Privacy

The form on our contact page asks for your name, your company, what kind of company it is, what you want fixed first, and your email address. We use it to reply to you and to keep track of the conversation.

It is stored in our database, hosted by Neon in the EU, and copied into a Google Sheet that our team works from.

Most of our reports are private and open with a password we send you. Some open when you give a name, a company and a work email instead. Where we ask for those, we store them along with the wording you were shown at the time, the date, and the IP address the request came from.

Whether a report opens with a password or an email, we log the fact that it was opened, when, from which IP address, and what browser was used. We also log failed password attempts. This is how we can tell a client who has read their report, and how we notice someone trying to guess their way in.

Opening a private report sets one cookie so you do not have to enter the password again for thirty days. It holds no personal data and the report will not open without it.

On the live site we also load Google Tag Manager, which runs our analytics and advertising tags. Those set their own cookies and are managed inside the tag container rather than in this website’s code. They do not run on preview or development builds.

Records of who opened a report, and of failed attempts, are deleted after twelve months. Records of blocked login attempts are deleted after seven days.

Contact details you give us, through the form or a report, we keep until you ask us to remove them.

Ask, and we will delete what we hold about you. You can also ask for a copy of it, ask us to correct it, or object to us using it. Use the contact form and say what you want done.

The companies that run the software we use: Vercel (hosting), Neon (database), and Google (Sheets, Tag Manager, Analytics). We do not sell your data, and we do not pass it to anyone else except where we are required to.