Privacy notice
Last updated:
This notice explains what personal data Let's Negotiate collects, why we collect it, and what you can ask us to do with it.
Who we are
To be completed: the legal entity acting as data controller, its registered address, and an email address for privacy enquiries.
What we collect
When you register your interest in the pilot we collect your name, work email address, company, and anything you choose to write in the message field. We ask you to confirm that request by email, and we record the moment you confirm it as the record of your consent. We do not log your IP address or your browser's user agent.
If you hold an account, we also store the data needed to run it: your email address, whether it has been verified, and a hash of your password. Session and security cookies are strictly necessary and are described below.
How we measure use of the site
We count how the site is used — which pages are visited, which buttons are clicked, how far people get through the demo and the interest form — with our own analytics, run on our own servers. Nothing is shared with an analytics company or any other third party.
It stores nothing on your device: no cookie and no local storage. To count a visitor once per day, we combine your IP address and browser details with a random value that changes every day, and keep only the scrambled result. The daily value is deleted when the day ends, after which no one can link that day's visits to you or to another day's. We never store your IP address, your browser's user agent, or anything you type, and we note whether a visitor was signed in but never which account. With each visit we also record the website that linked you here (its domain only), any campaign tag in the link, and a coarse device type and browser family (such as "mobile" / "Safari"), never the full user agent. Times are rounded to the hour, and the records are deleted after 13 months.
Why we collect it
To be completed: the purpose behind each category above, and the lawful basis under Article 6 that each purpose relies on.
Who we share it with
To be completed: named processors (hosting, email delivery) and any transfers outside the UK or EEA, with the safeguard relied on.
How long we keep it
If you register your interest and never confirm it, we delete the request seven days after the confirmation link expires.
To be completed: the retention period for confirmed interest registrations and for account data.
Cookies
To be completed. We set only strictly necessary cookies: a session cookie and short-lived cookies that carry a message across a redirect. Our analytics sets no cookie, and there is no advertising or third-party tracking on this site.
Your rights
To be completed: the right to access, correct, erase, restrict, port, and object, how to exercise each with us, and the right to complain to the Information Commissioner's Office.
Contact
To be completed: the address to write to about anything on this page.