Privacy notice

This notice explains what personal data this website collects, why, who handles it for us and what you can ask us to do with it. In short: reading the site needs no account and sets no cookies, and we only hold your email address if you give it to us.

Who is responsible for your data

This website is published by AI Metric Ltd, a company registered in England and Wales with company number 16448110 and a registered office in Liverpool, England. AI Metric Ltd is the controller of the personal data described in this notice. Contact us about anything in it at hello@thebuildingsafetyact.com.

What we collect and why

The Gateway Brief newsletter

If you subscribe to The Gateway Brief, the form sends your email address to Buttondown, the service that sends the newsletter for us. We collect your address only when you subscribe, and we use it only to send you the newsletter. Every email has an unsubscribe link, and unsubscribing takes you off the list. The lawful basis is your consent, which you can withdraw at any time by unsubscribing or by emailing us.

Analytics

We use Plausible Analytics to count visits and see which pages are read. Plausible uses no cookies and collects no personal data: it does not store IP addresses and does not follow you across other websites. We see only totals, such as page views, referring sites, browsers, device types and countries. We use it because we have a legitimate interest in knowing which guidance is useful.

Emails you send us

If you email hello@thebuildingsafetyact.com with a correction, a tip or a question, we use your email address and your message to reply and to act on what you sent. Email for this domain is handled by Microsoft 365. The lawful basis is our legitimate interest in answering you and keeping the site accurate.

Cookies and local storage

This site sets no cookies, and neither does Plausible. The free tools (the RAMS builder, the risk assessment builder and the Gateway 2 and Gateway 3 checklists) save your work in your own browser's local storage so it is still there when you come back. That data stays on your device: it is never sent to us and we cannot see it. Clearing this site's data in your browser deletes it.

Hosting

The site is hosted by Hetzner Online GmbH on a server in Finland, in the EU. Sending you a page means the server handles your IP address while it answers the request, as every website does. We do not keep web server access logs for this site.

Who handles data for us

• Buttondown sends the newsletter and stores subscribers' email addresses. Buttondown is based in the United States, so subscriber addresses are stored there.
• Plausible Insights OÜ provides the analytics, hosted in the EU, with no cookies and no personal data.
• Hetzner Online GmbH hosts the website on a server in the EU.
• Microsoft handles email sent to our thebuildingsafetyact.com addresses.

We do not sell personal data, share it with anyone else or use it for advertising.

How long we keep it

• Newsletter: until you unsubscribe, or until you ask us to delete your address.
• Emails: only as long as we need them to deal with your message.
• Analytics: Plausible keeps only totals, which contain no personal data.
• Local storage: on your own device, until you clear it.

Your rights

Under UK data protection law you can ask us for a copy of the personal data we hold about you, and ask us to correct it, delete it or stop using it. Where we rely on your consent you can withdraw it at any time, and where we rely on our legitimate interests you can object. Email hello@thebuildingsafetyact.com and we will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put it right first.

Changes to this notice

If what we collect or the services we use change, we will update this page and the date at the top.