Privacy

This site has no accounts, no login, no adverts and no cookies. It collects almost nothing, and what it does collect is set out below in full rather than summarised.

Who is responsible

The data controller is Captivated Ltd, a company registered in England and Wales under company number 15936109, with its registered office at Electric Works C/O Captivated Ltd, 3 Concourse Way, Sheffield, United Kingdom, S1 2BJ. We are registered with the UK Information Commissioner's Office under referenceZC010118.

For any question about this notice or your personal data, emailhello@the-handover.org.

What this site collects

The complete list, not a representative sample.

• Analytics. We use Plausible Analytics, a privacy-friendly, cookieless service that produces aggregate statistics only. It does not use cookies, does not track you across sites, and does not collect data that identifies you individually.
• Server and CDN logs. The site is hosted on Cloudflare Pages. Cloudflare may process request metadata, such as IP addresses, for security, performance and content-delivery purposes, acting as our processor.
• Email you send us. If you write to us we receive your address, your name if you give it, and the content of your message.

No cookies, and nothing stored on your device

This site sets no cookies, of any kind, including analytics cookies. Nothing is written to your browser's storage. There is no consent banner because there is nothing to consent to — a banner here would be theatre rather than a choice.

Search runs in your browser

The search page downloads an index and matches your terms locally. Your query is not sent anywhere to be answered. It does, however, appear in the page address, which means it is visible in your own browser history and in ordinary server request logs the same way any URL is. If a search term is something you would not put in a URL, that is the reason.

Contributors

Documents are submitted by email. If you contribute, we keep your correspondence and your verified email address for a specific reason: it is the counterparty record for the rights you grant us to publish your work. That record has to outlast the submission itself, because it is the evidence that the document may lawfully stay published.

You may contribute under a pseudonym or anonymously, and the published document will carry whatever name you ask it to. The verified address is held privately and is never published, shown alongside your document, or given to anyone else.

Lawful bases

We rely on our legitimate interests to operate, secure and understand the use of this site, including aggregate analytics and server logs. Where you contact us, we process your data on the basis of your consent and our legitimate interest in replying. For contributor records we rely on legitimate interests and, where it applies, the performance of the agreement under which you licensed your work to us.

How long we keep it

Email correspondence is kept for as long as it takes to deal with your message and any follow-up, then for a reasonable period for our records. Contributor rights records are kept for as long as the document remains published, and afterwards for as long as a claim about it could still be made. Aggregate analytics contain no personal data. Cloudflare retains log data in line with its own practices.

Sharing

We do not sell your personal data, and we do not share it for advertising. It reaches only the service providers who process it on our behalf under appropriate agreements — currently Plausible Analytics (analytics) and Cloudflare(hosting and content delivery). We may also disclose data where the law requires it.

International transfers

Some processors may handle data outside the United Kingdom. Where they do, we rely on the safeguards recognised under UK data protection law, such as adequacy regulations or the International Data Transfer Agreement.

Agents and automated readers

Machine reading is expressly permitted here and is the point of the site. Fetching a document, llms.txt orindex.json requires no account and no key, and we make no attempt to identify who or what is doing it. Requests from agents appear in Cloudflare's logs exactly as any other request does, and nowhere else — the analytics above run on JavaScript, which the plain-text and JSON routes do not serve.

Your rights

Under UK GDPR you have the right to access your personal data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; to data portability; and, where we rely on consent, to withdraw it at any time. To exercise any of these, email hello@the-handover.org.

One limit worth stating rather than leaving you to discover: erasing a contributor rights record while the document is still published would remove the evidence that we may publish it. If you ask us to erase that record, we will treat it as a request to withdraw the document as well, and say so before acting.

Complaints

If you have a concern, please raise it with us first so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk.

Changes

If this notice changes, the date at the top changes with it. There is no archive of previous versions; the published version is the one that applies.