Privacy
A concise account of website data.
This notice describes the website as currently configured. It should receive final legal review before public launch and be updated if services or data practices change.
Scope
This notice applies to the public website of the Institute of Behavioural Performance. It does not describe any separate Behavioural Performance Index assessment service, which would require its own detailed privacy notice before collecting assessment responses.
Contact-form data
When you submit the contact form, the website collects your name, email address, optional organisation, area of interest, message and consent confirmation. This information is used to understand and respond to your enquiry.
Please do not include assessment responses, health information, payment details or other sensitive information in the message field.
Hosting and processing
The site is prepared for hosting on Netlify. When deployed there, Netlify may process form submissions, request information and security logs as part of providing hosting, spam protection and form delivery. The final site owner should review Netlify’s current terms, data-processing information, retention settings and notification configuration before launch.
Analytics
Analytics are disabled unless the site owner supplies a Google Analytics 4 measurement ID. When no ID is configured, the website does not load the Google Analytics script.
If analytics are enabled, this notice and the consent approach must be reviewed for the locations and audiences the website serves. A consent banner may be required depending on configuration, applicable law and whether non-essential identifiers are stored or accessed.
Cookies
The website does not intentionally set non-essential cookies in its default configuration. Hosting and security providers may use necessary technical mechanisms. Enabling analytics or other services may change this position.
Server logs
Hosting providers typically record technical information such as IP address, browser details, requested pages and timestamps for delivery, security and reliability. The Institute does not use this notice to claim control over provider retention settings that have not yet been configured.
Retention and access
Contact data should be retained only as long as needed to respond, maintain an appropriate record of the enquiry and meet applicable obligations. The site owner must set and document the final retention practice before launch.
Data enquiries
Use the contact form and select “General enquiry” to ask about website data, request access or raise a concern. A final contact notification address must be configured in Netlify before public launch.
Legal review
This is a practical development-stage notice, not legal advice. It requires owner approval and legal review appropriate to the Institute’s final entity, operating locations, providers and data practices.