Privacy policy.

1. Who we are

Intervene Limited is an independent advisory practice based in the United Kingdom, registered in England and Wales under company number 17317647, with registered office at 71-75 Shelton Street, London WC2H 9JQ. For the purposes of UK GDPR, Intervene Limited is the data controller for any personal data submitted via this site or in the course of a confidential enquiry.

2. What we collect

Through the contact form, we collect:

• Name
• Organisation
• Email address
• Role (optional)
• The free-text description of the situation prompting the enquiry

With your consent, this site uses Google Analytics (GA4) to understand how pages are used. Analytics runs only after you accept via the cookie notice. Until then, and if you decline, no analytics cookies are set and no analytics data is collected. When enabled, Google Analytics records usage data such as pages viewed, approximate location derived from a truncated IP address, and device and browser type. We use no advertising trackers and do not profile visitors for marketing. Beyond Google Analytics and the Google Fonts CDN, which serves typeface files, this site uses no third-party scripts. You can change your choice at any time via "Cookies" in the footer.

Two things are stored in your own browser regardless of that choice, because the site cannot do what you have asked without them. Your accept or decline is stored so the notice does not ask again on every page, and if you use the Snapshot your answers are held in the tab so your progress survives a refresh. Neither is used to track you. Your accept or decline is never sent anywhere. Your Snapshot answers stay in the tab unless you choose to submit them to the Intervention Readiness Index, described in section 5, and closing the tab discards them.

If you reached the Snapshot on a referral link, the code from that link is not stored on your device at all. It is held in the page while the page is open and goes when you close or reload it. It says who sent you and nothing about you. See section 5.

3. How we use it

Personal data is used solely to respond to the enquiry and to determine whether an engagement is appropriate. It is not used for marketing, not shared with third parties, and not retained beyond what is necessary to handle the enquiry or to comply with the engagement-related record-keeping obligations of an active or recently concluded contract.

4. Third-party processors

The contact form is transmitted via Formspree (Formspree, Inc.), which relays submissions to us. Optional Intervention Readiness Index contributions and referral completion notes, both described in section 5, are relayed the same way. Formspree is established in the United States, so submitting any of these transfers what was entered to the United States. Formspree's processing is governed by its own data processing terms. No other third-party processor receives form submissions.

Each of these is sent from your own browser, so the request exposes your IP address and may include information about your browser, and the receiving service is able to observe the request time. That is how web requests work generally and is not particular to us. These details are not explicitly included in the application payload, and we do not use them to identify you. What Formspree retains or forwards is governed by its own terms, which we do not restate here.

The site itself is static and is hosted on GitHub Pages (GitHub, Inc.). Serving a page involves GitHub receiving your request, including your IP address, in the ordinary course of delivering the site. We do not have access to those server logs and we do not use them.

Where you consent to analytics, Google Analytics is provided by Google Ireland Limited (with Google LLC in the United States) and processes site-usage data on our behalf under Google's data processing terms.

5. Intervention Readiness Snapshot

The Intervention Readiness Snapshot asks ten multiple-choice questions about a single system. It is a self-reported instrument. It does not assess your organisation, and it does not test anything you enter against evidence.

Completing the Snapshot. Your answers are held in your own browser tab while you work, so your progress survives a refresh. They do not produce the result you are shown. The Snapshot is withdrawn from use, and the result displayed is a fixed worked example, the same for every visitor, rather than a reading of what you entered. No name, email address, organisation, role, sector or company size is requested, and there is no free-text field anywhere in the questionnaire. Your answers reach us only if you choose to contribute them to the Intervention Readiness Index, described below. Where you arrived on a referral link, a note that a Snapshot was completed is also sent, carrying the link code and none of your answers, as described below. Closing the tab discards your answers.

If you ask us to contact you or to send you your Snapshot. This route is not currently available. The form that offered it is no longer part of the page, so no name, email address, organisation or role can be collected through it. While the form was available it asked for a name and work email address, an organisation and role if the visitor chose to give them, and a short summary of that visitor's own result. If you previously submitted details through this form, they were used only to send what you asked for and to reply, they are retained under the rule below, and the rights in section 6 apply to them. Nobody is added to a mailing list, because we do not operate one. The contact form is unaffected and remains the way to reach us.

If you contribute to the Intervention Readiness Index. That is a separate, optional action with its own control. It sends your ten answers, the question-set and copy versions, and a fixed routing address that is identical on every contribution. It includes no name, email address, organisation or role, and no free text. Read it with the limits described under "What we cannot yet claim" below. We use these to understand how organisations answer these questions and, in time, to publish aggregate findings. We will not publish any figure drawn from a group small enough to identify a respondent.

If you arrived on a referral link. Someone may have sent you the Snapshot on a link carrying a short code that identifies the link, not you. We remove the code from the address bar when you land and hold it in the page while the page is open, writing nothing to your device. When a Snapshot is completed on such a link, your browser sends us a note containing four application payload fields: a subject line carrying a fixed tag and the link code, a fixed routing address identical on every note, the link code itself, and the question-set and copy versions in use. It carries none of your answers, and no name, email address, organisation or role. The code is also attached to any details entered through the follow-up form described above, where that form was available and used. The person who sent your link is not told who received it or whether any particular person did. Attribution and identification are separate events. The request metadata described in section 4 applies to this note as it does to any other submission.

What we cannot yet claim. Everything described above is relayed by Formspree to a single mailbox. An Index contribution therefore arrives alongside contact enquiries and alongside any note that a Snapshot was completed on a referral link, and although the contribution carries no identifying field in its payload, we could in principle correlate two messages sent close together in time. That possibility, together with the request metadata described in section 4, is why we do not describe these submissions as anonymous.

Retention. Snapshot enquiries are handled as ordinary enquiries and deleted twelve months from the close of correspondence, unless an active engagement requires otherwise. Index contributions carry no identifier and are retained for trend analysis. A note that a Snapshot was completed on a referral link carries a link code and none of the visitor's answers, and is deleted twelve months after the arrangement with the person who sent that link ends.

Lawful basis. Where you asked us to contact you or to send you your result while that route was available, we rely on Article 6(1)(f), legitimate interests. The interests are yours in receiving the thing you asked for, and ours in answering a professional enquiry and judging whether an engagement is appropriate. We do not rely on consent here, because we could not honour a withdrawal without failing to send you what you requested. We do not rely on contract, because any engagement would be with your organisation rather than with you personally. You can object to this processing at any time and we will stop.

Recording which link brought a visitor also relies on Article 6(1)(f). The interest is ours: knowing whether the people who share the Snapshot are reaching anyone at all. It is weighed against a very limited effect on you, because the code describes the sender and not you, is discarded when you close the tab, and is never used to identify you or to follow you anywhere else. You can object to it at any time.

Contributing to the Intervention Readiness Index is different. That relies on your consent, given by ticking the box on that control, and you can complete the Snapshot and see the worked example without contributing.

6. Your rights

Under UK GDPR you have the right to access, correct, or request deletion of personal data we hold about you. To exercise these rights, use the contact form. We respond to such requests within one calendar month.

7. Governing law

This policy is governed by UK GDPR and the Data Protection Act 2018. The supervisory authority for England and Wales is the Information Commissioner's Office (ico.org.uk).