Privacy Policy - Data Act Checker

1. Who is responsible for your data?

Data Act Checker is operated by Jason Will, who is the data controller for the personal data described in this policy.

Privacy enquiries may be sent to jason@dataactchecker.com.

2. What information do we collect?

Assessment and report information

When you complete the assessment, we collect the company name you enter, information about the business, and the answers you provide to the assessment questions. This information is used to calculate your results and generate the personalised PDF report you request.

The assessment does not ask for your name, personal email address, payment details or card information.

Technical and session information

The website may process limited technical information needed to operate securely and provide the requested service. This may include a session identifier, IP address, browser and device information, request timestamps and diagnostic information.

Analytics information

With your consent, we use Google Analytics 4 to understand how the website is found and used. Analytics information may include pages viewed, referral source, approximate location, browser or device type, session activity and interactions with features such as the assessment and report download.

We do not intentionally send the company name or assessment answers to Google Analytics.

3. Why do we use this information?

We process information for the following purposes:

to provide the assessment and generate the report you request;
to maintain the security, reliability and performance of the website;
to diagnose faults and prevent misuse;
with your consent, to measure website usage and improve the service; and
to comply with applicable legal obligations.

4. Legal bases

Depending on the processing activity, we rely on:

Performance of a service requested by you for processing the assessment information needed to generate your report;
Legitimate interests in operating, securing and improving the website, provided those interests are not overridden by your rights;
Consent for non-essential analytics cookies and related analytics processing; and
Legal obligation where processing is required by law.

5. Cookies and similar technologies

The website may use a strictly necessary session cookie to keep your assessment answers available while your report is being generated. This cookie is required to provide the service you request.

Google Analytics cookies are non-essential and are only used after you have consented. You can refuse or withdraw analytics consent without losing access to the assessment or report.

6. How long do we retain information?

Assessment answers and generated report data: held temporarily in session storage and automatically removed when the session expires. They are not intentionally stored in a customer database.
Technical logs: retained only for as long as reasonably necessary for security, troubleshooting and service administration.
Google Analytics user-level and event-level data: retained for up to two months. Aggregated reporting data may remain available for longer within Google Analytics.

7. Who receives the information?

Information may be processed by service providers that support the operation of the website, such as hosting and infrastructure providers. Where analytics consent is given, information is also processed by Google as the provider of Google Analytics.

Information may also be disclosed where required by law, court order or a competent public authority. We do not sell personal data.

8. International transfers

Some service providers may process information outside the European Economic Area. Where this occurs, appropriate safeguards are used as required by applicable data-protection law, such as an adequacy decision or approved contractual safeguards.

9. Your data-protection rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

request access to personal data held about you;
request correction of inaccurate or incomplete information;
request deletion of personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive certain information in a portable format; and
withdraw consent at any time, without affecting earlier processing.

To exercise a right, email jason@dataactchecker.com. We may need to request limited information to verify the request.

10. Complaints

You may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or another competent supervisory authority. The AEPD website is www.aepd.es.

11. Security

Reasonable technical and organisational measures are used to protect the information processed by the website. No internet service can guarantee absolute security.

12. Children

The website is intended for businesses and professionals and is not directed at children.

13. Changes to this policy

This policy may be updated when the service, technology or legal requirements change. The latest version will be published on this page with an updated date.

14. Contact

Jason Will
Data Act Checker
jason@dataactchecker.com