Privacy policy
Last updated: 17 October 2026
What we collect
When you use the contact form we collect your name, email address, optional phone number and your message. When you request a risk register workbook we collect your name, email address and, if you give them, your institution, role and institution type, and we record how many times the download link is used.
Why we use it
To reply to you, send the workbook you requested, and, for workbook requests, occasionally follow up about related software or training. We do not sell your information. Download links expire after 7 days.
How it is protected
The site uses encrypted HTTPS connections. Staff passwords are stored as one-way hashes, and uploaded files are kept outside the public website.
Website statistics
We count page visits by page address and date only, with no cookie, IP address or personal identifier. We also use Google Analytics to understand how the site is used.
Your choices
You can ask for a copy of your information, or ask us to correct or delete it, through our contact page.