Privacy Policy

AssessThis AI provides an online platform that helps users generate UK-compliant risk assessments and COSHH assessments using artificial intelligence. For the purposes of applicable data protection law, we are the “data controller” in respect of the personal data you provide to us.

If you have any questions about this policy or how we handle your data, you can contact us via our Contact Support page.

We collect and process the following categories of personal data:

• Account information — your name, email address and password (stored in encrypted, hashed form) when you register for an account.
• Company profile information — company name, address, registration and VAT numbers, contact details, logo and digital signature, where you choose to provide them.
• Assessment content — the information you enter to generate risk assessments and COSHH assessments, including project details, hazards, method statements, uploaded safety data sheets and site photographs.
• Payment information — when you make a payment, this is processed securely by our payment provider (Stripe). We do not store your full card details on our systems.
• Technical data — information automatically collected when you use the Service, such as your IP address, browser type, device information and usage data.

We use your personal data to:

• Provide, operate and maintain the Service, including generating your assessments;
• Create and manage your account and authenticate your access;
• Process payments and provide you with your purchased documents;
• Respond to your enquiries and provide customer support;
• Improve, personalise and develop the Service;
• Send you service-related communications (for example, password reset emails); and
• Comply with our legal obligations and enforce our terms.

Under UK GDPR, we rely on the following legal bases to process your personal data:

• Performance of a contract — to provide the Service you have requested and process your payments.
• Legitimate interests — to operate, secure and improve our Service, provided your rights do not override these interests.
• Legal obligation — where processing is necessary to comply with the law.
• Consent — where you have given us clear consent to process your data for a specific purpose. You may withdraw consent at any time.

The Service uses AI models to generate assessment content based on the information you provide. The content you submit may be processed by trusted third-party AI infrastructure providers solely for the purpose of producing your requested documents. We do not use your assessment content to train publicly available AI models.

AI-generated content is provided as a drafting aid. You remain responsible for reviewing, verifying and approving all content before relying on it. Please see our Terms of Service for further detail.

Payments are processed by Stripe, a third-party payment processor. When you make a payment, your card details are provided directly to Stripe and are handled in accordance with Stripe’s own privacy policy and the PCI-DSS security standard. We receive confirmation of payment and a transaction reference, but we do not store or have access to your full card details.

We take the security of your data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss or misuse. Passwords are stored using strong one-way encryption (hashing). Uploaded files and documents are stored securely in encrypted cloud storage, and access is restricted to authenticated users.

While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

We retain your personal data for as long as your account remains active or as needed to provide you with the Service. We may retain certain information for longer where necessary to comply with our legal obligations, resolve disputes and enforce our agreements. When your data is no longer required, we will securely delete or anonymise it.

We do not sell your personal data. We may share your data with:

• Service providers — trusted third parties who help us operate the Service (for example, cloud hosting, payment processing and AI infrastructure providers), bound by confidentiality and data protection obligations;
• Legal and regulatory authorities — where we are required to do so by law or to protect our rights; and
• Business transfers — in connection with a merger, acquisition or sale of assets, in which case we will notify you of any change.

We use essential cookies and similar technologies to operate the Service, keep you signed in and remember your preferences (such as your light or dark theme setting). These cookies are necessary for the Service to function. We do not use cookies for third-party advertising.

Some of our service providers may process your data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place (such as adequacy decisions or standard contractual clauses) to protect your data in accordance with UK data protection law.

Under UK GDPR, you have the following rights in relation to your personal data:

• The right to be informed about how your data is used;
• The right to access a copy of the personal data we hold about you;
• The right to rectification of inaccurate or incomplete data;
• The right to erasure (“the right to be forgotten”);
• The right to restrict processing;
• The right to data portability;
• The right to object to processing based on legitimate interests; and
• Rights in relation to automated decision-making and profiling.

To exercise any of these rights, please contact us via our Contact Support page. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, at ico.org.uk.

The Service is intended for use by businesses and professionals and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please get in touch via our Contact Support page.