This policy covers what personal data DataRooms.uk collects, why, who receives it and what rights you have. It is written under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Who we are
DataRooms.uk is operated by the DataRooms.uk editorial team, which is the controller of personal data processed through this site. If you need the legal entity’s details, ask us via the contact page. The same page is the way to raise any question or request about your data.
The short version
- The site is static. No account is needed and we do not ask for your name.
- We use Google Analytics 4 and PostHog to understand how the site is used. PostHog includes session replay, with everything typed into form fields masked.
- On your first visit, a notice at the foot of the screen asks whether you accept or reject analytics. You can change your mind at any time.
- We do not sell personal data or use it for advertising.
What we collect and why
Information collected automatically
When you load a page, your browser sends standard technical information such as your IP address, browser type, device type and the page requested. Our hosting provider needs this to serve pages and to filter out attacks and automated abuse.
Unless you reject analytics, we also collect usage information through our analytics tools:
- Google Analytics 4 records pages viewed, approximate location, device and browser details, how you arrived and which links you clicked.
- PostHog records page views, page exits and interactions such as clicks and scrolling. Its session replay feature reconstructs how pages were used so we can find confusing layouts and broken elements. All input fields are masked, so nothing you type is captured.
Lawful basis: our legitimate interests in understanding which content is useful, fixing problems and improving the site. Where the law requires consent or a right to object for storing information on your device, we rely on the choice you make in the cookie notice.
Information you send us
The contact form is not active yet. When it is, messages sent through the contact page will be delivered to us by an email service provider, and we will use your name, email address and message only to reply and to keep a record of the conversation. Lawful basis: our legitimate interest in responding to enquiries, or steps you ask us to take.
Affiliate links
When you click a link labelled “Affiliate”, you leave our site for a provider’s website, sometimes via a short redirect on our own domain. We may count the click, but we do not pass your name or contact details to the provider. The provider, or an affiliate network acting for it, may set its own cookies once you arrive, and its own privacy policy applies from that point. See our advertising disclosure for how affiliate links work.
Cookies
We use cookies and local storage only for analytics and to remember your choice. We use no advertising cookies.
When you first visit, a notice at the bottom of the screen offers Accept and Reject. Analytics run while the notice is shown. If you choose Reject, Google Analytics is told not to store analytics cookies on your device and PostHog does not load on future visits, and any PostHog recording already in progress is stopped. Your choice is saved in your browser’s local storage so we do not ask again. To change it, clear this site’s data in your browser settings and the notice will reappear.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
dru_consent | DataRooms.uk | Remembers whether you accepted or rejected analytics (local storage, not a cookie) | Until you clear site data |
_ga | Google Analytics 4 | Distinguishes one browser from another for usage statistics | Up to 2 years |
_ga_<container-id> | Google Analytics 4 | Keeps track of the current session | Up to 2 years |
ph_<project-key>_posthog | PostHog | Identifies the browser and session for product analytics and session replay | Up to 1 year |
Names and lifetimes are set by the providers and may change. Browsers also let you block or clear cookies yourself; doing so can change how some websites behave.
Who we share data with
These service providers process data for us under contract:
- Cloudflare hosts and delivers the site and protects it against attacks.
- Google provides Google Analytics 4.
- PostHog provides product analytics and session replay.
- An email service provider will handle contact form messages once the form is enabled.
Personal data is never sold, and none of it is passed to the data room providers we review.
International transfers
Some of our service providers process data outside the UK, including in the United States. Where that happens, we rely on recognised safeguards, such as the UK Extension to the EU-US Data Privacy Framework where the recipient is certified, or the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses.
How long we keep data
- Google Analytics data is kept for 14 months, after which it is deleted automatically.
- PostHog analytics and session replay data are kept for the retention period set in our PostHog account, and no longer than 12 months.
- Contact messages will be kept for up to two years after the conversation ends, unless we need them longer to deal with a dispute.
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have data erased in certain circumstances;
- restrict or object to processing, including processing based on legitimate interests;
- data portability, where applicable;
- withdraw consent at any time, where we rely on it.
Because analytics data is pseudonymous, we may need information from you, such as the approximate date and time of a visit, to find records relating to you. To exercise any right, contact us through our contact page. We will respond within one month.
Complaints
If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk or by calling 0303 123 1113.
Updates to this notice
This notice will be revised when our tools or the law change. The date at the top of the page shows when it was last revised.