Data Collection Policy

This policy sets out the rules we hold ourselves to when we collect information about the people who use this site. The Privacy Policy describes what we collect; this one describes how we are supposed to behave about it.

Collect the least that answers the question

We collect what a specific question needs and nothing on the grounds that it might be useful later. This site measures whether a text message led to a sale. That question needs a random session identifier, the campaign labels on the link, the actions taken on the page, and the resulting order. It does not need your IP address or your device fingerprint, so we do not store them.

Keep identity out of measurement where we can

Browsing activity is recorded against a random session identifier rather than against a person. That identifier is not derived from anything about you and cannot be reversed into a name.

Where measurement records do connect to an order, and therefore to you, that connection exists because the order does, not because we set out to build a profile.

Say what we are doing

Anything we collect is described in the Privacy Policy and summarised in the Notice at Collection linked at the foot of this page. If we start collecting something new, those documents change before the collection starts, not after.

Do not sell it

We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not trade, rent or licence customer lists.

Restrict who can reach it

Access to the records described in the Privacy Policy is limited to the people who need it to do their job, and the administrative tools that display them are password-protected and not publicly indexed.

Hold our suppliers to the same line

The companies that process this data on our behalf are bound by contract to use it only to provide their service to us, and not for their own purposes.

Delete it when it stops being useful

Measurement data is deleted or aggregated once the campaign it measures is over. Order records are kept only as long as the law requires.

Answer requests properly

When someone asks what we hold, or asks us to delete it, we answer within the timeframes the applicable law sets, and we do not make the process harder than the law allows.

If something goes wrong

If personal information is exposed, we investigate, fix the cause, and notify affected people and regulators where the law requires it.