This policy explains what personal information this website collects, why, how it is used, and the rights available to you. It applies to theresolveframework.org.
Who we are
This website is operated by Beyond Amazing Ltd ("we", "us"), the data controller for the personal information described here.
- Company: Beyond Amazing Ltd, [registered company number], registered in England and Wales.
- Registered address: [registered address].
- Contact for privacy matters: [privacy contact email].
- ICO registration: [ICO registration number].
What we collect, and why
We only collect what we need, and we tell you what we are doing at the point we ask.
When you use one of the assessment tools (for example the Diagnostic) and ask us to send your results, or when you download a gated document: we collect your first name and email address, and we record your answers and the result they produce. We use these to generate and send your report or document, and, only if you have agreed, to send occasional related commentary by email.
When you contact us or make an enquiry: we collect the details you provide (such as your name, email, organisation, and your message) so that we can respond.
When you simply read the site: we use privacy-friendly, [cookieless] website analytics to understand how the site is used in aggregate. This does not identify you personally. We do not use advertising cookies or tracking that builds a profile of you.
We do not sell your personal information, and we do not use it for advertising.
Our lawful bases
Under UK GDPR, we rely on:
- Your consent — for sending you ongoing commentary or marketing emails. You can withdraw it at any time, and every email includes an unsubscribe link.
- Performing a service you have asked for — to deliver the specific report, document, or response you requested.
- Our legitimate interests — to operate and improve the site, to understand aggregate usage, and to keep the site secure. We balance these against your rights.
Who we share it with
We use a small number of trusted service providers ("processors") who handle data on our behalf, under contract, only for the purposes above:
- Cloudflare — website hosting, content delivery, security, bot protection (Turnstile), and privacy-friendly analytics.
- Supabase — secure database storage for the information described above.
- Kit (formerly ConvertKit) — email delivery and managing email subscriptions.
We may share information where we are legally required to do so. We do not otherwise share or sell your data.
The RESOLVE ecosystem also includes a sister site, resolvetolead.com, operated by the same company and using the same providers; where you engage with both, your contact record may be unified across them so that we recognise you rather than treat you as two separate people.
International transfers
Some of our providers process data outside the UK. Where that happens, we rely on appropriate safeguards recognised under UK data protection law (such as adequacy regulations or standard contractual clauses / the UK International Data Transfer Agreement) to protect your information. [Confirm safeguards per provider.]
How long we keep it
We keep personal information only as long as we need it for the purposes above:
- Contact and subscription details: until you unsubscribe or ask us to remove them, and for a reasonable period afterwards to honour your request. [Confirm period.]
- Assessment answers and results: [confirm retention / anonymisation period].
- Enquiries: for as long as needed to handle your enquiry and any follow-up. [Confirm period.]
Your rights
You have the right to: be informed about how we use your data; access a copy of it; have inaccurate data corrected; have your data erased; restrict or object to certain processing; data portability; and to withdraw consent at any time. To exercise any of these, contact us at [privacy contact email].
You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk. We would, of course, prefer the chance to put things right first.
Cookies
This site keeps cookies to a minimum. [It does not use advertising or cross-site tracking cookies. Any essential or analytics cookies in use are listed here — confirm and complete once the analytics provider is finalised in the build.]
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.
Contact
For any question about this policy or your personal information, contact us at [privacy contact email].