Privacy Policy

If you have a question about this Privacy Policy, or you want to make a privacy or data request, please contact us through the website contact form.

1. Contact enquiries

When someone submits the contact form, we collect:

• name
• email address
• organisation if provided
• role if provided
• area of interest if selected
• message
• source page
• timestamp
• consent confirmation where required

This information is stored securely so we can respond to the enquiry. Submission also triggers a notification to EthicEyes and a confirmation email to the visitor containing a copy of the enquiry.

2. Media enquiries

When someone submits a media enquiry, we collect:

• name
• organisation or publication
• email address
• phone number if provided
• deadline
• enquiry type
• message
• source page
• timestamp
• consent confirmation where required

This is stored in the media_enquiries database table and may trigger a notification email to Ethic Eyes and a confirmation email to the visitor.

3. Anonymous diagnostic completions

When someone completes a diagnostic without requesting a report copy, we store the diagnostic answers and results anonymously. This may include:

• diagnostic tool completed
• individual answers
• dimension scores
• total score
• result band
• strongest and weakest areas
• priority areas
• open reflection text if provided
• source page
• timestamp

Diagnostic completions are stored anonymously unless you choose to request an emailed copy of your result or otherwise share your details.

4. Diagnostic report-copy requests

When someone asks to receive a copy of their diagnostic result by email, we collect their contact details and link them to the diagnostic result so the report can be sent and Ethic Eyes can respond if appropriate. This may include:

• name
• organisation
• role
• email address
• diagnostic completed
• score and result band
• dimension scores
• strongest and weakest areas
• priority areas
• source page
• timestamp
• consent flags

This creates a linked enquiry and report-copy request, and sends:

• a result email to the visitor
• a notification email to Ethic Eyes only where the visitor ticks the box asking to be contacted about their result

The result email contains a secure personal link to your report. The link expires after seven days, the report is generated fresh each time it is opened, and no copy of the PDF is stored.

Diagnostic result details are only shared with Ethic Eyes for a follow-up conversation where the visitor gives permission by ticking the sharing box. Where no follow-up is requested, the request is stored and appears only as a count in an internal weekly website summary.

5. PDF downloads and analytics

The one-page overview and 12-slide overview are direct downloads. The site may record anonymous analytics events such as:

• PDF downloaded
• page path
• timestamp
• anonymous session identifier
• referrer or basic browser information where available

You can also download your own diagnostic report as a PDF without giving any contact details; this is produced in your browser.

These events do not collect a name or email address unless you separately submit a form.

6. Anti-spam and security events

The site uses low-friction anti-spam protections such as honeypot fields, timing checks, validation and rate limiting. It may record limited security or guard events, such as:

• type of form or diagnostic
• accepted or blocked outcome
• reason for a block
• hashed IP address
• hashed email address where relevant
• related submission id where relevant
• timestamp

Cloudflare Turnstile

We use Cloudflare Turnstile on protected forms to help distinguish genuine visitors from automated traffic. Turnstile carries out automated security checks and may process limited technical information about your browser and connection for security and fraud-prevention purposes. Turnstile does not receive the content you enter into our forms. For more information, see Cloudflare's Turnstile Privacy Notice.

Blocked spam is not stored as a genuine enquiry, media enquiry or diagnostic result. Hashed IP and email values are not stored as readable personal details and cannot be reversed into an address. These logs are used only to protect the website from spam and abuse.

• responding to enquiries
• handling media enquiries
• sending diagnostic report copies when requested
• sending confirmation emails
• notifying Ethic Eyes of relevant enquiries or report-copy requests
• improving the website and diagnostics
• understanding which resources are used
• maintaining website security and preventing spam and abuse
• keeping appropriate business records

The diagnostic tools are reflection tools. They are not formal psychological assessments, clinical tools or automated decision-making systems. Diagnostic results are not used to make automated decisions about visitors.

• Consent, where someone requests a report copy, submits a form or ticks an optional consent box.
• Legitimate interests, for responding to enquiries, maintaining website security, improving the website and keeping appropriate business records.
• Steps before a contract, where someone asks about our services.
• Legal obligation, where records must be kept for legal, accounting or compliance reasons.

Ethic Eyes does not sell personal information.

Data may be processed by trusted service providers needed to run the site, including:

• our website hosting, backend and database provider
• our email delivery provider
• analytics or website performance tools
• professional advisers where required

These providers are only given access to the information they need, and are subject to appropriate confidentiality and security obligations.

• Contact enquiries: up to 24 months after last contact, unless deletion is requested earlier or retention is required for legitimate business, legal or accounting reasons.
• Media enquiries: up to 24 months after last contact, unless deletion is requested earlier or retention is required.
• Diagnostic report-copy requests: up to 24 months after last contact, unless deletion is requested earlier or retention is required.
• Anonymous diagnostic completions: may be retained for longer, because they are not linked to a named person unless report-copy details are provided.
• Guard and security logs: retained for around 90 days, and in any case only as long as needed for security monitoring.
• Anonymous analytics events: retained only as long as they are useful for website analysis.

You may have rights to:

• access the personal information we hold about you
• correct inaccurate information
• ask for deletion
• object to or restrict certain processing
• withdraw consent where consent is the basis for processing
• complain to the Information Commissioner’s Office

To make a request, please use the contact form.

• Form submissions are stored in a managed backend database.
• Public website users can submit information but cannot read, update or delete other submissions.
• Row-level security and equivalent access controls are used to restrict access.
• No method of online storage or transmission is completely secure.

Strictly necessary storage

We use a small amount of strictly necessary browser storage for site operation, security, our anti-spam checks, and remembering your cookie choice. This storage does not identify you and cannot be switched off, because the site cannot work correctly without it.

When you complete a diagnostic, your calculated result is also saved in your own browser for 24 hours, so you do not lose it if you refresh or navigate away. This is stored only on your device and expires automatically. It holds the diagnostic completed, the time of completion, your scores, and a reference number for the anonymous submission. It does not hold your name, email address, organisation, role or consent choices, and clearing your browser data removes it.

Analytics is optional

Analytics cookies and storage are entirely optional and are off unless you accept them. We may use Google Analytics 4, but only if you have given analytics consent. Nothing analytics-related is loaded before you make a choice, and nothing is loaded if you reject analytics.

Analytics helps Ethic Eyes understand how pages are used, how visitors move through the diagnostics, how often enquiry forms are completed, and which overview PDFs are of interest. Where Google Analytics is used, it may collect page views, device and browser information, approximate location, the referring website and interactions with the site.

Personal information you enter into our forms, and free-text responses written in a diagnostic, are never sent to Google Analytics. We do not send names, email addresses, phone numbers, organisations, roles, message text, reflection text or individual diagnostic answers to any analytics service.

You can reject analytics without affecting how the website works — every page, form, diagnostic and download works exactly the same either way. You can change your choice at any time using the “Cookie settings” link in the footer of every page.

All fonts used on this website are hosted by us and served from this website. No web fonts are loaded from Google Fonts or any other external font provider, so viewing pages does not send requests to those services.

We do not currently use marketing or advertising cookies, tracking pixels, or embedded third-party content. If marketing pixels or additional tracking tools are ever added, this Privacy Policy and the consent options will be updated first, and your consent will be requested before anything new is loaded.

This site may link to external websites, such as LinkedIn or other resources. Those sites have their own privacy practices and we are not responsible for their content or how they handle your information.

We may update this policy from time to time. The latest version will always be published on this page.

• Company name: ETHICEYES LIMITED
• Company number: 11517662
• Registered office: 1 Manor Court, 6 Barnes Wallis Road, Fareham, Hampshire, England, PO15 5TH

For any privacy or data request, please use the contact form.