knowingly collect data from anyone under 16. If you think a minor has submitted data, tell us and we will delete it.
All pages and form submissions use HTTPS. Our Google Workspace account, where reports and correspondence are kept, is protected by two-step verification and is accessible only to us. No transmission over the internet is completely secure; if a breach affects your data, we will tell you.
When our practices change, this page changes with them and the date below moves. Material changes, such as switching analytics on or adding a processor, are announced on this page before they take effect.
Questions and requests: q.mamdouh@mai4consulting.com. If you believe we have mishandled your data, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch or, if you are in the EU or EEA, to your local supervisory authority.
© 2026 M.A.I. Consulting. Geneva, Switzerland.
Last updated: 16 October 2026
Write to q.mamdouh@mai4consulting.com. We respond within 30 days.