Privacy notice

TODO(legal): this notice has not been reviewed by a lawyer. It describes what this website actually does today, which is the honest starting point, but it is not a complete privacy notice and must not be treated as one before launch. The outstanding items are listed at the end.

Who this covers

This notice covers this website only. The Seratlas assessment products have their own notices, provided to the institutions that operate them under their own agreements.

What this site collects

This site is a set of static files. It has no database, no accounts, and no server-side code, so there is nothing here that records who visited.

Two exceptions, both of which involve you choosing to send something:

Forms

If you submit the contact or partnership form, the fields you filled in are delivered to us by a third-party form provider. That provider processes the submission on our behalf and we receive it as an email. We use it to reply to you.

Server logs

Our content delivery network records the requests it serves, including IP addresses, as part of operating and securing the service. These are standard operational logs, retained for a limited period.

What this site does not do

• No advertising or tracking cookies.
• No analytics that identifies you.
• No sale or sharing of anything you send us.
• No automated decision-making.

Your rights

Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected, or to have it deleted. Write to the contact address on this site and we will respond.

If you have only browsed the site and never submitted a form, we almost certainly hold nothing about you beyond the operational logs described above.

Changes

The date at the top of this page is when it last changed. Material changes will be noted here rather than made quietly.

Outstanding before launch

TODO(legal): a registered postal address is required and is not yet available. TODO(legal): the form provider must be named, with its own processing terms linked. TODO(legal): log retention period to be stated as a specific number of days. TODO(legal): confirm which of UK GDPR, EU GDPR and CCPA apply, and add the lawful-basis and data-subject-request sections each requires.