Who we are
This site is operated by M. A. Shaiye, trading as AI Safe Commerce, London, United Kingdom. For questions about this notice or about your data, contact shaiyem1@gmail.com. We are the data controller for personal data submitted through this site.
What we collect
Only what you type into a form on this site: your name, work email, company, role, and whatever you choose to write in the free-text fields. For a catalog-readiness audit we additionally receive the catalog location you supply — a store URL, a feed link, or a request for read-only access — and any catalog export you subsequently send us at audit@safeaicommerce.com.
Form submissions are processed by Netlify, our hosting provider, which records the submission along with basic technical metadata such as the time of submission. Netlify also collects standard server request data for security and availability purposes.
Why we use it
To scope and deliver what you asked for — to run and return the audit, to arrange the consultation you booked, or to administer your enrolment. Our lawful basis is legitimate interests: responding to a business enquiry you initiated, using business contact data, which is the ordinary basis for correspondence of this kind. Where you go on to buy, the basis is performance of a contract.
Who the controller is. Today the controller is M. A. Shaiye, trading as AI Safe Commerce. On incorporation the controller becomes the registered company, and this notice is updated with the company number at that point.
We do not sell your data, we do not share it with advertisers, and we do not add you to a marketing list you did not ask for.
Catalog data and confidentiality
Catalog data you submit for an audit is used solely to produce your audit and is not published, shared, or used to identify you in any public material. Where audit findings inform teaching or research, they are aggregated and anonymised: no client, catalog or product is identifiable. If we ever want to cite your work by name, we will ask you first and in writing.
How long we keep it
Enquiry records are kept for up to 24 months from our last contact, then deleted.
Catalog exports are deleted within 90 days of your findings report being delivered, and sooner on request — write to us and we will delete them and confirm when it is done. Ninety days is deliberate: it covers the review and follow-up period on a normal engagement, so the evidence behind a finding still exists if you come back with a question about it. They are never used to train anything, never shared, and never retained as reference material. Records connected to a paid engagement are kept for six years, as UK accounting rules require.
Your rights
Under UK GDPR you may request access to your data, correction of it, erasure of it, restriction of its processing, or a portable copy, and you may object to processing based on legitimate interests. Write to shaiyem1@gmail.com and we will respond within one month.
If you are unhappy with how we have handled your data you may complain to the Information Commissioner's Office at ico.org.uk.
Cookies
This site sets no advertising or analytics cookies and uses no third-party trackers. Your hosting provider may set strictly necessary cookies required to serve the site and to protect forms from abuse.