Privacy policy
What this website collects, why, who else sees it, and how to get it removed.
Draft — not yet reviewed by counsel
This draft was written to describe what the website actually does — the exact form fields, the storage and email providers, and the browser storage used by the Secure Score. It is accurate as to the technical behaviour, but it is not legal advice. Every highlighted field below needs a real value, and the whole document needs legal sign-off before this page goes live.
Who we are
This website is operated by [REGISTERED ENTITY NAME], trading as Secure Place to Work, registered at [REGISTERED OFFICE ADDRESS]. In this policy “we” and “us” mean that entity.
For questions about this policy or about how your data is handled, contact pratik@secureplacetowork.com or write to our grievance officer, [GRIEVANCE OFFICER NAME AND EMAIL].
This policy covers this website only. Our customer platform is a separate product with its own terms, and organisations using it are the controllers of their own employee data.
What we collect
We only collect information you type into a form. There is no account system on this website and we do not require you to identify yourself to read anything.
When you contact us or request a demo
- Your name and work email address (required)
- Your organisation, phone number and job title (optional)
- The message you write, and the number of sites if you tell us
- Which page or asset the enquiry came from, and any campaign parameters present in the link you followed
When you complete the Secure Score assessment
- Your industry, workforce size band and number of sites, plus your organisation name if you give it
- Your answers to the twenty assessment questions
- The score and pillar breakdown calculated from those answers
- Your name and email address, which are requested before the full result is shown
Your in-progress answers are also saved in your own browser’s local storage so you can leave and come back. That copy never leaves your device and you can clear it by selecting “Start over” or clearing your browser data.
When you register for a workshop
- Your name, email address, organisation, phone number and the number of seats requested
We do not ask for payment details, government identifiers, or any special category data on this website.
Why we use it, and on what basis
We use the information above to:
- Reply to your enquiry and, where you asked for one, arrange a demo
- Send you your Secure Score result and the accompanying report
- Confirm and administer workshop bookings
- Understand, in aggregate, which industries and organisation sizes are looking at workplace safety certification
Our lawful basis is your consent, given when you submit a form, and our legitimate interest in responding to enquiries about our services. Where the Digital Personal Data Protection Act, 2023 applies, we process on the basis of the consent you provide at the point of collection.
We may email you once to follow up on an enquiry or a downloaded guide. We do not add you to a marketing list without asking, and every such email carries an unsubscribe option.
Aggregate benchmarks
Secure Score results may be combined with other submissions to produce industry benchmarks — for example, the median score for manufacturing organisations of a given size.
Benchmarks are only ever published in aggregate, never in a form that identifies an organisation or an individual, and only once enough submissions exist for a figure to be meaningful. If you would prefer your submission excluded, email us and we will remove it.
Who else sees it
We do not sell personal data, and we do not share it for advertising.
Your submission is stored in a database operated on our behalf by Supabase, and notification emails are delivered through our email provider, [EMAIL PROVIDER NAME]. Both act as processors on our instructions and may store data in [HOSTING REGION — e.g. Singapore / Mumbai]. Where data leaves your country, we rely on [TRANSFER MECHANISM — e.g. standard contractual clauses].
Inside our organisation, website enquiries and assessment submissions are visible only to administrators of our internal portal, which is access-controlled and role-restricted.
We may disclose information where the law requires it, or to establish or defend a legal claim.
How long we keep it
Enquiries and workshop registrations are retained for [RETENTION PERIOD — e.g. 24 months] from your last contact with us, after which they are deleted.
Assessment submissions are retained for [RETENTION PERIOD]. After that, the identifying details are deleted and only the anonymised scores are kept, so that historical benchmarks remain accurate.
Your rights
You can ask us to:
- Give you a copy of the personal data we hold about you
- Correct anything that is wrong or out of date
- Delete your data, including any assessment you submitted
- Stop contacting you
- Withdraw a consent you previously gave
Email pratik@secureplacetowork.com and we will respond within [RESPONSE WINDOW — e.g. 30 days]. You will not be charged, and asking will never affect the service you receive.
If you are not satisfied with our response you may complain to [RELEVANT SUPERVISORY AUTHORITY].
Security
Data is transmitted over encrypted connections and stored in a database with row-level access controls, so that website enquiries are isolated from unrelated records and readable only by authorised administrators.
No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authority as required by law.
Changes to this policy
If we change how we handle personal data we will update this page and revise the date below. Material changes affecting people who have already contacted us will be notified by email.
Last updated: [DATE OF LEGAL SIGN-OFF].
