Privacy policy

This privacy policy explains how BehaviourStatements.com collects, uses, and protects your personal data. It applies to all visitors to our website and is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Last updated: 25 July 2026

Who we are

BehaviourStatements.com is an independent UK website that provides guidance on Civil Service applications. For the purposes of data protection law, we are the data controller of the personal data we collect through this website.

If you have any questions about this privacy policy or how we handle your data, please contact us at [email protected].

What data we collect

We collect only the data we need to run the website and improve our content. The types of data we may collect include:

Data you provide directly

  • Email address: If you subscribe to our email list or contact us, we collect your email address. We use this only to send you the content you requested or to respond to your enquiry.
  • Message content: If you contact us through email, we collect the content of your message so we can respond.

Data collected automatically

  • Analytics data: We use privacy-focussed analytics to understand how visitors use our site. This includes which pages are visited, how long visitors stay, and what device and browser they use. We do not use this data to identify individuals.
  • Cookies: We use essential cookies to make the site work (for example, to remember your preferences). We do not use tracking cookies for advertising purposes. See our cookies section below for more detail.
  • Server logs: Our hosting provider records technical data such as your IP address, browser type, and the pages you request. This is standard practice for security and performance monitoring.

How we use your data

We use your data only for the purposes for which it was collected:

  • To provide the content and services you request (for example, sending you email updates)
  • To respond to your enquiries and feedback
  • To improve our website content and user experience
  • To monitor website performance and fix technical issues
  • To comply with legal obligations

We do not sell your personal data to third parties. We do not share your data with the Civil Service, the UK Government, or any other organisation except as described in this policy.

Our legal basis for processing

Under UK GDPR, we must have a legal basis for processing your personal data. The bases we rely on are:

  • Consent: When you subscribe to our email list, you consent to us sending you emails. You can withdraw this consent at any time by clicking the unsubscribe link in any email or by contacting us.
  • Legitimate interests: We process analytics and server log data to understand how our site is used and to improve it. We have assessed that this processing is necessary and does not unfairly impact your rights.
  • Legal obligation: We may need to process your data to comply with applicable laws, such as responding to a court order or regulatory request.

How long we keep your data

We keep your data only for as long as we need it:

  • Email subscribers: We keep your email address for as long as you remain subscribed. If you unsubscribe, we delete your email address within 30 days.
  • Contact messages: We keep emails and their content for up to 12 months so we can refer back to them if needed, after which they are deleted.
  • Analytics data: We retain aggregated analytics data indefinitely, but individual-level data is anonymised or deleted after 26 months.
  • Server logs: Our hosting provider retains server logs for up to 30 days for security purposes.

Your rights under UK GDPR

You have the following rights in relation to your personal data:

  • Right to access: You can ask us for a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct any inaccurate or incomplete data.
  • Right to erasure: You can ask us to delete your personal data in certain circumstances.
  • Right to restrict processing: You can ask us to limit how we use your data.
  • Right to data portability: You can ask us to transfer your data to another organisation in a structured format.
  • Right to object: You can object to our processing of your data based on legitimate interests.
  • Right to withdraw consent: If we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request.

Third-party services

We use a small number of third-party services to run the website:

  • Hosting provider: Our website is hosted on a UK-based server. Our hosting provider processes server logs as described above.
  • Analytics: We use a privacy-focussed analytics service that does not use cookies for tracking and does not share data with advertising networks.
  • Email service: If you subscribe to our email list, your email address is stored by our email service provider, which is based in the UK and compliant with UK GDPR.

We only use services that provide adequate protection for your data. We do not use services that transfer your data outside the UK or European Economic Area without appropriate safeguards.

Cookies

Cookies are small text files placed on your device when you visit a website. We use the following types:

  • Essential cookies: These are necessary for the website to function. They do not collect personal data and cannot be turned off.
  • Preference cookies: These remember your settings (for example, whether you have hidden the STAR breakdown on example pages). They do not track you across the web.

We do not use advertising cookies, tracking cookies, or social media cookies. We do not share cookie data with third-party advertisers.

Data security

We take reasonable steps to protect your personal data from loss, misuse, and unauthorised access. This includes using secure hosting, encrypted connections (HTTPS), and limiting access to your data to those who need it.

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

Children's privacy

Our website is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us and we will delete it.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised date. If we make significant changes, we will notify email subscribers.

How to complain

If you have a concern about how we handle your data, please contact us first at [email protected]. We will do our best to resolve the issue.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. You can contact the ICO at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Telephone: 0303 123 1113
Website: ico.org.uk

More information