Privacy Policy
Privacy Policy
This Privacy Policy explains how personal information may be collected, used, stored, and protected when you visit vanesch.uk, contact me through the website, or use the HR Operations Health Check.
Who I am
Data controller
This website is operated by Greg van Esch. For the purposes of applicable data protection law, Greg van Esch acts as the data controller for personal data collected through this website.
Information collected
What information may be collected
Depending on how you use the website, I may collect:
- Your name
- Your email address
- Your organisation name
- Details you include in a contact form enquiry
- Information you choose to provide when completing the HR Operations Health Check, such as company size, industry, role, country or region, and optional contact details
- Your responses to the HR Operations Health Check questions, together with the resulting score and related benchmark data
- Basic technical information needed for the website to function properly, maintain security, and support performance monitoring
How information is collected
Sources of personal data
Information may be collected when you:
- Submit an enquiry through the contact form
- Communicate directly in relation to potential services
- Complete the HR Operations Health Check
- Use the website in ways that generate technical or server-side information
Why information is used
Purposes of processing
Personal information may be used to:
- Respond to enquiries
- Communicate about potential advisory services
- Generate and display HR Operations Health Check results
- Analyse diagnostic trends and create aggregated, anonymised, or de-identified benchmarking insights
- Improve the website, services, and diagnostic experience
- Manage and administer the website
- Maintain website security and performance
- Comply with legal or regulatory obligations where applicable
Lawful bases
Why this processing is lawful
Depending on the context, personal data is processed on one or more of the following bases:
- To take steps at your request before entering into a business relationship
- For legitimate interests in running and improving the website, responding to enquiries, and understanding broad patterns in HR operational maturity
- To comply with legal obligations where relevant
- With consent, where consent is specifically required
HR Operations Health Check
How diagnostic data is handled
The HR Operations Health Check is designed as a practical self-assessment tool. Information submitted through the tool may be used to generate your result, understand common operational patterns, and improve the quality of the diagnostic over time.
Where benchmark or trend information is created from diagnostic submissions, it is intended to be used in aggregated or anonymised form so that individual organisations are not identified.
If you choose to provide contact details in connection with the diagnostic, those details may be used to respond to your request, discuss the result, or provide further interpretation of the diagnostic.
Technical and identifier data
Website security and analytics information
Like most websites, vanesch.uk may generate technical logs and other information needed for security, troubleshooting, and performance monitoring.
Where possible, the intention is to minimise the storage of directly identifying technical data. If identifiers are used for fraud prevention, rate limiting, or deduplication, they may be transformed, tokenised, hashed, truncated, or otherwise handled in a privacy-aware way rather than retained in raw form unless there is a specific operational need to do so.
Sharing information
Who information may be shared with
Personal data may be shared with service providers who support the operation of the website, website hosting, analytics, form handling, or diagnostic data processing, where necessary and subject to appropriate safeguards.
Information is not sold to third parties.
Retention
How long information is kept
Personal data is kept only for as long as reasonably necessary for the relevant purpose, including responding to enquiries, maintaining business records, operating and improving the diagnostic, and meeting legal or regulatory obligations where applicable.
Aggregated or anonymised benchmarking information may be retained for longer where it no longer identifies an individual.
International transfers
Where data may be processed
Depending on the service providers used to operate the website, personal data may be processed in countries outside the UK. Where that happens, reasonable steps will be taken to use appropriate safeguards where required by applicable law.
Your rights
Data protection rights
Depending on the applicable law and circumstances, you may have rights to request access, correction, erasure, restriction, objection, or portability in relation to your personal data.
Where processing is based on consent, you may also have the right to withdraw that consent.
You may also have the right to complain to a relevant supervisory authority.
Contact
Questions about privacy
If you have any questions about this Privacy Policy or how personal data is handled, you can contact me directly.
Email: privacy@vanesch.uk
You may also contact me using the website contact form.
Updates
Changes to this policy
This policy may be updated from time to time to reflect changes to the website, services, diagnostic features, or legal requirements.