Privacy Policy

Rhaeadru is the data controller for the personal information described in this policy. Registered name: RHAEADRU LTD. Company number: 17094108. Registered office: Singleton Court Business Park, Wonastow Road, Monmouth, United Kingdom, NP25 5JA. ICO registration number: C2037868.

You can contact us about anything in this policy at hello@rhaeadru.com.

We only collect information you choose to give us. That is:

• Revenue Gap Assessment submissions. Your first name, last name, work email address, company name, job title and, if you choose to supply it, your telephone number. We also store the answers you gave to the profile and diagnostic questions, the answers you gave to the commercial context questions about your sector, growth approach, contract values, sales cycle, ownership, partner contribution, current exposure, timing and executive sponsorship, the optional response you may give about the revenue outcome you most need to change in the next 90 days, the scores calculated from your diagnostic answers, your result band, your primary and connected revenue gaps, the recommended next step, your consent choices and the date and time of submission. The optional free-text response is voluntary, and you are asked not to include personal information, customer names or commercially confidential details in it.
• Referral information. The page or campaign that brought you to the assessment, where your browser supplies it.
• Email enquiries. Anything you send us when you email hello@rhaeadru.com or ask to book a conversation.

We do not ask for special category data, and you should not include confidential client information in free text you send us.

• To produce and provide your assessment result. Lawful basis: your consent, given by ticking the required box on the assessment form.
• To hold a record of the assessment and of the consent you gave. Lawful basis: legal obligation, because we must be able to demonstrate that consent was obtained, and our legitimate interest in keeping accurate business records.
• To respond when you ask for a conversation or a Revenue Gap Review. Lawful basis: our legitimate interest in replying to people who contact us, and steps taken at your request before entering a contract.
• To send occasional insight by email. Lawful basis: your consent, given only if you tick the separate optional box. If you leave it unticked we do not add you to any marketing list.

Your result is calculated automatically by a fixed scoring rule. Each of the twelve diagnostic statements scores from five down to one, the totals are converted into a percentage for each of the four dimensions and for the assessment overall, and the overall percentage places you in one of four result bands. The lowest scoring dimension is shown as your primary gap.

This is an indicative business diagnostic, not a decision about you. It does not produce any legal effect, does not similarly significantly affect you, and is not used for credit, employment, pricing or eligibility decisions. Any advice that follows is given by a person, not by the tool.

We also record a suggested internal follow-up priority and a short list of the reasons for it. It is calculated using fixed rules from your answers, not by artificial intelligence. We use it to help organise our manual review of assessment submissions. It does not itself send a communication, create a sales opportunity, change your assessment result or recommendation, determine whether you can use a Rhaeadru service, or create a decision with a legal or similarly significant effect. A person decides whether any follow-up is appropriate. This priority and the relevant commercial context are also recorded in the note attached to your contact record in our customer relationship system.

We run a research survey on how organisations plan for and close gaps between revenue targets and results. Taking part is voluntary.

Survey answers. We store your answers, the survey version, which set of questions you were shown, and the date and time you submitted. We do not ask for your name, email address or organisation in the survey, and we do not store your IP address or browser details with your answers. We do not use survey answers to create or update any customer or marketing record. Please do not include names or other identifying details in free-text answers.

We use survey answers to analyse trends and to produce research findings. Our lawful basis is our legitimate interest in carrying out and publishing commercial research. A response without a name can still contain details that could indirectly identify a person or organisation, so we review findings before publication, report results in aggregate, avoid reporting results for groups small enough to reveal who took part, and remove identifying details from any quoted or summarised free-text material.

Research findings and optional interviews. This is independent research. Findings will be published on the Rhaeadru website, so we do not collect contact details to send you a report. After the survey you may, if you wish, volunteer for a short research interview using a separate form. That form asks only for your email address, an optional first name, and your consent to be contacted about an interview. We store a record of the consent wording you agreed to. These details are stored separately from your survey answers, share no response identifier with them, and are not linked to them. We use them only to arrange a research interview, and our lawful basis is your consent. They are never used for sales follow-up, general marketing or newsletters, and are not added to HubSpot or any other CRM.

Technical logs. Like most websites, our hosting and database providers keep short-lived technical logs of requests, which normally include IP address and browser information, for security and troubleshooting. These logs are kept for a limited period set by the provider, are not used for research, and are not used to analyse survey answers or deliberately combined with them.

We keep the number of service providers deliberately small. Each of the providers below acts as a data processor on our instructions. None of them is a joint controller with us for the information described in this policy.

• Lovable (Lovable Labs Incorporated, trading as Lovable) hosts this website and runs the server side code that processes your submission. Rhaeadru holds an active Lovable Business plan, and Lovable’s published Data Processing Agreement applies to this workspace. Lovable acts as our processor. Its security certifications and subprocessor list are published at trust.lovable.dev.
• Supabase (Supabase, Inc.) provides the managed PostgreSQL database that holds assessment records, supplied to us through Lovable Cloud as a subprocessor of Lovable. The database for this project runs on Amazon Web Services in the eu-west-1 region, which is Ireland, so assessment records are stored in Ireland.
• Amazon Web Services (Amazon Web Services EMEA SARL) provides the underlying cloud infrastructure for that database, as a subprocessor.
• Cloudflare (Cloudflare, Inc.), a subprocessor of Lovable, provides globally distributed website delivery and security services. Website requests may be processed through infrastructure located close to the visitor, and operational security logs may be processed in locations used by Cloudflare and Lovable. Where processing takes place outside the United Kingdom, Lovable’s Data Processing Agreement requires appropriate transfer safeguards, including the European Commission Standard Contractual Clauses and the UK International Data Transfer Addendum.
• HubSpot (HubSpot Ireland Limited for customers in Europe) is our customer relationship system. When you complete the assessment we create or update a contact record using your name, email address, telephone number where supplied, job title and company name, and we attach a note containing your result and your consent record. We do not create any deal, marketing subscription or marketing status automatically.
• Google (Google Ireland Limited) provides the appointment scheduling page used by the booking button. If you book a call, the details you enter there are handled by Google and by us as the organiser.

We do not sell personal information and we do not share it for advertising. We may disclose it where the law requires it.

Normal public use of this website does not send your assessment answers or your contact details to any artificial intelligence model. Your result is produced by the fixed scoring rule described above, which is ordinary arithmetic, not a model. No information you submit through this site is used to train any artificial intelligence model, by us or by any of our providers.

Assessment records are stored in Ireland. Some providers process information outside the United Kingdom, including in the United States. Where that happens we rely on UK approved safeguards:

• Lovable. Its published Data Processing Agreement incorporates the European Commission standard contractual clauses together with the UK International Data Transfer Addendum for transfers out of the UK and the EEA.
• Supabase and Amazon Web Services. Data at rest stays in Ireland. Where support or operational access involves a transfer, Supabase’s data processing addendum applies the standard contractual clauses with the UK Addendum, and Amazon Web Services applies the same clauses under its own data processing addendum.
• Cloudflare. Its data processing addendum applies the standard contractual clauses with the UK Addendum.
• HubSpot. Contracting through HubSpot Ireland Limited, its data processing agreement applies the standard contractual clauses with the UK Addendum for onward transfers to HubSpot, Inc. in the United States.
• Google. Contracting through Google Ireland Limited, Google is certified under the EU-US Data Privacy Framework and its UK Extension, and its terms also include the standard contractual clauses with the UK Addendum.

• Assessment records in our database: 24 months from submission.
• HubSpot contacts and the associated assessment notes: 24 months after the last meaningful interaction, then reviewed and either deleted or anonymised.
• General email enquiries: 24 months after the enquiry is closed.
• Optional marketing records: until you withdraw consent, or after 24 months without meaningful engagement, at which point consent must be refreshed or the record suppressed.
• Individual survey responses: 24 months after the survey’s fieldwork closes, then deleted.
• Research interview volunteer records: the whole record, including your email address, any first name, and the consent wording and version you agreed to, is kept until the interview process has ended, and in any case no longer than 12 months after you submitted it. We delete it sooner if you withdraw your consent.
• Interview withdrawal records: if you withdraw, we keep a restricted entry containing only the volunteer record's reference number, the date you withdrew and confirmation that your contact details were deleted. It holds no name or email address, is not linked to survey answers, and is deleted after 12 months.
• Published research findings: aggregate findings, reviewed as described above, may be retained.

We keep a record of the consent you gave, including the exact wording shown to you and the version of that wording, for as long as we hold the related information, so that we can evidence it.

You can withdraw your consent at any time by emailing hello@rhaeadru.com. If you withdraw consent for us to process your assessment information we will delete your assessment record and the related contact record and note, unless we are required to keep something by law. Withdrawing consent does not affect anything we did before you withdrew it.

Marketing consent is separate. If you ticked the optional insight box you can withdraw that on its own by using the unsubscribe link in any email we send you, or by emailing hello@rhaeadru.com. Withdrawing marketing consent has no effect on your assessment result or on our ability to reply to you.

You can withdraw your consent to be contacted about a research interview at any time by emailing hello@rhaeadru.com. We will stop interview contact and delete your email address and any first name. To show that we acted on your request, we keep a restricted entry with only the record's reference number, the withdrawal date and confirmation of deletion, for 12 months. Because contact details are not linked to survey answers, we may be unable to locate your survey response from your name or email address alone.

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct anything that is inaccurate or incomplete;
• ask us to delete your information;
• ask us to restrict how we use it, or object to our use of it;
• ask us to transfer it to you or another provider in a portable format;
• withdraw consent where our use is based on consent.

To exercise any of these rights, including deletion, email hello@rhaeadru.com. We will respond within one month.

Objecting to use of survey responses. Where we rely on legitimate interests to use survey responses, you have the right to object. Email hello@rhaeadru.com with “Survey objection” in the subject. To help us find your response, you can include details such as the approximate date and time you submitted it and any distinctive answers you remember. If we can identify your response, we will stop using it and delete it unless we have compelling legitimate grounds to continue. If we cannot identify it, we will tell you. Your other rights described in this policy still apply.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk, by telephone on 0303 123 1113, or at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

This website does not set advertising or tracking cookies, and it does not currently run any third party analytics or tag manager.

While you are taking the Revenue Gap Assessment, your answers are held temporarily in your own browser’s session storage so that your progress survives a refresh. That information stays on your device, is not readable by us until you submit the form, and is cleared when you close the browser tab.

If we change how we use personal information we will update this page and change the date at the top.