Privacy & Cookies.

Who we are

Olliverr. is operated by Sam Olliver, a sole trader based in West Sussex, England.

Websites: https://olliverr.co.uk and https://olliverr.com

For the purposes of UK data protection law, Sam Olliver (trading as Olliverr.) is the data controller.

What data we collect

Operations Scorecard. When you take the Scorecard, we collect your name, business name, industry, and email address, along with your answers to the operational questions. We collect this so Sam can read, score, and respond to your submission.

Call bookings. If you book a call via Cal.eu, Cal.eu collects your name, email address, and the details you add to the booking form. We see that information when the booking lands.

Messages. If you use "Send me a message" on the Get in touch page, we collect your name, business name (if given), the phone number or email you give for the reply, and your message. We use them only to reply to you. To stop spam and abuse, we also keep the IP address and browser type the message was sent from, and Cloudflare Turnstile checks that a person, not a bot, sent it. The IP address and browser type are deleted after 90 days.

Technical data. Like most websites, some limited technical data is processed automatically when you visit. This may include IP address, browser type, operating system, timestamps, and pages visited. This data is not used to identify you personally.

How we use your Scorecard responses

Your individual answers and score are confidential. We use them so Sam can read, score, and respond to your submission, and to improve the Scorecard and our services. We will never publish, sell, or share your individual results in any form that identifies you or your business.

We do produce anonymised, aggregated insights from Scorecard responses across many businesses, for example the average score for a particular industry, or common patterns across all submissions. These aggregated insights may appear in reports, articles, talks, and other content. They never name a business or a person and never reveal an individual result. Once data has been aggregated and anonymised in this way it can no longer be traced back to you, so we may continue to use and retain it even after your individual record is deleted.

Email data collection

What data we collect: name (if provided) and email address.

Why we collect it: to deliver the Operations Scorecard read you requested and, if you tick the consent box, to send a short email follow-up and occasional related notes.

How long we keep it: 24 months from last interaction, unless you unsubscribe or request deletion sooner.

Who has access: Sam Olliver trading as Olliverr., and Brevo (our email platform), who process data on our behalf under their own privacy policy.

Your rights: you can access, correct, or delete your data at any time by contacting us using the contact details below.

We will never sell or share your data with third parties for marketing purposes.

How this data is collected

Personal data is collected directly from you when you take the Operations Scorecard, book a call or send a message. Technical data is collected automatically through website hosting, server logs, and infrastructure or security services.

Why we process this data

Personal data is processed to respond to your request, deliver the service you asked for, and keep you informed about the engagement. Technical data is processed to operate and maintain the website, ensure security, prevent misuse, and monitor basic performance.

The lawful basis for delivering the Operations Scorecard you requested, and for responding to it, is our legitimate interest in providing the service you asked for. The lawful basis for the email follow-up and any occasional notes is your consent, given explicitly by ticking the consent box on the Scorecard form. You can withdraw that consent at any time using the unsubscribe link in every email.

When you send a message through the Get in touch page, the lawful basis is our legitimate interest in replying to enquiries about our services. We keep the IP address and browser type it came from for 90 days because we have a legitimate interest in keeping the form and the site secure: blocking spam, repeat abuse and attacks. You can object to this by emailing us at the address below.

Cookies and tracking

Analytics is now off on this browser. We will remember this for a year.

We use analytics to see which pages people read and where they leave, so we can make the site more useful. We do not use it for advertising.

Google Analytics 4. This is a Google service we use to measure the site. It sets cookies whose names start with _ga, lasting up to two years, and records the pages you view, roughly where you are (country and city), your device and browser, and how you found us.

Umami. This is a visitor counter hosted in the EU. It sets no cookies and records only anonymous page counts.

We also set two cookies of our own:

• olv_vid: a random code that lets us see which pages one browser visits on this site over time. The cookie lasts two years. The record of pages, times, IP address and browser type is deleted after 90 days.
• olv_ref: set only when you arrive through one of our tracked links, such as a QR code on printed material. It remembers which link brought you, for 90 days.

Turning analytics off. One click switches off Google Analytics, Umami and both of our cookies on this browser: Turn off analytics on this browser. We remember your choice for a year with a small cookie called olv_no_analytics. You can switch analytics back on here at any time.

Signing in. If you sign in to the Scorecard or the client portal, WordPress sets session cookies so you stay signed in. The site cannot work without them, so they are not affected by the switch above.

If you sign up for the Scorecard, we also record how you interact with the questionnaire and your results, linked to your account. This includes the questions you answer, the time you spend on each area, the pages you view, and which parts of your results you ask us to explain or to help with. We use this to respond to you properly and to improve the tool. This information is held with the same confidentiality as your answers and is covered by the retention and deletion terms below.

Share links

Sam sometimes sends screenshots and short videos as links on olliverr.co.uk (addresses starting olliverr.co.uk/share/). When one is opened, we record the time, the type of device (phone, tablet or computer) and a scrambled code that tells repeat visits apart without storing your IP address. If the link was sent to you by email invite, we also record that you opened it. Comments and reactions you add are kept with the link. The file itself is stored in Sam's Google Drive. Visit records are deleted after 90 days, and no cookies are used.

Third-party services

These are the outside services involved in running the site:

• Hosting: 123-reg, our web host.
• Google Analytics: measuring how the site is used (see Cookies and tracking).
• Umami: anonymous page counts, cookie-free.
• Brevo: sends our emails, including your Scorecard read and sign-in links.
• Cal.eu: bookings, only when you book a call.
• Cloudflare Turnstile: the spam check on the message form. It runs when you open the message form and reads technical details from your browser, such as IP address and browser type, to tell people from bots. It does not set cookies on this site.
• Stripe: payments, only when you buy a paid report or engagement.
• SignWell: electronic signatures, only for engagement agreements.

Each of these providers processes data only as required to deliver their service and is subject to appropriate data-protection obligations.

Cloudflare handles the Turnstile check on our behalf as our processor. It also uses the same technical details, as a separate controller, to improve its bot detection; its Turnstile privacy notice explains this. Cloudflare, Inc. is based in the United States, so these details may be processed outside the UK. Cloudflare's data processing terms protect them with the UK International Data Transfer Addendum. Email us for a copy.

Data retention

Operations Scorecard submissions are retained for 24 months from your last interaction, then deleted. Mailing-list records are retained until you unsubscribe. Messages sent through the Get in touch page are deleted 24 months after they are sent; the IP address and browser type stored with them are deleted after 90 days. Server logs are retained for 30 days. Automatically collected technical data is retained only for as long as necessary for operational and security purposes.

Your rights

Under UK data protection law, you have the right to access, correct, or request deletion of your personal data. You can also object to or restrict certain processing, and request your data in a portable format. Email us at the address below and we will respond within 30 days.

Complaints

If you have concerns about how we handle your personal data, you have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK data-protection regulator.

Website: https://www.ico.org.uk

You can also raise concerns with us directly using the contact details below, and we will do our best to resolve them.

Contact details

If you have questions about this privacy policy or how data is handled, you can contact Sam Olliver (trading as Olliverr.) using the email address shown below.

Updates to this policy

This privacy policy may be updated from time to time. The latest version will always be published on this page.