Privacy notice

Who we are

Evolv Up Ltd (company number 17415350), Northampton, NN3 3LL, is responsible for your information. In data protection terms, we are the controller.

If you have any questions about this notice or your information, email Anneka Spence, Founder, at annekaspence@evolvup.co.uk.

What we collect

• Your details: first name, last name if you give it, work email, organisation name and your role.
• Your choices: that you've read this notice and whether you'd like marketing emails, with the exact wording you agreed to and when.
• Your answers: your answers about your organisation's people practices, the issues you choose, how soon you want to act and, if you give them, your organisation's size and sector.
• How you use the diagnostic: the steps you reach, whether you open or download your report or click the booking link, and where you came from, such as a campaign link or referring website.
• A scrambled version of your internet address: used only to limit repeated submissions from the same connection. We don't store your internet address itself.

The diagnostic is about your organisation, not individual employees. Please don't include employee names, individual cases or sensitive personal information in any answer.

Information stored in your browser

We keep a random code in your browser so you can carry on where you left off and return to your report. It's needed for the diagnostic to work. We don't use advertising or tracking cookies.

How we use your information, and why

• To create your scores and report and save your progress. Our lawful basis is legitimate interests: providing the diagnostic you asked for.
• To contact you about your report. This means a small number of emails about your results and an invitation to book a review call if you'd find it useful. There's no obligation, and you can ask us to stop at any time. Our lawful basis is legitimate interests.
• To send occasional emails with insights and resources. Only if you tick the box to say yes. You can withdraw your consent at any time using the unsubscribe link in any email or by emailing us. Our lawful basis is consent.
• To decide who to follow up with first. Your role, organisation size, how soon you want to act and your scores give each enquiry a simple priority rating. It helps Anneka plan follow-up. It doesn't change your report and has no legal or similar effect on you. Our lawful basis is legitimate interests, and you can object at any time.
• To keep the service secure and improve it. For example, preventing misuse and seeing where people stop. Our lawful basis is legitimate interests.

How your report is produced

Your scores and recommendations come from fixed scoring rules and content written by Evolv Up. Your answers are not sent to a generative AI model.

Your report reflects one person's answers and is designed to support planning. It isn't an independently verified assessment of your organisation, and it isn't individually reviewed unless you ask to discuss it.

Who can see your information

Only Anneka Spence at Evolv Up can see individual answers and contact details, through a password-protected admin area. We don't sell your information, publish identifiable answers or share your results with other organisations unless you ask us to.

Your report has its own private link. Anyone with that link can open it, so share it with care. Report links work for 90 days and resume links for 30 days.

The providers that run this service

• Lovable provides the website platform and hosting. Your answers and contact details are stored in a database located in the European Union. Pages are delivered through a global network, so requests may pass through servers outside the UK.
• Mailchimp (Intuit Inc., United States) manages our contact list and sends emails. It receives your name, email, organisation, role, your marketing choice, how soon you want to act, your first priority and suggested steps, the name of your starter tool, your priority rating and your report link. This information is transferred to the United States under the UK Extension to the EU-US Data Privacy Framework.
• Calendly handles review call bookings if you choose to book one, under its own privacy notice.

Each provider processes your information on our instructions and under data protection terms.

How long we keep it

• Unfinished diagnostics: your answers are deleted 6 months after you start, if you haven't finished the core questions.
• Everything else: completed diagnostics, reports, contact details and consent records are deleted 2 years after you start.
• Mailchimp: if you didn't opt in to marketing emails, you're removed at the same time. If you did, you stay on our list until you unsubscribe or ask us to remove you.

You can ask us to delete your information sooner at any time.

Your rights

You can ask to see the information we hold about you, correct it, delete it, limit how we use it, or receive a copy to take elsewhere. You can object to how we use it, including the priority rating, and withdraw consent to marketing at any time.

Email annekaspence@evolvup.co.uk. We'll reply within one month.

Complaints

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.