Privacy
The short version.
This site sets no cookies and stores nothing on your device. It counts page views without identifying anyone. It does no marketing, sells nothing, and shares nothing collected here with anyone. If you email us, we keep your message for as long as it takes to deal with it.
Who is responsible
This site is operated by All Toogether Ltd, a company registered in England and Wales (company number 14775309, registered office Jactin House, 24 Hood Street, Manchester M4 6WX), which is the data controller for anything described on this page. Contact: hello@openworkplacehealth.org.
What is counted when you read a page
Each page load and each page exit is counted, with the page address, the page you came from if your browser passes it on, and your browser and device type. That is all. The counting mode we use does not derive a country from your connection.
Your IP address is used for one purpose at the moment it arrives: together with your browser type, the site name and a secret value that changes every day, it is turned into a hash, and then discarded. The hash cannot be turned back into your address. Because the secret changes daily, the same visitor produces a different hash tomorrow, so visits cannot be linked across days and no profile of any person is ever built. Within one day, repeated views from the same address and browser count as one visitor; that is the whole extent of it. Nothing is placed on your device to recognise you when you return.
The counting is done by PostHog, a service we use as a processor, on servers in the European Union. PostHog acts only on our instructions and may not use the data for its own purposes.
Why we count, and on what basis
We count so that we know which pages are read and whether the site is working. Our lawful basis is legitimate interests. We judged that interest against the effect on you: no cookies, no identifier that persists beyond a day, no marketing use, no sharing. We concluded the effect is minimal. You may object at any time by writing to the address above; because nothing identifies you, we cannot single out your visits, but we will consider the objection and answer it.
Because nothing is stored on or read from your device, the rules on cookies and similar technologies do not require your consent, and the site shows no banner.
How long it is kept
The analytics project has a twelve-month retention setting, but automatic deletion under that setting is not currently enforced.
If you write to us
If you email us, raise an issue, or send a contribution, we hold your name, your address and what you wrote for as long as needed to deal with it and to keep a record of how the standard was changed and why. Contributors are named in public only with their consent. Issues and pull requests on GitHub are also subject to GitHub's own privacy statement.
What we do not do
- No cookies, local storage or fingerprinting, and no means of recognising a visitor from one day to the next.
- No advertising, no marketing, no newsletters, no retargeting.
- No passing of anything collected here to the steward's commercial products or to any third party, other than the processor named above. The counts for this site are held in the same analytics project as the steward's website.
- No selling of data, ever.
Your rights
Under UK data protection law you have the right to ask what personal data we hold about you, to have it corrected or deleted, to object to or restrict its use, and to complain to the Information Commissioner's Office (ico.org.uk). Write to hello@openworkplacehealth.org. For the visit counting described above there is nothing we can tie to you, and we will say so; for correspondence, we will act on your request.
Changes
If what this site collects changes, this page changes with it and carries the new date. The change also appears in the site changelog.