Privacy & Policy

Last updated 10 October 2026.

1. Who We Are:

Good Analysis Ltd ("we", "us") decides how the personal data collected through this website and our services is used, which makes us its controller under UK data protection law.

• Company: Good Analysis Ltd, registered in England and Wales, company number 15030464.
• Registered office: c/o Workwell Accountancy, Ground Floor East, Hyde, 38 Clarendon Road, Watford, Hertfordshire, WD17 1JW.
• Email: contact@goodanalysis.co.uk, for anything about your data.

We aren't required to appoint a Data Protection Officer, so privacy questions come to the same address.

2. What We Collect and Why:

What we collect	Why	Our legal basis
What you send through the contact form: name, email, company, company size, the service you're interested in and your message	To reply and talk about working together	Our legitimate interest in answering people who contact us, or taking steps toward a contract at your request
Your Good Analysis Projects account: name, email, profile photo, and the work, comments, files and feedback you add	To run the projects we do for you	Contract
Invoicing details, for clients	Billing and keeping accounts	Contract, and our legal obligation to keep tax records
Technical data: IP address, browser and device, pages requested, and error reports	To keep the site secure and working, block spam and fix faults	Our legitimate interest in a safe, working website
Page views, through Vercel Web Analytics	To see which pages help people	Your consent, only if you accept analytics
Your cookie choices: a random consent ID, what you chose, when, and your country and browser	To show what you agreed to, as the law requires	Legal obligation
News about our services	Sent only if you asked for it, or about similar services if you're a client, and every email lets you opt out	Your consent, or our legitimate interest for existing clients

We don't sell personal data, use it for advertising, or make decisions about you by automated means alone that have legal or similarly significant effects.

3. Who We Share It With:

Only with service providers that process it for us, under contract and on our instructions:

• Vercel (United States): hosts the website, the contact form and Projects, and runs Web Analytics when you accept it.
• Supabase (database in London): stores Projects accounts and work, and consent records.
• Sentry (Germany): receives error reports so we can fix faults. It sets nothing on your device.
• Cloudflare (United States): Turnstile, which checks that contact form messages aren't sent by bots.
• Resend (United States): delivers our emails, including contact form messages to us and Projects notifications.
• Microsoft 365: our email.
• OpenRouter (United States) and the AI model provider it passes requests to: filing feedback from our browser extension (see section 9).
• FreeAgent and our accountants: client invoices and accounts.

We may also share data where the law requires it, to protect our rights or safety, or with a buyer if the business is sold, who would then be bound by this policy.

4. International Transfers:

Some of these providers are in the United States. Where a provider is certified under the UK-US data bridge we rely on that; otherwise we use the ICO's International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Email us for a copy of the safeguards that apply.

5. How Long We Keep It:

• Enquiries that don't lead to work: up to two years after we last spoke.
• Client accounts and project records: while we work together, then up to six years for legal claims.
• Invoices and accounting records: six years, as tax law requires.
• Consent records: two years, then deleted automatically.
• Error reports: up to 90 days.
• Spam protection: the contact form's limit on repeat messages holds an IP address for about an hour.
• Analytics: Vercel keeps counts of page views, not a profile of you.

6. Cookies and Similar Technologies:

We ask before using anything optional. On your first visit a banner lets you accept or reject analytics; you can change your mind at any time with Cookie settings, at the foot of every page (or beside the sign-in box, in Projects under Your account, and in the banner's cog). Your choice lasts six months, then we ask again. We record each choice, as section 2 describes, so we can show what you agreed to.

Necessary items keep the site working and secure, so they don't need your consent. Analytics runs only if you accept. We don't use advertising or marketing cookies, and nothing here follows you to other sites. This is everything the site stores on your device:

Name	Type	Set by	What it does	How long	Category
goodconsent	Cookie	Good Analysis	Remembers your cookie choices.	6 months	Necessary
sb-gebbrcclheyacxtcmzql-auth-token…	Cookie	Good Analysis Projects (Supabase)	Keeps you signed in to Good Analysis Projects. Set only when you sign in.	Until you sign out, at most 400 days	Necessary
auth-…-token	Cookie	Good Analysis	Keeps our staff signed in to site administration.	15 minutes to 7 days	Necessary
admin-auth-…	Session storage	Good Analysis	Remembers for two minutes whether you're signed in to site administration, so the menu shows the right links. Holds nothing about you.	Until you close the tab	Necessary
ai-sound	Local storage	Good Analysis	Remembers whether you turned the sound on at ai.goodanalysis.co.uk.	Until you clear it	Necessary
ga-static-…	Cache storage	Good Analysis	Keeps copies of the site's own files (scripts, styles, images) so pages load quickly. Holds nothing about you.	Until the site updates	Necessary
Vercel Web Analytics	No storage	Vercel	Counts page views and where visits come from. Sets no cookies and doesn't follow you to other sites. Runs only if you accept analytics.	None on your device	Analytics

7. Your Rights:

Under UK data protection law you can ask us to:

• Access: give you a copy of the personal data we hold about you.
• Correct: fix anything inaccurate or incomplete.
• Delete: erase your data where we no longer have a good reason to keep it.
• Restrict: pause using your data while a concern is looked into.
• Object: stop using your data on the basis of our legitimate interests, and stop marketing at any time.
• Transfer: send data you gave us, in a common format, to you or another organisation.
• Withdraw consent: at any time, without affecting what happened before. For cookies, use Cookie settings.

Email contact@goodanalysis.co.uk. We reply within a month, and there's no charge.

You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd be grateful for the chance to put things right first.

8. Security, Children and Other Websites:

We protect your data with access controls, encryption in transit and providers held to the same standards, but no system is completely secure. Our services aren't meant for children under 13, and we don't knowingly collect their data; if we find we have, we delete it. Links to other websites are covered by their own privacy policies, not this one.

9. Good Analysis Projects Browser Extension:

Our browser extension (for Chrome and Safari) lets Good Analysis staff and our clients leave feedback on websites we work on. It is only useful with a Good Analysis Projects account.

• What it reads: the address of the page you are on, checked inside your browser against the list of websites linked to your Projects account. Addresses of other pages never leave your browser.
• What it sends to us, only on linked websites: the page address without anything after a ? or #, to show the feedback already left on that page; and when you leave feedback, the full page address, what you write, where on the page you placed it (the element and position), your browser and screen size, and, if you leave the Screenshot option ticked, a screenshot of the visible part of the page.
• Where it goes: into your Projects workspace, stored with our hosting and database providers, visible to Good Analysis and, where the feedback is shared, to the people in your organisation who use Projects.
• Automatic filing: to put new feedback in the right project, its text, page address, the clicked element's text and the screenshot are sent to an AI model through OpenRouter, a service provider that passes the request to the model's provider. This is only used to decide where the feedback belongs.
• Sign-in: the extension keeps its own Projects sign-in in your browser's extension storage and only accepts one from goodanalysis.co.uk. Signing out from the extension removes it and ends that sign-in on our side.
• What it does not do: it does not track your browsing, show adverts, or sell data, and it shares nothing beyond the service providers above.

You can ask us to remove your feedback at any time, and uninstalling the extension removes everything it stored in your browser.

10. Changes to This Privacy Policy:

We'll post any changes on this page and update the date at the top. If a change affects how we use data you've already given us, we'll tell you directly.

11. Contact Us:

Email contact@goodanalysis.co.uk, write to Good Analysis Ltd at the registered office above, or use the Contact page.