Privacy Policy
1. Who we are
Vantage Hill Partners Ltd (Company No. 03807522), trading as Human Counterpart, is responsible for the personal data described in this policy.
Registered office:
C/O MWR Accountants
First Floor, Blackdown House
Blackbrook Business Park
Taunton
Somerset
United Kingdom
TA1 2PX
Email: support@humancounterpart.com
We are the data controller for the personal data we process.
2. What personal data we may collect
Depending on how you interact with us, we may collect:
- your name
- work email address
- telephone number
- organisation and professional role
- information contained in emails, WhatsApp messages or other correspondence
- information you choose to provide in connection with an enquiry or engagement
- audio or video recordings where recording has been agreed as part of an engagement
- limited technical information generated when you use the website, where applicable
We do not ask you to provide special category personal data through this website. If an engagement requires us to handle information of this kind, the arrangements will be agreed separately.
3. How we obtain personal data
The “It went well, didn’t it?” diagnostic saves only completed responses: your 12 answer codes, meeting type, timing, whether you are taking part alone or with colleagues, and the result calculated from those answers. If you press “Save optional details”, we also save your selected role and organisation type. We do not request your name, email address, employer name or free-text information. Partly completed questionnaires are not saved.
Each completed response has an internal reference and a collection month. A protected write credential permits updates to that response during the same visit. Answers and that credential are held in browser memory, not browser storage, cookies or page URLs. Responses are not linked by our application to enquiries, contact messages or analytics. We do not describe this dataset as anonymous: combinations of context and optional professional details could make a response identifiable in some circumstances.
We may receive personal data:
- directly from you by email, telephone, WhatsApp or other business correspondence
- during discussions about a prospective or current engagement
- through introductions and referrals
- from publicly available professional sources, such as company websites and professional networking platforms
- through technical operation of this website, where applicable
4. Why we use personal data and our lawful bases
We may use personal data to:
- respond to enquiries and communicate with prospective clients
- prepare for, arrange and deliver Human Counterpart engagements
- maintain professional and client relationships
- undertake relevant business-to-business communication
- administer contracts, invoices and business records
- operate, protect and improve the website
- comply with legal and regulatory obligations
Depending on the circumstances, we rely on one or more of the following lawful bases:
Legitimate interests
Where necessary for reasonable business purposes such as responding to enquiries, maintaining professional relationships, relevant business-to-business communications and operating our business.
For completed diagnostic responses, our lawful basis is legitimate interests: studying how people prepare for important meetings and informing our articles. We limit collection to fixed choices, do not request direct identifying details, restrict access to Roger Jones, Vantage Hill Partners Limited (rogerjones@vantagehillpartners.com) and retain responses for 12 months. You may object to this processing by contacting us. The collection notice is not a request for consent.
Contract
Where processing is necessary to take steps before entering into an engagement or to perform an agreed engagement.
Legal obligation
Where we need to retain or process information to comply with legal, tax, accounting or regulatory requirements.
Consent
Where we specifically ask for consent. Where processing relies on consent, you may withdraw it at any time.
5. Recordings used during engagements
Some Human Counterpart engagements may involve audio or video recording as part of the simulation, feedback or replay process.
Where recording is used, this will be agreed in advance with the client and relevant participants.
Recordings will be used only for the purposes agreed for that engagement, access will be limited appropriately, and recordings will be deleted when they are no longer required for the agreed purpose or in accordance with the arrangements agreed for the engagement.
6. Business-to-business communications
We may contact people in a professional capacity where we believe Human Counterpart may be relevant to their organisation or role.
Professional contact information may come from publicly available business sources, professional networking platforms, introductions or referrals.
You may ask us at any time not to contact you for this purpose.
7. Service providers and international transfers
We use third-party providers where necessary to operate the website and communicate with clients.
These may include:
- Lovable.dev for the website
- Lovable Cloud for protected diagnostic response storage and server processing
- Google Workspace for business email and related services
- WhatsApp for communications where you choose to use it
Some service providers may process information outside the United Kingdom. Where a restricted international transfer of personal data takes place, appropriate safeguards will be used as required by applicable data protection law.
8. How long we keep personal data
Completed diagnostic responses, including any saved optional choices, are retained for 12 months from their first completion. Edits do not restart that period. Automatic deletion runs daily, so deletion from the active response store occurs within 24 hours after the 12-month period ends. Expired responses are excluded from new owner exports. Test responses are kept separate from live responses and follow the same retention rule.
Downloaded CSVs are separate copies and cannot be deleted automatically by this website. The owner must store them securely and delete each response when its original 12-month period ends, including copies held in spreadsheets, shared folders or email attachments. The export includes the original completion time and expiry time for this purpose. A downloaded meeting brief remains under the control of the person who downloaded it.
Deletion from the active response store does not immediately remove copies in Lovable Cloud backups or technical logs. Our website and database are hosted by Lovable Cloud in the European Union (database location: Ireland). Lovable Cloud takes one database backup per day and retains backups for up to approximately 14 days. Backups include the database schema and data. Lovable Cloud platform logs can be viewed for up to 5 days, and Lovable does not document a longer retention period for those logs. Because hosting is in the European Union, hosting itself involves no transfer outside the UK and EU. If a backup is restored, expired responses must be deleted before access or exports resume.
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected.
Enquiry and professional correspondence is retained only while it remains relevant or is reasonably required for business records.
Client, contractual, financial and related records may be retained for up to six years where necessary for legal, tax, accounting or record-keeping purposes.
Audio or video recordings are retained only for the period required for the agreed engagement purpose, unless a different period has been expressly agreed.
9. Your rights
Depending on the circumstances, UK data protection law may give you rights including:
- access to your personal data
- correction of inaccurate personal data
- erasure
- restriction of processing
- objection to processing
- data portability
- withdrawal of consent where consent is the lawful basis
Right to object
You have the right to object at any time to the use of your personal data for direct marketing.
You may exercise your rights by contacting support@humancounterpart.com.
10. Automated decision-making
We do not use personal data to make solely automated decisions that have legal or similarly significant effects on individuals.
11. Security
Our response records and CSV exports do not contain IP addresses. Our diagnostic code does not read or attach an IP address to a response and does not deliberately log response payloads, write credentials or optional choices. This is not a promise that no IP address is processed: hosting and communications providers may process IP addresses and other technical information to deliver and protect their services. Our website and database are hosted by Lovable Cloud in the European Union (Ireland). Lovable Cloud platform logs can be viewed for up to 5 days, and Lovable does not document a longer retention period for those logs.
Meeting briefs are generated in your browser, not uploaded to a PDF service. Email and WhatsApp drafts are opened only when you choose the relevant contact option. If you choose to include a summary, opening WhatsApp passes that draft text to WhatsApp/Meta before you send it to Roger. Roger receives the message only if you send it. Optional role and organisation choices are not included in contact drafts.
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.
12. Complaints
If you have concerns about how we use your personal data, please contact us first at support@humancounterpart.com.
You also have the right to complain to the Information Commissioner’s Office.