Privacy Notice
Last updated:1. Who we are
BourneSkills is operated by Michael Parkins ("we", "us", "our"). We are the data controller for the personal data described in this notice.
Contact for data and privacy matters:
Email: [email protected]
BourneSkills is a validation project exploring the demand for professional skills training in the Bournemouth, Christchurch, and Poole area. We use free online assessments to understand whether specific training programmes would meet a genuine local need.
2. What personal data we collect and why
We collect the minimum personal data necessary to run our assessments and understand demand. The table below sets out each processing activity, the data involved, our legal basis, and how long we keep it.
| What we collect | Why we collect it | Legal basis (UK GDPR) | Retention |
|---|---|---|---|
| Assessment responses (your answers to the assessment questions) | To generate your personalised score and recommendations | Legitimate interest — you voluntarily complete the assessment to receive a result | Retained by Tally.so per their privacy policy. Our copy: until the end of the validation period + 6 months, or until you request deletion |
| Email address (if you provide one in the assessment) | To deliver your assessment result to you by email | Legitimate interest / contract — you explicitly requested this deliverable | Same as above |
| Pilot interest registration (email, assessment score, level, and timestamp) | To notify you when pilot training places become available, if you clicked the "notify me" button | Legitimate interest — you took a clear, active step expressing commercial interest in a specific programme | Until pilot places are confirmed or the programme is cancelled, then deleted or anonymised. Maximum 12 months from registration |
| Marketing consent and communications (if you separately opt in) | To send you updates about BourneSkills programmes, early-access offers, and launch news | Consent (UK GDPR Article 6(1)(a) / PECR Regulation 22) — explicit, unticked opt-in only | Until you withdraw consent (unsubscribe) or request deletion |
| UTM / attribution parameters (traffic source, campaign, medium) | To understand which channels are reaching people who find the assessments genuinely useful — not for tracking individuals | Legitimate interest | Stored in your browser's sessionStorage only. Cleared automatically when you close the tab. Never persisted to our servers in identifiable form |
| Aggregate website analytics | To understand page performance (pages visited, approximate visitor numbers) | Legitimate interest — Cloudflare Web Analytics is cookie-free and does not collect personal data | Aggregate data only; no individual records retained by us |
What we do not collect
- We do not use cookies for tracking or analytics
- We do not deploy advertising pixels (Meta Pixel, LinkedIn Insight Tag, Google Tag, etc.)
- We do not collect payment information on this website
- We do not collect information about your device, browser fingerprint, or precise location
3. How we use your data
We use the personal data we collect only for the purposes described in Section 2. Specifically:
- Assessment results: Your responses are used to calculate your score and generate personalised recommendations. We also use aggregated, anonymised assessment data to understand whether sufficient local demand exists for a training programme.
- Pilot interest: If you clicked "Yes — notify me about the pilot", we will contact you once to let you know when pilot places become available. This is a one-time notification, not a subscription.
- Marketing (consent only): If you separately opted in to marketing communications, we will send you updates about BourneSkills. You can unsubscribe at any time using the link in any email.
We do not sell, rent, or trade your personal data. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
4. Who we share your data with
We use a small number of third-party services to operate the BourneSkills validation system. Each is a data processor acting on our instructions. We have reviewed the data processing terms of each service.
| Processor | Purpose | Data shared | Location |
|---|---|---|---|
| Tally.so | Online assessment form provider | Assessment responses, email address (if provided) | EU (Belgium). Governed by Tally's own privacy policy and terms. |
| Make.com (formerly Integromat) | Automation — routes pilot interest data from our pages to our records | Email, score, level, hypothesis, timestamp (for pilot interest registrations only) | EU. Execution logs auto-expire. Make.com DPA available. |
| Google (Sheets/Workspace) | Operational dashboard — stores pilot interest registrations and assessment summaries | Email, score, level, hypothesis, consent flags | US/EU. Governed by Google Workspace Data Processing Amendment. |
| MailerLite | Email delivery — used to send assessment results and (with consent) marketing communications | Email address, consent status, hypothesis, pilot interest flag | EU. MailerLite DPA available in account settings. |
| Cloudflare | Website hosting and cookie-free analytics | Aggregate, anonymised traffic data only. No personal data collected by Cloudflare Web Analytics. | Global CDN. Cloudflare DPA available. |
We do not share your data with any other third parties. We will disclose data if required to do so by law or a valid legal process.
5. Cookies and tracking
This website does not use cookies.
Our analytics tool (Cloudflare Web Analytics) is cookie-free and does not collect personally identifiable information. It gives us aggregate data about page performance without tracking individual visitors.
When you visit a landing page, your browser temporarily stores attribution information (UTM parameters, such as where you came from) in sessionStorage. This is only ever stored locally in your browser — it is never sent to our servers separately, and it is cleared automatically when you close the browser tab.
Because we do not use cookies or tracking technologies that require consent under PECR, we do not display a cookie consent banner.
6. Your rights under UK GDPR
Under the UK General Data Protection Regulation (UK GDPR), you have the following rights in relation to your personal data:
- Right of access (Article 15) — You can request a copy of the personal data we hold about you.
- Right to rectification (Article 16) — You can ask us to correct inaccurate data or complete incomplete data.
- Right to erasure (Article 17) — You can ask us to delete your personal data. We will comply unless we have a legal obligation to retain it.
- Right to restrict processing (Article 18) — You can ask us to limit how we use your data in certain circumstances.
- Right to data portability (Article 20) — You can ask us to provide your data in a structured, machine-readable format.
- Right to object (Article 21) — You can object to processing based on legitimate interest. We will stop unless we have compelling legitimate grounds.
- Right to withdraw consent — Where processing is based on consent (e.g. marketing emails), you can withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.
How to exercise your rights
Email us at [email protected] with your request. We will respond within 30 days. We do not charge a fee for data subject requests.
When you request deletion, we will remove your data from all systems where we hold it (Tally, MailerLite, Google Sheets, Make.com logs). We will confirm deletion in writing.
7. Right to complain to the ICO
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority.
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Report a concern: ico.org.uk/make-a-complaint
We would appreciate the opportunity to address any concern before you contact the ICO — please email us first at [email protected].
8. How we protect your data
We take appropriate technical and organisational measures to protect your personal data:
- All pages are served over HTTPS (TLS 1.2 / 1.3)
- We use established, reputable third-party services with their own security certifications
- We apply data minimisation — we only collect what is necessary for each purpose
- Access to operational data (Google Sheets) is restricted to authorised personnel only
9. Changes to this notice
We may update this privacy notice from time to time. The date at the top of this page shows when it was last revised. If we make significant changes, we will take reasonable steps to inform you (for example, by emailing people who have provided their address).
10. Take an assessment
If you arrived here from one of our assessments and would like to return to your results, use your browser's back button. You can also access our assessments directly: