1. Who controls personal information
Haven Measure Limited is the controller for personal information it decides to collect and use for its own business purposes. It is registered in England and Wales under company number 16382014. Its registered office is 82 Oswald Road, Scunthorpe, DN15 7PA.
Privacy enquiries or rights requests may be sent in writing to that registered office or to enquiries@havenmeasure.com. Please write “Data protection request” and do not include more personal information than is necessary.
2. What remains local or is not used
The service selection and enquiry draft stay in the open page. They are not saved by this website and clear on refresh or navigation away. Preparing a draft does not send it. Haven receives it only if you choose to send the email from your own email application. The process example does not use tracking or third-party video services.
The public website does not intentionally:
- transmit or store service-guide or enquiry-tool answers;
- receive the text entered into the written-enquiry composer unless you choose to send the resulting email;
- accept or store public star ratings or review comments at launch;
- use analytics, tracking pixels, advertising cookies or behavioural profiling;
- request telephone numbers or use telephone marketing.
The organisations providing website hosting and security may process limited technical logs needed to deliver and protect the service. Haven Measure does not use those logs for advertising profiles and does not operate application analytics on this website.
The written-enquiry composer holds the text you type only in the open browser page. Selecting “Create my enquiry email” prepares a draft on this page. You can then open it in your email application, copy it or download a text copy. A downloaded copy remains on your device until you delete it. The website does not receive or store that text; Haven Measure receives it only if you choose to send the email.
The accepted-offer, paid-project and private-download pages use the current tab's session storage to retain private offer, payment and document-access references so that a refresh does not lose your access. Private download links can be removed from the tab using “Forget this private link”; server-side expiry and withdrawal checks still apply. If the optional card route is used, this also allows the browser to return from Stripe without exposing the accepted-offer token in the visible return URL. Those references are not analytics or advertising identifiers and normally disappear when the browser tab or session is closed.
There is currently no newsletter signup or subscription collection on this website. Reading the free practical guides does not enrol you in marketing.
3. Information received through enquiries, payment and engagement
Depending on the route you choose, Haven Measure may receive:
- your name, professional role, employer or business and public profile details;
- the content and date of your written enquiry and Haven Measure’s response;
- non-confidential service-fit categories that you deliberately copy from the checker, including the proposed Contracting Agency route, broad status-assessment stage, payment-term and invoice or self-billing position, external-assessment cost position, working pattern, schedule and travel category;
- high-level opportunity details you deliberately enter into the email composer, such as Contracting Agency position and name, end client and sector, location, anticipated start and duration, working days and hours, responsibilities and required outputs;
- conflict-check details about relevant organisations and project parties;
- business contact, engagement, billing and service records if you become a client;
- accepted-offer details, the service selected, engagement reference, the exact scope, price and service terms accepted, a document fingerprint, authorised buyer name and role, business-purpose confirmation, terms-acceptance time and checkout/payment status;
- payer name, business email, billing address where provided, amount, currency, payment route, bank transaction or remittance reference where applicable, Stripe session/payment references where the card route is used, and reconciliation or receipt status; Haven Measure does not receive full card numbers or card security codes;
- project records, original filenames, file categories, declared content types, sizes, upload timestamps and storage identifiers only through the controlled paid-project route.
An initial enquiry must not include National Insurance numbers, Unique Taxpayer References, payroll records, personal tax returns, tax-account credentials or a Status Determination Statement. If later assessment records are genuinely required, Haven Measure will first confirm purpose, minimisation, access, retention and a secure transfer route in writing.
4. Purposes and lawful bases
- Enquiries and pre-contract checks: steps requested before entering a contract and Haven Measure’s legitimate interests in assessing suitability, conflicts, engagement structure and commercial risk.
- Providing contracted services: performance of a contract and legitimate interests in professional administration, quality control and client communication.
- Taking and recording payment: performance of the accepted engagement, legitimate interests in fraud prevention and payment reconciliation, and legal obligations for accounting and tax records.
- Legal, insurance and regulatory protection: legal obligations and legitimate interests in establishing, exercising or defending legal claims, notifying insurers and maintaining appropriate records.
- Business-to-business marketing: legitimate interests, subject to applicable electronic-marketing rules, relevance checks and an easy right to object. Haven Measure does not sell personal information.
Where special-category or criminal-offence information is unexpectedly supplied, processing will be paused and an appropriate legal condition assessed. Such information should not be sent at the enquiry stage.
5. Sources
Information may come directly from you or an authorised client contact, from public professional or corporate sources such as a company website, Companies House, official procurement notices or LinkedIn, and from advisers where lawful and necessary. Haven Measure does not use directors’ home addresses or private contact details for prospecting.
6. Sharing
Information is shared only where necessary with:
- Cloudflare, which hosts and protects the website and provides private database and object-storage infrastructure for the engagement workflow;
- Google Gmail, which handles Haven Measure’s business email and, once configured and enabled, sends order invoices and receipts to the agreed billing email; the matching documents and email submission status are retained privately in Haven’s records;
- Stripe, where the optional card route is used, which provides hosted card checkout, payment processing, fraud prevention and payment records under its own published privacy information and applicable contractual safeguards;
- other approved technology or professional-service providers where necessary and under appropriate safeguards;
- Haven Measure’s solicitor, accountant, professional-indemnity broker or insurer;
- regulators, courts, law-enforcement bodies or other recipients where required or permitted by law;
- another recipient where you have authorised the disclosure and professional-risk checks permit it.
Haven Measure does not permit third-party reliance on a client review or report merely because it has been shared.
7. International transfers
Email providers, LinkedIn, Cloudflare and, where the optional card route is used, Stripe may process or permit access to information outside the United Kingdom. Haven Measure assesses the relevant provider terms, data location, security and lawful transfer safeguards. The service guide and enquiry tools do not send answers to an email provider or LinkedIn; you decide whether to copy and send the summary.
8. Retention
Dormant enquiries are normally deleted or anonymised after 12 months unless a conflict, complaint, legal, insurance or suppression record requires longer retention. Payment and accounting records are normally retained for at least the period required by applicable company and tax rules. Client engagement and project records are normally retained for six years after the engagement ends, subject to professional-indemnity requirements, limitation risk, tax obligations, disputes, legal holds and any shorter deletion commitment recorded in the engagement terms. Unfinished upload access and abandoned temporary records may be removed sooner.
9. Security and minimisation
Haven Measure will request only the records needed for an agreed scope, require irrelevant personal information to be redacted where practicable, restrict access, use multi-factor authentication and approved secure transfer, and keep an incident-response procedure. Client material will not be entered into public or consumer AI services. Any approved AI-assisted workflow requires data minimisation, suitable contractual safeguards and human professional review.
Automated project uploads are not currently available on this website. Before accepting confidential records, Haven confirms the available transfer route, storage arrangements, authorised access and applicable retention instructions for the engagement. Do not send confidential files with an initial enquiry.
10. Your rights
Subject to applicable law, you may ask for access, correction, erasure, restriction, portability or information about processing, and may object to processing based on legitimate interests or to direct marketing. Haven Measure may need to verify identity and may retain information where law, legal claims or professional obligations require it.
11. Complaints
Please raise concerns with Haven Measure first so they can be investigated. You may also complain to the UK Information Commissioner’s Office. Current contact and complaint routes are available at ico.org.uk.
12. Operational and change control
Online checkout and automated file uploads are not currently available. Haven confirms payment instructions and transfer arrangements privately after written acceptance. Payment must be verified against the accepted engagement before document-transfer access is released; it does not start delivery or expand the accepted scope. If card checkout is enabled later, server-side verification will be required. Haven Measure keeps analytics and advertising technology disabled at this stage. Before materially changing the payment, upload, newsletter, analytics or advertising process, Haven Measure will review the data flow, lawful basis, processor terms, retention, security, privacy wording, cookie position and current data-protection-fee obligation. This notice will be updated when processing changes materially. Haven Measure does not claim current ICO fee registration unless and until that position is confirmed.