Privacy notice
Controlled document: ACC-DOC-PRIVACY (decision ACC-PRIVACY-001)
Candidate version: 0.5
Live-service status: Netlify serves the static site at fndguide.co.uk;
Fasthosts retains domain registration, DNS and email. The live domain passed
its HTTPS, route, redirect, security-header and mail-DNS checks on 5 August
2026. Netlify Web Analytics, Real User Monitoring, Log Drains and Google
Analytics remain disabled.
The short version
FND Guide is designed to know as little about you as possible. You do not need an account and the site does not create a health record or marketing profile. The current worksheets work only in your browser and do not send what you type to the project. Like every website, the live host processes basic request information to deliver and protect the site. Netlify's optional audience analytics and Google Analytics are disabled for this release. If optional analytics is proposed later, it will be assessed, explained and kept off until the required visitor choice and live checks are in place.
Who is responsible
- Controller: Robert Campbell, operating FND Guide as a private individual in England.
- Contact: privacy@fndguide.co.uk
- Representative / data-protection officer: none — not applicable at this scale.
What we process, and why
| Purpose | Data | Collection point | Lawful basis | Recipients | Retention |
|---|---|---|---|---|---|
| Serving pages securely | Network and HTTP request information needed to return and protect a page, which may include an IP address, requested URL, referrer, user agent, time and response details | Automatic, when a page or asset is requested | Legitimate interests (delivering and protecting the site) | Netlify, Inc. and its disclosed subprocessors | The owner-visible operational Observability window on the current plan is one day. Netlify may retain limited provider-side data for service, security and legal purposes under its privacy notice and data-processing terms |
| Optional site analytics | None in this release. Netlify Web Analytics, Real User Monitoring and Google Analytics are disabled, and no analytics measurement ID is configured | Not active | Not applicable while disabled | None for project audience measurement | Not applicable while disabled |
| Corrections, problem reports and complaints | Report category, description and a reply address only if you provide one | corrections@fndguide.co.uk, forwarding to the dedicated project mailbox | Legitimate interests (keeping the guide accurate and responding to concerns) | The project owner and Fasthosts Mail Basic | Delete within 12 months after the report is closed, unless it must be kept longer for a live dispute or legal reason |
| Security reports | Technical report and a reply address if supplied | security@fndguide.co.uk, forwarding to the dedicated project mailbox | Legitimate interests (protecting the service) | The project owner and Fasthosts Mail Basic | Delete within 12 months after the issue is closed, unless it must be kept longer for a live dispute or legal reason |
| Separate uptime monitoring | Public route, release and TLS response metadata from the project's scheduled server-side checks; no individual visitor data | Repository-owned GitHub Actions workflow when enabled | Legitimate interests (availability and integrity of the public service) | GitHub | Not active at the date of this notice; its repository retention and first manual run must be recorded before reliance |
Explicitly checked and not used: Netlify Web Analytics, Real User Monitoring, Log Drains, Google Analytics, advertising or marketing tools, profiling, cross-site tracking, social-media embeds, accounts, server-side storage of anything you type into browser tools, and participant-research data (which is governed separately and never flows through the public site).
What you should know
- Nothing here is required. You can read everything without providing any personal data. If you report a correction, a reply address is optional — without one we simply cannot reply.
- Please do not send personal medical details through the correction or contact routes; reports should be about the content, not about your health. If medical detail arrives unexpectedly, it will be removed from the active mailbox as soon as it is recognised. Any provider-backup limits must be disclosed after the mailbox terms are checked.
- Overseas processing: Netlify describes international processing and its transfer safeguards in its privacy notice, data-processing agreement and subprocessor register. Fasthosts remains the email supplier. These supplier documents do not give the project editorial access to provider-internal security records.
- Your rights: UK GDPR rights (access, correction, erasure, objection and others) apply to the small amount of data above; use the contact route. You can also complain to the Information Commissioner's Office.
- Automated decisions or profiling: none.
- Analytics and your choice: Google Analytics remains disabled and no
consent cookie is needed for this release. If optional analytics is later
activated, the site must first present equally prominent
Accept analytics and Reject analytics controls. No Google script or
measurement request is created before acceptance. A Cookie settings control
lets you revisit the choice. The consent-choice cookie stores only
analyticsoressentialfor up to 180 days. - Any future Google Analytics activation: would require a separately recorded property, updated supplier and transfer facts, advertising features kept off, an updated inventory, and live accept, reject and withdrawal tests.
- Changes: material changes to this notice are dated and recorded in the public change log. If a purpose-specific address fails, use hello@fndguide.co.uk with the purpose in the subject line.
Layered notices
| Collection point | Short wording shown there | Optional fields | Full notice |
|---|---|---|---|
| Corrections page | "Optional reply address; please include no personal medical details." | Reply address | Links here |
| Security page | "Please send technical details only; do not include personal medical information." | Reply address | Links here |
Review record
- Production data-flow evidence: exact Netlify production deployment, public-domain network checks and preserved Fasthosts mail DNS recorded on 5 August 2026.
- Data-protection advice: not obtained.
- Plain-language or user advice: not obtained.
- Owner exact-version decision: approved through the controlled successor transaction for version 0.5.
- Next review trigger: any host, supplier or feature change that touches the table above.