Privacy notice

Your information, kept within a controlled written process.

Effective date: 4 September 2026  ·  Version: 1.7

1. Who controls personal information

Haven Measure Limited is the controller for personal information it decides to collect and use for its own business purposes. It is registered in England and Wales under company number 16382014. Its registered office is 82 Oswald Road, Scunthorpe, DN15 7PA.

Privacy enquiries or rights requests may be sent in writing to that registered office or to havenmeasurelimited@gmail.com. Please write “Data protection request” and do not include more personal information than is necessary.

2. What remains local or is not used

The public website does not intentionally:

• transmit or store Fit Checker answers;
• receive the text entered into the written-enquiry composer unless you choose to send the resulting email;
• accept or store public star ratings or review comments at launch;
• use analytics, tracking pixels, advertising cookies or behavioural profiling;
• request telephone numbers or use telephone marketing.

The organisations providing website hosting and security may process limited technical logs needed to deliver and protect the service. Haven Measure does not use those logs for advertising profiles and does not operate application analytics on this website.

The written-enquiry composer holds the text you type only in the open browser page. Selecting “Prepare written email” opens a draft in your own email application. The website does not receive or store that text; Haven Measure receives it only if you choose to send the email.

The accepted-offer and paid-project pages use the current tab's session storage to retain opaque offer and payment references. If the optional card route is used, this also allows the browser to return from Stripe without exposing the accepted-offer token in the visible return URL. Those references are not analytics or advertising identifiers and normally disappear when the browser tab or session is closed.

3. Information received through enquiries, payment and engagement

Depending on the route you choose, Haven Measure may receive:

• your name, professional role, employer or business and public profile details;
• the content and date of your written enquiry and Haven Measure’s response;
• non-confidential service-fit categories that you deliberately copy from the checker, including the proposed Contracting Agency route, broad status-assessment stage, payment-term and invoice or self-billing position, external-assessment cost position, working pattern, schedule and travel category;
• high-level opportunity details you deliberately enter into the email composer, such as Contracting Agency position and name, end client and sector, location, anticipated start and duration, working days and hours, responsibilities and required outputs;
• conflict-check details about relevant organisations and project parties;
• business contact, engagement, billing and service records if you become a client;
• accepted-offer details, the service selected, engagement reference, terms version, authorised buyer name and role, business-purpose confirmation, terms-acceptance time and checkout/payment status;
• payer name, business email, billing address where provided, amount, currency, payment route, bank transaction or remittance reference where applicable, Stripe session/payment references where the card route is used, and reconciliation or receipt status; Haven Measure does not receive full card numbers or card security codes;
• project records, original filenames, file categories, declared content types, sizes, upload timestamps and storage identifiers only through the controlled paid-project route.

An initial enquiry must not include National Insurance numbers, Unique Taxpayer References, payroll records, personal tax returns, tax-account credentials or a Status Determination Statement. If later assessment records are genuinely required, Haven Measure will first confirm purpose, minimisation, access, retention and a secure transfer route in writing.

4. Purposes and lawful bases

• Enquiries and pre-contract checks: steps requested before entering a contract and Haven Measure’s legitimate interests in assessing suitability, conflicts, engagement structure and commercial risk.
• Providing contracted services: performance of a contract and legitimate interests in professional administration, quality control and client communication.
• Taking and recording payment: performance of the accepted engagement, legitimate interests in fraud prevention and payment reconciliation, and legal obligations for accounting and tax records.
• Legal, insurance and regulatory protection: legal obligations and legitimate interests in establishing, exercising or defending legal claims, notifying insurers and maintaining appropriate records.
• Business-to-business marketing: legitimate interests, subject to applicable electronic-marketing rules, relevance checks and an easy right to object. Haven Measure does not sell personal information.

Where special-category or criminal-offence information is unexpectedly supplied, processing will be paused and an appropriate legal condition assessed. Such information should not be sent at the enquiry stage.

5. Sources

Information may come directly from you or an authorised client contact, from public professional or corporate sources such as a company website, Companies House, official procurement notices or LinkedIn, and from advisers where lawful and necessary. Haven Measure does not use directors’ home addresses or private contact details for prospecting.

6. Sharing

Information is shared only where necessary with:

• Cloudflare, which hosts and protects the website and provides private database and object-storage infrastructure for the engagement workflow;
• Stripe, where the optional card route is used, which provides hosted card checkout, payment processing, fraud prevention and payment records under its own published privacy information and applicable contractual safeguards;
• other approved technology or professional-service providers where necessary and under appropriate safeguards;
• Haven Measure’s solicitor, accountant, professional-indemnity broker or insurer;
• regulators, courts, law-enforcement bodies or other recipients where required or permitted by law;
• another recipient where you have authorised the disclosure and professional-risk checks permit it.

Haven Measure does not permit third-party reliance on a client Risk Map merely because it has been shared.

7. International transfers

Email providers, LinkedIn, Cloudflare and, where the optional card route is used, Stripe may process or permit access to information outside the United Kingdom. Haven Measure assesses the relevant provider terms, data location, security and lawful transfer safeguards. The Fit Checker itself does not send answers to an email provider or LinkedIn; you decide whether to copy and send the summary.

8. Retention

Dormant enquiries are normally deleted or anonymised after 12 months unless a conflict, complaint, legal, insurance or suppression record requires longer retention. Payment and accounting records are normally retained for at least the period required by applicable company and tax rules. Client engagement and project records are normally retained for six years after the engagement ends, subject to professional-indemnity requirements, limitation risk, tax obligations, disputes, legal holds and any shorter deletion commitment recorded in the engagement terms. Unfinished upload access and abandoned temporary records may be removed sooner.

9. Security and minimisation

Haven Measure will request only the records needed for an agreed scope, require irrelevant personal information to be redacted where practicable, restrict access, use multi-factor authentication and approved secure transfer, and keep an incident-response procedure. Client material will not be entered into public or consumer AI services. Any approved AI-assisted workflow requires data minimisation, suitable contractual safeguards and human professional review.

Project files are stored in a private Cloudflare R2 bucket with no public listing or anonymous drop route. Searchable workflow metadata is held separately in Cloudflare D1. Access is issued only for an accepted fixed-fee engagement after verified payment, is tied to a project, expires and closes when the pack is submitted unless Haven reopens it in writing. It does not permit browsing other client records. Before submission an authorised client can review the received file list and remove a mistaken file. Uploaded files are quarantined for Haven review and are not executed or previewed by the public site.

10. Your rights

Subject to applicable law, you may ask for access, correction, erasure, restriction, portability or information about processing, and may object to processing based on legitimate interests or to direct marketing. Haven Measure may need to verify identity and may retain information where law, legal claims or professional obligations require it.

11. Complaints

Please raise concerns with Haven Measure first so they can be investigated. You may also complain to the UK Information Commissioner’s Office. Current contact and complaint routes are available at ico.org.uk.

12. Operational and change control

Fixed-fee payment options are available only from a time-limited accepted-offer link after written acceptance. Cleared payment verified by Haven through business-bank reconciliation or, where enabled, Stripe's server-side webhook unlocks controlled project intake; it does not start delivery or expand the accepted scope. Haven Measure keeps analytics and advertising technology disabled at this stage. Before materially changing the payment, upload, newsletter, analytics or advertising process, Haven Measure will review the data flow, lawful basis, processor terms, retention, security, privacy wording, cookie position and current data-protection-fee obligation. This notice will be updated when processing changes materially. Haven Measure does not claim current ICO fee registration unless and until that position is confirmed.