Current website practices.
You can read the site and explore the assessment. Contact entry and submission are disabled. No review request is saved, inquiry sent, or introduction made.
Assessment answers and your current stage stay in browser memory and, where available, this tab’s session storage. Contact fields are never stored there. “Clear answers and start again” removes previous answers and receipt state; the new blank assessment may then be saved.
Company details can be personal information. Do not enter confidential records, customer information, or credentials. There are no uploads or account connections.
Hosting and analytics.
The website uses Cloudflare Pages and a server-side Worker. Cloudflare processes connection and request information to deliver and protect the site. See its privacy policy. Account settings, logging, and processing locations need confirmation before review collection opens.
With your permission, Google Analytics measures page visits and fit-check activity using cookies. It receives page paths, basic device and approximate location information, and events such as starting or completing the fit check. We exclude form answers, names, email addresses, company details, and URL query strings from our analytics events. Automatic form tracking, Google signals, and advertising personalization are disabled. User and event data retention is set to two months, without resetting on new activity. Standard aggregated reports follow Google’s separate retention practices. We remember your choice for 180 days; analytics cookies expire after 180 days. You can decline or withdraw permission using Cookie settings in the footer. See Google’s privacy policy. External websites have their own privacy practices.
If live requests are approved.
The configured Worker and private D1 database would store company-profile answers, contact name/role/work email, optional referral source, permission version/time, request ID, timestamps/expiry, privacy-notice version, and screening version/reasons.
Origin would use this information to assess and respond to requests, maintain operational records, prevent abuse, and coordinate separately approved introductions. Contact permission does not subscribe you to a newsletter.
Attribution and notifications are disabled. The form sends no attribution. An optional notification queue would carry only a review ID; no email delivery provider is connected. Any new provider requires a practices and notice review.
Separate approval for an introduction.
A later approval must identify the receiving company and information to share. Review its purpose and privacy notice first. Operational-record sharing requires its own approvals and agreement.
Retention and access.
Retention is unset. The operator must approve deletion, backups, access roles, and exceptions before intake opens. Pages also needs a verified maintenance schedule; an expiry timestamp alone does not delete records.
The endpoint validates requests and provides no public read/list access. When enabled, abuse controls store keyed, time-bucketed identifiers derived from IP addresses, not raw IPs. Their cleanup also needs verification. Cloudflare may separately process connection information. These controls do not guarantee absolute security.
Privacy contact: pending.
Origin Data Partners is the confirmed operator name. Further required entity details, any required address, and a verified privacy-contact route remain pending.
Live requests stay disabled until there is an approved route for privacy questions and applicable access, correction, deletion, objection, and withdrawal requests. The date above records draft preparation, not legal approval.