Draft wording. Have it reviewed against your own circumstances and jurisdiction (for example UK GDPR) before relying on it. Replace the bracketed details.
1. Who is responsible
[Operator name and address] is responsible for the personal data described here. Contact: [email].
2. What we hold
- Details you enter: name, role, organisation, regulator, cycle dates and target.
- Your activities, reflections, evidence notes, plans and learning priorities.
- Your email address and a secure form of your password, used to run your account, confirm your address and reset your password.
- If you submit an event: the event details, your contact email, and whether you asked to hear about advertising. We use these to review the listing and to contact you about it. To limit spam we also keep a one-way scrambled form of your connection address for 30 days; it cannot be turned back into the address.
Reflections can contain sensitive professional information. Leave out client names and confidential details.
3. Counting visits
We count how the site is used, without cookies and without identifying you. When a sponsored listing is shown, or someone clicks a link that leaves the site, we record only that it happened, which listing and website it involved, and the date and time; we keep these counts for up to two years. We also use [Umami], a cookie-free analytics tool, which records pages viewed, the type of browser and device, the country you appear to be in, and the site you came from, and which actions are used (for example creating an account or downloading a report). It does not store your connection address or follow you across other websites. We do not record who you are or what you enter in your record.
4. How it is stored
Where your account allows it, your record is saved privately to your account. Otherwise it is saved in this browser only. We do not sell your data or use it for advertising.
5. Browser storage
We do not set cookies. The site does keep a few small items in your browser, which stay on your device and are not used to identify you: if you sign in, a sign-in token so you stay signed in; while you browse Find events, the search and filters you chose, kept for that browser tab only and cleared when you close it, so they are still there when you move between pages; and, in the site owner's own browser, a marker that stops the owner's visits being counted. You can clear these at any time in your browser settings.
6. Why we use it
To run the site: to show your plan, your completed activities and your report. Our lawful basis is providing the service you asked for.
Newsletter: if you tick the newsletter box when you sign up, switch it on in My account, or enter your email address in the box in the footer, we use that address to send you the newsletter. Our lawful basis is your consent. You can withdraw it at any time with the unsubscribe link in every email or in My account, and we will stop. We keep your address on the list until you unsubscribe or delete your account.
7. Sharing
Reports and files leave the site only when you download them. Newsletter email addresses are held in the same database and, when an issue is sent, passed to Resend, the email service we use to send it, which acts on our instructions. If you copy a prompt into an AI tool, what you paste is governed by that tool's own terms and privacy policy. The site serves its fonts from its own address, so your browser does not contact Google to load them.
8. Your rights
You can view, change and delete your entries in the site at any time, and download a full backup from the bottom of the Completed tab. You may also have rights to access, correct, erase or restrict use of your data, and to complain to your data protection authority (in the UK, the Information Commissioner's Office).
9. Keeping it
Your record is kept until you delete it or close your account. You can delete your account yourself under My account, My details, Delete my account; this permanently removes your account and everything stored against it. Sample data is never included in exports.
10. Changes
If we change this policy we will update the date below.
Last updated: [date]