What we collect
Two things, both kept to a minimum:
- Inquiries: name, work email, optional company, company stage, focus area, and the message you send us via the contact form. Stored in our database so we can reply.
- Analytics: with your consent, anonymised page views and CTA clicks via Google Analytics 4. IP anonymisation is enabled, advertising features are disabled, and you can decline at any time.
What we don't collect
No advertising cookies. No cross-site tracking. No behavioural profiles. No sale of data to third parties. No newsletters or nurture sequences without your explicit request.
How we use it
Inquiry data is used to reply to you, schedule a working session, and — if we begin an engagement — manage that relationship. Analytics data is used in aggregate to understand which pages are useful and which CTAs work.
Where it lives
Inquiries are stored in a managed Postgres database with row-level security, accessed only by senior partners through a service-role credential. The infrastructure is hosted in EU regions where possible. Analytics data sits with Google in line with their published terms.
How long we keep it
- Inquiry records: up to 24 months from the last interaction.
- Engagement records: per the contract we sign with you.
- Analytics events: per Google's default retention (currently 14 months).
Your rights
Under UK GDPR you can request access, correction, or deletion of any personal data we hold about you. Email hello@workflowalpha.co and we'll action it within 30 days.
Changes
We update this page when our practice changes. The "last updated" date at the top of the page reflects the most recent revision.