1. Introduction

This Privacy Policy outlines how Behind Numbers collects, processes, and protects the personal data of individuals who visit this website ([Your Website URL], the "Site") or engage with our business analytics case studies, technical demonstrations, and related consultancy services. We are committed to processing your data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant international data privacy frameworks.

2. The Data We Collect

We collect minimal personal information necessary to deliver and improve our digital experience. Voluntarily Provided Information: Name, email address, company affiliation, and project inquiry details submitted via our contact forms or direct email correspondence. Automatically Collected Telemetry & Analytics: Technical telemetry including IP address (anonymized/pseudonymized where applicable), browser type and version, operating system, device screen resolution, referring URLs, access timestamps, and page interaction metrics (e.g., scroll depth, case study view duration). Interactive Sandbox & Demo Data: Data inputs entered into client-side analytical demos or visualization widgets. Unless explicitly stated, client-side demonstrations process mock datasets locally in your browser memory and do not persist to external servers.

3. Legal Bases for Processing

In compliance with Article 6 of the UK GDPR, we process personal data under the following legal bases: Legitimate Interests: To analyze user interaction patterns, ensure web application security, prevent fraudulent activity, and optimize site layout and computational workflows. Consent: When you opt into analytics cookies via our banner or provide explicit contact details for collaboration. Contractual Necessity: To take necessary steps at your request prior to entering into a prospective analytics consulting engagement.

4. How We Use Your Information

To maintain infrastructure reliability, troubleshoot layout errors, and secure data endpoints. To aggregate analytics metrics to evaluate public interest in specific data science/business analytics methodologies. To respond directly to business inquiries, recruitment opportunities, or technical collaboration requests. Strict Anti-Monetization Guarantee: We never sell, lease, rent, or trade your personal or browsing data to third-party brokers or advertisers.

5. Third-Party Service Providers & Data Transfers

We use vetted third-party vendors for infrastructure and performance monitoring: Hosting & CDN Platforms: [e.g., Vercel, Netlify, Cloudflare, AWS] for static asset delivery and edge routing. Web Analytics: [e.g., Google Analytics 4, Plausible, Umami] configured with IP anonymization enabled. Code & Asset Repositories: [e.g., GitHub Pages, jsDelivr] for script and dependency hosting. Where data is processed outside the UK/EEA, transfers are secured via UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses (SCCs).

6. Data Retention

Communication Logs: Retained for up to 24 months after the last interaction to maintain project context, after which records are purged. Server Telemetry & Logs: Automatically overwritten or permanently deleted after 90 days.

7. Your Statutory Rights (GDPR)

Under UK and EU data protection regulations, you hold the following rights: Right of Access: Request copies of your personal data held by us. Right to Rectification: Request correction of inaccurate or incomplete information. Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where retention is no longer justified. Right to Restriction / Objection: Object to or restrict specific forms of data processing. Right to Data Portability: Request structured, machine-readable copies of data you provided. To exercise any of these rights, submit your request to [your-email@domain.com]. We will respond within 30 calendar days.

8. Supervisory Authority

If you are located in the UK and believe your data has been handled improperly, you have the right to lodge a formal complaint with the Information Commissioner's Office (ICO) at ico.org.uk.