Privacy notice
What we hold about you, why we hold it, and how to get it back or have it deleted. Last updated .
Who we are
Skills Radar is the data controller for the information described here. If you want to ask about any of it, or exercise any of the rights below, email hello@skillsradar.co.uk">hello@skillsradar.co.uk and we will answer within one month.
If you only read the site
We record the page you visited, the date, and the site you came from if it was an external one. Nothing else. No cookies are set for this, no identifier is stored, and nothing is linked to you. That is why there is no cookie banner — there is nothing to consent to.
Our hosting provider also collects aggregate page view counts. Those are not linked to individuals either.
If you have an account
| What | Why | Lawful basis |
|---|---|---|
| Email address | To sign you in and contact you about your account | Contract |
| Password | Stored only as a hash by our authentication provider. We never see it. | Contract |
| Organisation name | To address you correctly and on your board reports | Contract |
| Standards you follow | To filter the feed and calendar to what affects you | Contract |
| Calendar entries you add | Because you asked us to keep them | Contract |
| Pay bill and levy figures | Only if you choose to save them. The calculator works without. | Consent |
| Email preference | To honour your choice about the newsletter | Consent |
| Account activity log | Sign-ins, payments, exports — so we can investigate problems | Legitimate interests |
Payment information
We do not see, handle or store card details. Payment is taken by Stripe, who are the controller for that information. We hold only a customer reference and your subscription status. Stripe keeps records of payments for six years, which HMRC requires — that retention is theirs and continues even if you delete your Skills Radar account.
Who else sees it
Three processors, and no one else. We do not sell data, share it with advertisers, or pass it to other members.
- Supabase — stores your account and the data above. Hosted in London.
- Stripe — payments.
- Vercel — hosting and aggregate analytics.
How long we keep it
For as long as you have an account. Delete your account and everything above is erased immediately — not flagged, not archived. Page view records are kept for 24 months in aggregate and contain nothing identifying.
Your rights
Under UK GDPR you can ask for a copy of your data, have it corrected, have it deleted, restrict or object to how we use it, and complain to the regulator. Most of that you can do yourself without asking us:
- A copy of everything — Your account tab, "Download everything we hold". It is a JSON file, which is the portable format the law refers to.
- Correct it — change your organisation or standards on the same page at any time.
- Stop the emails — one click on the same page. Account and payment emails still send, because they are part of the service rather than marketing.
- Delete everything — Your account tab, bottom of the page. It is immediate and irreversible.
If you would rather we did it, email us. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office, though we would rather you told us first so we can put it right.
Where your data is
Account data is stored in the United Kingdom. Stripe and Vercel may process data outside the UK under the safeguards set out in their own terms.
Changes to this notice
If we change anything material we will tell members by email before it takes effect, unless you have asked us not to email you, in which case it will be shown here and on your account page.