Privacy Policy

CAIO Consultants (“CAIO Consultants,” “we,” “us,” or “our”) provides fractional and full-time Chief AI Officer services, AI governance consulting, and related assessments (the “Services”). This Privacy Policy explains what information we collect through caioconsultants.com (the “Site”) and our Services, how we use and share it, and the choices and rights available to you. By using the Site or submitting information to us, you agree to the practices described here.

1. Information We Collect

Information you provide directly

• AI Risk Score assessment: your responses to the assessment questions, along with the name, work email, phone number, and company details you provide to receive your results.
• Contact and inquiry forms: name, email address, phone number, company name, and the content of any message you send us (including through the FAQ “Ask in Writing” form).
• Newsletter signup: your email address.
• Discovery calls and engagements: information you provide when you book a call through Calendly or engage us directly, including company information relevant to scoping a governance engagement.

Information collected automatically

• Usage data: pages visited, time on page, referring URL, browser type, and device type, collected through cookies and similar technologies as described in Section 4.
• Assessment results storage: your AI Risk Score results and a timestamp are stored locally in your browser so you can retrieve or retake the assessment; this data is not automatically transmitted to us unless you submit it through the results form.

2. How We Use Your Information

We use the information we collect to:

• Deliver AI Risk Score results and follow up on them;
• Respond to inquiries and schedule discovery calls;
• Provide, scope, and administer engagements you request;
• Send the newsletter and other communications you’ve opted into;
• Improve the Site and our Services; and
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not use your assessment answers or engagement details for any purpose other than serving you and improving our own Services.

3. SMS and Email Communications

If you provide a phone number or email address through the AI Risk Score assessment, a contact form, or in the course of an engagement, you authorize CAIO Consultants to contact you at that email address or phone number to follow up on your results, respond to your inquiry, and send relevant communications about our Services.

• Message and data rates may apply. Message frequency varies.
• You may opt out of SMS at any time by replying STOP to any text message.
• You may unsubscribe from email at any time using the Unsubscribe link included in every email, or by contacting us at info@caioconsultants.com.
• Consent to receive SMS or email communications is not a condition of purchasing any Service.

4. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to remember your preferences, keep the Site functioning correctly, and understand how visitors use the Site. When you first visit, you’ll be asked to accept or decline non-essential cookies through our cookie banner.

• Essential cookies: required for core Site functionality (for example, remembering that you’ve responded to the cookie banner). These cannot be disabled.
• Functional and analytics cookies: used only if you accept them, to help us understand aggregate Site usage and improve the experience. You can decline these and still use the Site normally.

You can change your cookie preferences at any time by clearing your browser’s local storage for this Site and reloading the page, which will re-display the cookie banner. Most browsers also let you block cookies entirely through browser settings, though this may affect Site functionality.

5. How We Share Information

We do not sell or rent your personal information. We share information only in the following circumstances:

• Service providers: vendors who help us operate the Site and deliver Services on our behalf, such as scheduling (Calendly), email delivery, and hosting providers — each bound to use your information only to provide that service to us.
• Legal requirements: when required by law, subpoena, or other legal process, or to protect the rights, property, or safety of CAIO Consultants, our clients, or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.
• With your direction: when you ask us to share information with a third party on your behalf.

6. Data Retention

We retain personal information for as long as needed to provide the Services, respond to your inquiries, comply with legal obligations, resolve disputes, and enforce our agreements. Assessment and inquiry data not converted into an active relationship is generally retained for no longer than 24 months, after which it is deleted or anonymized, unless a longer retention period is required by law.

7. Your Privacy Rights

If you are in the European Economic Area or United Kingdom (GDPR)

You have the right to access, correct, delete, or restrict our use of your personal data; to receive a copy of your data in a portable format; and to object to certain processing, including direct marketing. Our legal basis for processing is generally your consent (for example, submitting the assessment or subscribing to the newsletter), our legitimate interest in operating and improving the Services, or the steps necessary to enter into or perform an engagement with you. To exercise any of these rights, contact us using the details in Section 13.

If you are a California resident (CCPA/CPRA)

You have the right to know what personal information we collect, request deletion of that information, correct inaccurate information, and opt out of the sale or sharing of personal information. CAIO Consultants does not sell or share personal information as those terms are defined under California law. You will not be discriminated against for exercising any of these rights.

All users

Regardless of location, you can always unsubscribe from marketing communications, request that we delete your information, or ask what information we hold about you by contacting info@caioconsultants.com. We will respond within a reasonable time and, where required by law, within statutory deadlines.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

CAIO Consultants is based in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

10. Children’s Privacy

The Site and Services are intended for business audiences and are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Third-Party Links

The Site may link to third-party websites, including Calendly, ISO.org, EU regulatory sources, and organizations such as the World AI Council. We are not responsible for the privacy practices of third-party sites, and we encourage you to review their privacy policies directly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Effective and last updated” date at the top of this page. Continued use of the Site after changes take effect constitutes acceptance of the revised policy.

13. Contact Us