Draft for private review — operator details and retention arrangements are not final.

Privacy Notice

Early intake · Updated 12 September 2026

Who is responsible

[Operator legal name — to be confirmed] operates WorkFair and is responsible for the personal information collected through this intake. For privacy questions, withdrawal of consent or deletion requests, contact [Privacy contact email — to be confirmed]. Include your submission reference if you have it; do not resend your contract just to make a request.

What we collect

We collect your email address, selected country, workplace concern and an optional PDF contract, submission reference, submission time, and a record of the notices and choices you accepted. Hosting providers also process technical request information needed to operate and protect the website.

Please remove bank details, signatures, identity numbers, other people’s information and sensitive information such as health details or union membership. We do not need these for this early intake.

Why we use it

We use your submission to understand workplace concerns, develop WorkFair and contact you about the information you provided. We ask for your permission before collecting the submission. Launch and product update emails use your separate optional marketing consent. Declining marketing does not affect your ability to submit.

You can withdraw consent by contacting us. Withdrawal does not affect processing already carried out before withdrawal. We do not currently use automated decision-making to assess claims, automatically analyse contracts or send uploaded contracts to an AI service.

Where it goes and who can access it

The website runs on OpenAI Sites using Cloudflare hosting and private file storage. The PDF is stored separately from the contact record. Airtable holds your contact details, concern, submission reference, consent record and an owner-protected link to the document. Opening that link requires the WorkFair owner’s sign-in.

These service providers process information needed to supply their services. Your submission is not displayed publicly or sent to your employer by this intake service. Provider processing locations and international transfer arrangements must be confirmed before public intake opens.

How long we keep it

[Retention period and deletion arrangements — to be confirmed]

The retention arrangements must cover the PDF, the website’s submission record and the Airtable copy. Downloaded copies and provider backups also need to be accounted for when fulfilling deletion requests.

Your choices and rights

Contact us to request access, correction or deletion, withdraw consent, or stop optional emails. We may need enough information to verify that the request relates to you. Depending on the law that applies, you may also have rights to restriction, objection and portability. Some rights have exceptions; we will explain any reason a request cannot be fulfilled.

If you are in the UK, you can raise a concern with the Information Commissioner’s Office. Elsewhere, you can contact your local data protection authority.

Changes

We will update the date and notice version when this notice changes. A change of purpose will not silently apply to documents you have already submitted.