Privacy
What this site collects, and where the account lives
This site is something you read, and there is nothing to sign in to here.
The only thing it collects is analytics, after you accept the cookie notice and not before.
Signing in happens on uksrs.org.uk, and this page sets out what an account there holds.
Who is responsible
The controller
Fractional Quest Ltd, company no. 17322105, 71–75 Shelton Street, London WC2H 9JQ, is the controller for this site.
Privacy questions, and requests to use any of the rights below, go to hello@uksrs.org.uk.
Nothing is sold, and nothing you send us trains a model.
What this site collects
Analytics, and only if you accept
This site counts page views with Plausible, and only if you accept the cookie notice.
Until you do, Plausible is not loaded at all.
Plausible sets no cookies, even after you accept.
A tag that has already loaded in the page you are on cannot be recalled, so withdrawing consent stops it from the next page onwards rather than retrospectively.
Our hosting provider logs standard request data (IP address, browser, page and time) in the course of serving each page, for security and reliability.
We count page views with Plausible. It sets no cookies, and it does not load unless you accept. Whichever you choose, your answer is kept in your browser, so we do not ask again. Signing in happens on uksrs.org.uk, where an account holds your name and surname, email address and organisation, and your activity and conversations in the member app.
On your device
Everything this site stores
| What | Set by | When | Why |
|---|---|---|---|
cookie-consent | This site, in local storage | When you answer the notice | To remember your answer, so we do not ask again. Strictly necessary; it never leaves your device. |
| Nothing from Plausible | Plausible | Loaded only after you accept | Plausible counts visits without cookies. |
| Whatever the booking widget needs | Cal.com | Only on the booking page | To run the calendar you opened, under Cal.com’s own policy. |
The rule is regulation 6 of PECR: nothing is stored on your device without your consent unless it is strictly necessary, and the ICO’s guidance explains it.
To change your answer, clear this site’s storage in your browser, and the notice will ask again.
Declining costs you nothing: every page works the same.
No account here
There is no account on this site
This site has no sign-in, no registration and no member area.
The account for everything in the cluster lives on uksrs.org.uk, and no cookie crosses from that site to this one.
Everything about that account — what it holds, for how long, and your rights over it — is in the hub’s policy, uksrs.org.uk/privacy-policy, summarised in the next section.
Signing in
If you sign in on uksrs.org.uk
This site has no sign-in of its own.
The sign-in link in the header takes you to uksrs.org.uk, where the one account for this family of sites is made and held by Fractional Quest Ltd.
Signing in there does not sign you in here: no cookie crosses from uksrs.org.uk to this site.
If you make an account, it holds your name and surname, your email address, your organisation, and your activity and conversations in the member app, including what its assistant remembers.
Your sign-in
Your email address, the name you gave when you signed up (your email address stands in for it if you left it blank, or the name on your Google account), whether your address is verified, how you sign in (with a password or with Google), and your signed-in sessions, which the sign-in service records with the IP address and browser each came from.
Who processes it. Neon, which hosts the sign-in service and sends the codes. Google, only if you choose to sign in with Google.
How long. Until you delete your account.
Your profile
Your first name, your surname, the name you want to be called, and your photo if you upload one.
Who processes it. Neon, which hosts the database.
How long. Until you delete your data or your account.
Your organisation
The organisation you belong to and your role in it, requests to join, and invitations you send (which hold the colleague's email address). The organisation's own record holds its name, Companies House number, email domain and logo.
Who processes it. Neon. Companies House, when you search for your company: that sends the company's name or number to the public register, and nothing about you.
How long. Your membership until you delete your data. An invitation nobody answered is deleted 90 days after it was sent, and a revoked one 30 days after it was revoked; an accepted one is kept as the record of how that person joined.
Your company record
The company you confirmed and the figures you give or tap to confirm (headcount, turnover, balance sheet, year end and others), with the history of every change, and which version of the workspace terms you ticked.
Who processes it. Neon. If you ask the assistant to read your company's filed accounts, Interfaze reads that public document from Companies House to pull out the figures; nothing about you is sent. If your organisation switches on its API or a webhook, the organisation's record (not your name) goes to whoever holds its key, or to the address it sets.
How long. Until you delete your data or your account.
Your activity and conversations
Your messages to the assistant and its replies, your threads and their titles, what you kept in your working file, your plan board and its history, the steps behind each reply, and the text of any tender you upload (never the file itself).
Who processes it. Neon stores it. Vercel hosts the workspace and Railway runs the assistant. Each message, with the context the assistant needs, goes through the Vercel AI Gateway to the model that writes the reply (by default Anthropic's Claude).
How long. Until you delete your data or your account.
What the assistant remembers
Your own words, and the values you confirmed, held as a memory graph so the assistant can recall them in a later conversation. The assistant's replies are not sent to it, and neither is the text of a tender.
Who processes it. Zep, our memory provider.
How long. Until you delete your data or your account; it is erased first, before anything else.
Company look-ups and Slack
When the assistant looks your company up in public sources, the company's name and website, which go to a search provider; nothing else about you is in the search. If your organisation connects Slack, the link between your Slack user and your account, and the Slack threads the assistant answers in.
Who processes it. Exa and Tavily, the search providers. CopilotKit, which relays Slack messages to the assistant and holds those threads. Slack holds the messages under your organisation's own agreement with Slack.
How long. The Slack link and the relayed threads until you delete your data or your account.
Service records
Traces of what the product did (timings, which tool ran, errors, and your account and thread IDs, but not the content of your messages), request logs (IP address, browser, page and time), counters of how many messages your account sent in a minute and in a day, and, if your organisation uses the API, a log line and a counter per request with its IP address.
Who processes it. Pydantic Logfire (traces), Vercel and Railway (request logs), Neon (the counters and the API log).
How long. API request lines for 90 days. Traces and request logs for the periods Logfire, Vercel and Railway set. The counters have no deletion period set yet. None of these is deleted with your account.
That is a summary of the account; the full notice, with the purpose and lawful basis of each item, is the uksrs.org.uk privacy policy.
You can do each of these yourself, in Settings on uksrs.org.uk:
- See and correct: every figure on your company record can be edited, and the old value stays in the history.
- Export: Settings → Privacy → Export as JSON downloads your email, profile, organisation and company record. It does not include your conversations or the assistant's memory; ask us for those and we will send them.
- Delete your data: Settings → Privacy → Delete everything we hold about you erases every store in the account, the assistant's memory first. It leaves your sign-in, so signing in again gives you an empty account.
- Delete your account: Settings → Account → Delete account does all of that and then removes your sign-in. If the sign-in service refuses that last step, the screen says so and you can ask us to finish it.
For anything else about your account, write to hello@uksrs.org.uk.
Booking and email
Cal.com, and your email
The booking page embeds Cal.com’s scheduler; if you book, the name, email address and notes you enter go to Cal.com, under its own privacy policy, and to us, so we can hold the call.
If you email us, we keep your message and our reply so we can answer you; no fixed period is set for deleting them, and we will delete them if you ask.
Your rights
Your rights, and complaints
Analytics rest on your consent (UK GDPR Article 6(1)(a)); hosting logs, bookings and email rest on our legitimate interests in running a secure site and answering what you asked us for (Article 6(1)(f)).
Under the Data Protection Act 2018 and the UK GDPR you can ask to see, correct or delete what we hold about you, or object to how we use it, by writing to hello@uksrs.org.uk.
If you are dissatisfied with how we handle your personal information, you can complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or through its complaint page.
See also the terms of use.
Fractional Quest Ltd · Company No. 17322105 · 71–75 Shelton Street, London WC2H 9JQ · © 2026 Fractional Quest Ltd · Last updated 6 October 2026
Sources
The law and the providers
The legislation behind your rights, the regulator you can complain to, the booking provider, and the public record of the controller.
- legislation.gov.ukUK GDPR, Article 6(1) — lawfulness of processing
Consent for analytics; legitimate interests for hosting logs, bookings and email.
- legislation.gov.ukData Protection Act 2018
With the UK GDPR, the source of your rights over personal data.
- legislation.gov.ukPECR 2003, regulation 6
The rule on storing or reading anything on your device.
- Information Commissioner's OfficeCookies and similar technologies
The regulator’s guidance on the same rule.
- Information Commissioner's OfficeMake a complaint
Where to complain about how we handle your data.
- Cal.comCal.com privacy policy
Governs the booking widget on the booking page.
- Companies HouseFractional Quest Ltd — company 17322105
The controller, on the public register.