Privacy Policy
What we collect when you use this website, why we collect it, who we share it with and what you can ask us to do about it.
Who we are
DataWorks Labs is the data controller for personal data collected through this website.
For anything in this notice, contact [email protected].
What we collect, and when
We only collect personal data you choose to give us. There is no tracking on this site.
| When | What | Lawful basis |
|---|---|---|
| Data Maturity Assessment | First name, work email, company, and optionally your role and company size. Your answers to the 20 questions and the score calculated from them. | Legitimate interests (responding to a request for our report). Consent, where you tick the box to receive our monthly insight. |
| Booking a call | Booking happens on Calendly, not on this site. Whatever you enter there — typically your name, email and a note about your data — goes to Calendly and then to us. | Steps taken at your request before entering a contract. |
| Visiting any page | Standard server logs kept by our host: IP address, browser type, pages requested and time. | Legitimate interests (keeping the site secure and available). |
You can complete the assessment and see your score without giving us anything by choosing "Skip, just show my score". Nothing is sent to us in that case.
What we do with it
- Send you the assessment report you asked for, and follow up about it.
- Arrange and hold the discovery call you booked.
- Send the monthly insight, if you asked for it.
- Keep the website secure, available and working.
We do not sell personal data, we do not share it for advertising, and we do not use it to train AI models.
Who else sees it
We use a small number of providers who process data on our instructions:
| Provider | What they do | Where |
|---|---|---|
| Cloudflare Pages | Website hosting, CDN and server logs | Global edge network |
| Calendly | Booking discovery calls. Only receives what you enter when you book, on calendly.com | US |
We may also disclose personal data where the law requires it. Where a provider processes data outside the UK or EEA, that transfer is covered by an adequacy decision or by standard contractual clauses.
How long we keep it
- Assessment submissions and enquiries: 24 months from your last contact with us, then deleted.
- Server logs: as retained by our host, typically no more than 30 days.
- Client records: where you become a client, for as long as the law requires us to keep business records.
Your rights
Under UK and EU data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct it if it is wrong, or complete it if it is incomplete;
- delete it, or restrict what we do with it;
- provide it in a portable format, or send it to someone else;
- stop processing it where we rely on legitimate interests;
- stop sending you marketing, at any time.
Where we rely on consent, you can withdraw it at any time without affecting what we did before you withdrew it. Email [email protected] and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA. We would rather you told us first.
Cookies
This site sets no cookies. See the Cookie Policy for the detail.
Changes
If we change this notice we update the date at the top of the page. Where the change is significant and we hold your contact details, we will tell you.
Contact
Data protection enquiries: [email protected]. Anything else: [email protected].