Privacy Policy

Rhaeadru is the data controller for the personal information described in this policy. Registered name: RHAEADRU LTD. Company number: 17094108. Registered office: Singleton Court Business Park, Wonastow Road, Monmouth, United Kingdom, NP25 5JA. ICO registration number: C2037868.

You can contact us about anything in this policy at hello@rhaeadru.com.

We only collect information you choose to give us. That is:

• Revenue Gap Assessment submissions. Your first name, last name, work email address, company name, job title and, if you choose to supply it, your telephone number. We also store the answers you gave to the two profile questions and the twelve diagnostic questions, the scores calculated from those answers, your result band, your primary and connected revenue gaps, the recommended next step, your consent choices and the date and time of submission.
• Referral information. The page or campaign that brought you to the assessment, where your browser supplies it.
• Email enquiries. Anything you send us when you email hello@rhaeadru.com or ask to book a conversation.

We do not ask for special category data, and you should not include confidential client information in free text you send us.

• To produce and provide your assessment result. Lawful basis: your consent, given by ticking the required box on the assessment form.
• To hold a record of the assessment and of the consent you gave. Lawful basis: legal obligation, because we must be able to demonstrate that consent was obtained, and our legitimate interest in keeping accurate business records.
• To respond when you ask for a conversation or a Revenue Gap Review. Lawful basis: our legitimate interest in replying to people who contact us, and steps taken at your request before entering a contract.
• To send occasional insight by email. Lawful basis: your consent, given only if you tick the separate optional box. If you leave it unticked we do not add you to any marketing list.

Your result is calculated automatically by a fixed scoring rule. Each of the twelve diagnostic statements scores from five down to one, the totals are converted into a percentage for each of the four dimensions and for the assessment overall, and the overall percentage places you in one of four result bands. The lowest scoring dimension is shown as your primary gap.

This is an indicative business diagnostic, not a decision about you. It does not produce any legal effect, does not similarly significantly affect you, and is not used for credit, employment, pricing or eligibility decisions. Any advice that follows is given by a person, not by the tool.

We keep the number of service providers deliberately small. Each of the providers below acts as a data processor on our instructions. None of them is a joint controller with us for the information described in this policy.

• Lovable (Lovable Labs Incorporated, trading as Lovable) hosts this website and runs the server side code that processes your submission. Rhaeadru holds an active Lovable Business plan, and Lovable’s published Data Processing Agreement applies to this workspace. Lovable acts as our processor. Its security certifications and subprocessor list are published at trust.lovable.dev.
• Supabase (Supabase, Inc.) provides the managed PostgreSQL database that holds assessment records, supplied to us through Lovable Cloud as a subprocessor of Lovable. The database for this project runs on Amazon Web Services in the eu-west-1 region, which is Ireland, so assessment records are stored in Ireland.
• Amazon Web Services (Amazon Web Services EMEA SARL) provides the underlying cloud infrastructure for that database, as a subprocessor.
• Cloudflare (Cloudflare, Inc.), a subprocessor of Lovable, provides globally distributed website delivery and security services. Website requests may be processed through infrastructure located close to the visitor, and operational security logs may be processed in locations used by Cloudflare and Lovable. Where processing takes place outside the United Kingdom, Lovable’s Data Processing Agreement requires appropriate transfer safeguards, including the European Commission Standard Contractual Clauses and the UK International Data Transfer Addendum.
• HubSpot (HubSpot Ireland Limited for customers in Europe) is our customer relationship system. When you complete the assessment we create or update a contact record using your name, email address, telephone number where supplied, job title and company name, and we attach a note containing your result and your consent record. We do not create any deal, marketing subscription or marketing status automatically.
• Google (Google Ireland Limited) provides the appointment scheduling page used by the booking button. If you book a call, the details you enter there are handled by Google and by us as the organiser.

We do not sell personal information and we do not share it for advertising. We may disclose it where the law requires it.

Normal public use of this website does not send your assessment answers or your contact details to any artificial intelligence model. Your result is produced by the fixed scoring rule described above, which is ordinary arithmetic, not a model. No information you submit through this site is used to train any artificial intelligence model, by us or by any of our providers.

Assessment records are stored in Ireland. Some providers process information outside the United Kingdom, including in the United States. Where that happens we rely on UK approved safeguards:

• Lovable. Its published Data Processing Agreement incorporates the European Commission standard contractual clauses together with the UK International Data Transfer Addendum for transfers out of the UK and the EEA.
• Supabase and Amazon Web Services. Data at rest stays in Ireland. Where support or operational access involves a transfer, Supabase’s data processing addendum applies the standard contractual clauses with the UK Addendum, and Amazon Web Services applies the same clauses under its own data processing addendum.
• Cloudflare. Its data processing addendum applies the standard contractual clauses with the UK Addendum.
• HubSpot. Contracting through HubSpot Ireland Limited, its data processing agreement applies the standard contractual clauses with the UK Addendum for onward transfers to HubSpot, Inc. in the United States.
• Google. Contracting through Google Ireland Limited, Google is certified under the EU-US Data Privacy Framework and its UK Extension, and its terms also include the standard contractual clauses with the UK Addendum.

• Assessment records in our database: 24 months from submission.
• HubSpot contacts and the associated assessment notes: 24 months after the last meaningful interaction, then reviewed and either deleted or anonymised.
• General email enquiries: 24 months after the enquiry is closed.
• Optional marketing records: until you withdraw consent, or after 24 months without meaningful engagement, at which point consent must be refreshed or the record suppressed.

We keep a record of the consent you gave, including the exact wording shown to you and the version of that wording, for as long as we hold the related information, so that we can evidence it.

You can withdraw your consent at any time by emailing hello@rhaeadru.com. If you withdraw consent for us to process your assessment information we will delete your assessment record and the related contact record and note, unless we are required to keep something by law. Withdrawing consent does not affect anything we did before you withdrew it.

Marketing consent is separate. If you ticked the optional insight box you can withdraw that on its own by using the unsubscribe link in any email we send you, or by emailing hello@rhaeadru.com. Withdrawing marketing consent has no effect on your assessment result or on our ability to reply to you.

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct anything that is inaccurate or incomplete;
• ask us to delete your information;
• ask us to restrict how we use it, or object to our use of it;
• ask us to transfer it to you or another provider in a portable format;
• withdraw consent where our use is based on consent.

To exercise any of these rights, including deletion, email hello@rhaeadru.com. We will respond within one month.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk, by telephone on 0303 123 1113, or at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

This website does not set advertising or tracking cookies, and it does not currently run any third party analytics or tag manager.

While you are taking the Revenue Gap Assessment, your answers are held temporarily in your own browser’s session storage so that your progress survives a refresh. That information stays on your device, is not readable by us until you submit the form, and is cleared when you close the browser tab.

If we change how we use personal information we will update this page and change the date at the top.