Privacy policy.

1. Who we are

Intervene Limited is an independent advisory practice based in the United Kingdom, registered in England and Wales under company number 17317647, with registered office at 71-75 Shelton Street, London WC2H 9JQ. For the purposes of UK GDPR, Intervene Limited is the data controller for any personal data submitted via this site or in the course of a confidential enquiry.

2. What we collect

Through the contact form, we collect:

• Name
• Organisation
• Email address
• Role (optional)
• The free-text description of the situation prompting the enquiry

With your consent, this site uses Google Analytics (GA4) to understand how pages are used. Analytics runs only after you accept via the cookie notice. Until then, and if you decline, no analytics cookies are set and no analytics data is collected. When enabled, Google Analytics records usage data such as pages viewed, approximate location derived from a truncated IP address, and device and browser type. We use no advertising trackers and do not profile visitors for marketing. Beyond Google Analytics and the Google Fonts CDN, which serves typeface files, this site uses no third-party scripts. You can change your choice at any time via "Cookies" in the footer.

Two things are stored in your own browser regardless of that choice, because the site cannot do what you have asked without them. Your accept or decline is stored so the notice does not ask again on every page, and if you use the Snapshot your answers are held in the tab so the result survives a refresh. Neither is used to track you, neither is sent anywhere, and closing the tab discards the Snapshot answers.

3. How we use it

Personal data is used solely to respond to the enquiry and to determine whether an engagement is appropriate. It is not used for marketing, not shared with third parties, and not retained beyond what is necessary to handle the enquiry or to comply with the engagement-related record-keeping obligations of an active or recently concluded contract.

4. Third-party processors

The contact form and the Snapshot follow-up form are transmitted via Formspree (Formspree, Inc.), which acts solely as the transmission mechanism. Formspree is established in the United States, so submitting either form transfers what you entered to the United States. Formspree's processing is governed by its own data processing terms. No other third-party processor receives form submissions.

The site itself is static and is hosted on GitHub Pages (GitHub, Inc.). Serving a page involves GitHub receiving your request, including your IP address, in the ordinary course of delivering the site. We do not have access to those server logs and we do not use them.

Where you consent to analytics, Google Analytics is provided by Google Ireland Limited (with Google LLC in the United States) and processes site-usage data on our behalf under Google's data processing terms.

5. Intervention Readiness Snapshot

The Intervention Readiness Snapshot asks ten multiple-choice questions about a single system. It is a self-reported instrument. It does not assess your organisation, and it does not test anything you enter against evidence.

Completing the Snapshot. Your answers are held in your own browser tab while you work and are used to display your result. No name, email address, organisation, role, sector or company size is requested, and there is no free-text field anywhere in the questionnaire. Nothing is sent to us unless you choose one of the two actions below. Closing the tab discards your answers.

If you ask us to contact you or to send you your Snapshot. We collect your name and work email address, and your organisation and role if you choose to give them. We also receive a short summary of your own result, so that a reply can be about something specific. We use this to send what you asked for and to reply. We do not add you to a mailing list, because we do not operate one.

If you contribute to the Intervention Readiness Index. That is a separate, optional action with its own control. It sends your ten answers and nothing else: no name, no email address, no organisation and no role. We use these to understand how organisations answer these questions and, in time, to publish aggregate findings. We will not publish any figure drawn from a group small enough to identify a respondent.

What we cannot yet claim. Both actions above are relayed by Formspree to a single mailbox. An Index contribution therefore arrives alongside contact enquiries, and although it carries no identifying field, we could in principle correlate two messages sent close together in time. We are honest about this rather than describing the contribution as anonymous. A future version will separate the two paths properly, and this notice will be updated when it does.

Retention. Snapshot enquiries are handled as ordinary enquiries and deleted twelve months from the close of correspondence, unless an active engagement requires otherwise. Index contributions carry no identifier and are retained for trend analysis.

Lawful basis. Where you ask us to contact you or to send you your result, we rely on Article 6(1)(f), legitimate interests. The interests are yours in receiving the thing you asked for, and ours in answering a professional enquiry and judging whether an engagement is appropriate. We do not rely on consent here, because we could not honour a withdrawal without failing to send you what you requested. We do not rely on contract, because any engagement would be with your organisation rather than with you personally. You can object to this processing at any time and we will stop.

Contributing to the Intervention Readiness Index is different. That relies on your consent, given by ticking the box on that control, and you can complete the Snapshot and read your result without doing either.

6. Your rights

Under UK GDPR you have the right to access, correct, or request deletion of personal data we hold about you. To exercise these rights, use the contact form. We respond to such requests within one calendar month.

7. Governing law

This policy is governed by UK GDPR and the Data Protection Act 2018. The supervisory authority for England and Wales is the Information Commissioner's Office (ico.org.uk).