Legal
Privacy
Two different things get confused under this heading: what this website collects about a visitor, and what the platform collects about a workplace. They are separate, and both are described here.
This website
Necessary cookies keep the site working and are set without consent, because the site cannot function otherwise. Nothing that measures loads until a visitor has chosen, the banner is a real gate rather than a notice.
If you submit a form, we process the details you enter in order to reply to you. We do not buy contact data, we do not enrich what you give us from third-party sources, and we do not pass it to anyone outside the processing described in the data processing agreement.
Analytics, once consented to, run through PostHog. The measurement is at page and interaction level and is pseudonymised rather than anonymous (an identifier and an IP address are processed) and it is not combined with form submissions to build a profile.
The platform
Workplace measurement is aggregated at team, department and location level at the point of collection. There is no view, export or permission level that reports what a named individual did, because that record is not created.
Entry Pass is the single exception, and it inverts the usual arrangement: a personal profile exists and only the individual it describes can see it. No manager view exists.
Groups below a minimum size are not reported at all. A team of two is an individual with extra steps.
Your rights
Can I ask what you hold about me?
Yes. For website contact you can request, correct or delete what you submitted. For platform measurement the answer is usually that no individual-level record exists, which is a design property rather than a policy position.
Where is data stored?
Within the EU. Sub-processors are listed in the data processing agreement and changes are notified to customers.
How long is it kept?
Retention is set per study and stated before collection. Website form submissions are kept for as long as the conversation they belong to is live, and then removed.