Privacy

What I do with your data.

Short version: I use it to reply to you, and that's it. No mailing list, no ad pixels, no cookies, nobody else gets it.

Last updated: 9 August 2026

Who is responsible for your data

Workings is a trading name of Loaded Dice Ltd, registered in England and Wales, company no. 12429789, registered office Unit C4, Windmill Parc, Hayes Road, Sully, Vale of Glamorgan CF64 5AD. Loaded Dice Ltd is the data controller for anything you send through this site — in practice that means me, Graham, because I own the company and nobody else reads the inbox. You can reach me at graham@theworkings.uk.

What I collect, and when

The audit tool on the front page runs entirely in your browser. Your answers are not sent anywhere and are not saved — close the tab and they are gone. The site does not use cookies or browser storage of any kind.

The only time anything leaves your device is if you choose to fill in the form after seeing your number. At that point I receive:

• Your email address.
• Your company name, if you gave one.
• The answers you gave the audit tool and the figures it worked out — hours per task, hourly cost, trading weeks, the annual total.
• The date and time you submitted it.
• A shortened version of your IP address, with the last part removed (for example 81.2.69.0 rather than the full address), plus your browser's user-agent string. I use these to stop the form being abused by bots. I do not store your full IP address.
• To rate-limit the form, a one-way scrambled fingerprint of your IP address (a salted hash — it can't be turned back into the address) is kept briefly — usually an hour or two, at most a day or so — and then deleted automatically. It is used only to count submissions and for nothing else.

Why I'm allowed to hold it

Under UK GDPR my lawful basis is legitimate interests (Article 6(1)(f)): you asked me to look at your figures, and I need your email to reply. The interest is mutual and the data is the minimum required to do it. If you would rather I did not hold it, say the word and it goes.

The shortened IP address and user-agent are also held on legitimate interests, for the narrow purpose of keeping the form working and free of spam.

What I do with it

• I read it and reply to you personally, usually within a working day.
• If we end up working together, it becomes part of the normal client record.
• That is the entire list. I do not add you to a mailing list, run you through an automated sequence, sell your details, or share them with anyone for marketing.

Who else touches it

I use a small number of suppliers to run the site. They process data on my instructions only. (The typefaces are hosted here, not fetched from a third party — your browser talks to nobody else just by reading the page.)

• Cloudflare — hosting, the form endpoint and the database the submission is written to. Data is held in Cloudflare's network; some processing may occur outside the UK under Cloudflare's standard data protection terms and the UK International Data Transfer Addendum.
• Resend — sends the notification to me and the acknowledgement to you. Same position on transfers.
• Cal.com — if you book a call, that booking is handled by Cal.com under their own privacy notice.

Analytics

I use Cloudflare Web Analytics, which counts page views without cookies and without building a profile of you. That is why there is no cookie banner on this site — there is nothing to consent to.

How long I keep it

Audit submissions are deleted automatically after 24 months — the system does it on a schedule, it doesn't wait for me to remember. If you have become a client, the normal business and tax retention rules apply instead (six years). Email correspondence lives in my mailbox for as long as it is useful and is cleared out periodically.

Your rights

You can ask me to show you what I hold, correct it, delete it, restrict what I do with it, or hand it over in a portable format. You can also object to my processing it on legitimate interests. Email graham@theworkings.uk and I will deal with it within one month — realistically within a day, because there is not much of it and I am the only one who has to look.

If you think I have handled your data badly and I have not put it right, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.