Privacy notice

Who we are

frankawuku.com is Frank Awuku’s website. Frank provides his services through Analysis People Ltd, a company registered in England and Wales, company number 10573000.

Analysis People Ltd is the data controller for the personal information described in this notice. In this notice, “we” and “us” mean Analysis People Ltd.

For any question about your information, email hello@frankawuku.com.

Information we handle

• When you send a message. Your name, email address, organisation if you give it, the topic you choose and your message.
• When you use the Change Adoption Health Check. Your answers stay in your browser tab and are normally cleared when you close it. If you download the PDF or ask for it by email, your answers are sent to our server to create the report and we do not store them. If you ask for the report by email, we use your email address to send it. The emailed report includes your answers and is delivered by our email provider, Resend. Any first name, organisation and role you choose to give are passed to Frank with your route, your overall result, evidence coverage, the areas where you scored lowest and any context you gave about the change, but not your individual answers. Frank may contact you personally about your report. That follow-up does not add you to any mailing list.
• When you book a call. Your name, email address, the time you choose and anything you add on the booking form.
• When you email us. Whatever you choose to include.
• When you visit the website. Technical information such as your IP address, browser and device type. Our host uses it to deliver pages, and our spam checks use it when you send a message. Our analytics counts page visits and a few Health Check steps, without identifying you (see Cookies and tracking).
• When we work with your organisation. The information needed to deliver the agreed service. See Work with organisations below.

You do not have to give us any information, but we need your name and email address to reply to you.

We do not buy, rent or scrape personal information from other sources.

Why we use it

UK data protection law requires a lawful basis for each use of personal information. These are ours.

Replying to enquiries and arranging calls

Legitimate interests: responding to people who contact us about our work. Where you ask about working with us, also taking steps at your request before entering into a contract.

Sending a Health Check report you ask for, and letting Frank see who asked

Legitimate interests: sending the report you asked for, and letting Frank follow up with you personally about it. Asking for a report does not add you to any mailing list.

Delivering agreed services and keeping business records

Contract, where we have an agreement with you or your organisation. Legal obligation, for the financial and tax records we must keep.

Understanding how the website is used, in aggregate

Legitimate interests: knowing which pages and steps are used, in aggregate, so we can improve them.

Keeping the website secure, preventing spam and limiting repeat submissions

Legitimate interests: protecting the website and our inbox from abuse, so that genuine messages get through.

Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time by emailing hello@frankawuku.com.

We do not make decisions about you by automated means that have legal or similarly significant effects. The spam check on the contact form and the Health Check email form runs automatically. If it stops a genuine message, you can always email us instead.

Work with organisations

When we work with an organisation, we may handle information about its people, such as workforce survey responses, interview notes and the outputs of workshops.

This is done under a written agreement with the client organisation. The organisation is usually the controller of that information, and Analysis People Ltd acts as its processor, using the information only on its instructions and for the agreed work.

Survey responses are reported in aggregate, so individuals are not identified in what we share with the organisation. People taking part are given separate privacy information for that project.

Spam protection

The contact form and the Health Check email form have a few checks to keep out automated spam.

• Cloudflare Turnstile. A check that tells people from bots. Most visitors never see it. To run it, Cloudflare processes signals from your browser and device, and your IP address. Cloudflare says it uses this information to provide the check, not for advertising.
• Rate limiting. A short-lived counter, keyed to your IP address and stored with Upstash, limits how many messages can be sent in a short time. The counter expires within minutes.
• Hidden checks in the form. A field that only bots fill in, on both forms, and on the contact form a check on how quickly it is sent. These use no extra personal information.

Providers

We use a small number of providers to run this website and our services. They handle personal information on our behalf, or in their own right where they say so in their own privacy policies.

Vercel

Hosts this website. Like any web host, Vercel processes technical information, such as IP addresses and browser type, to deliver pages and keep the service secure, and keeps server logs. It also runs the code that creates Health Check reports. A report is created when you ask for it and is not stored. Vercel also provides Vercel Web Analytics, which counts page visits and a few Health Check steps without cookies. See Cookies and tracking.

Resend

Delivers the messages you send through the contact form to our inbox, and delivers Health Check reports you ask for by email.

Calendly

Runs the booking calendar on the contact page. Nothing from Calendly loads until you choose to show the calendar. Opening it loads Calendly’s own cookies, analytics and marketing tools under Calendly’s privacy policy, and Calendly acts as a separate controller for that. When you book, Calendly receives your name, email address, the time you choose and any answers you give on the booking form.

Cloudflare

Provides Turnstile, the check on the contact form and the Health Check email form that tells people from bots. See Spam protection.

Upstash

Stores the short-lived counters that limit repeat submissions of the contact form and the Health Check. See Spam protection.

Substack

Publishes Frankly, our only newsletter. If you subscribe, you do so on Substack, and Substack manages that subscription. Substack’s own privacy policy applies to your subscription. This website does not collect newsletter sign-ups and does not pass your details to Substack. The Frankly page on this site lists recent posts from Substack’s public feed, and their cover images load from Substack’s servers, which receive your IP address and browser details as part of delivering them.

We do not sell your information or share it for anyone else’s marketing.

International transfers

Some of our providers, including Vercel, Resend, Calendly, Substack, Cloudflare and Upstash, may process personal information in the United States or elsewhere outside the UK.

Where that happens, the transfer relies on UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, or on the safeguards approved by the Information Commissioner: the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Email hello@frankawuku.com if you would like more detail about the safeguard for a particular provider.

Storage and retention

We keep personal information only for as long as we need it for the purpose it was given, or as the law requires.

Enquiries and related emails

Up to 2 years after our last contact with you. If the enquiry leads to working together, it becomes part of the client records below.

Health Check answers

Not stored by us. They stay in your browser tab and are normally cleared when you close it. If you download or email a report, your answers are sent to our server to create it and we do not store them. An emailed report, which includes your answers, is delivered by Resend, which keeps a record of sent emails for the period set by its plan.

Health Check report requests

The notification Frank receives (your email address, any optional details you gave, your route, your overall result, evidence coverage, the areas where you scored lowest and any context you gave about the change, but not your individual answers) is kept like an enquiry, for up to 2 years. Resend keeps a record of sent emails for the period set by its plan, then deletes it.

Call bookings

Held in our Calendly account for as long as it holds the booking, and deleted within 2 years of the call.

Client and contract records

6 years after the engagement ends, to meet tax and legal requirements.

Rate-limit counters

Minutes. Each counter expires automatically at the end of its time window.

Website analytics

Aggregated counts kept by Vercel for the period set by its plan. No cookies, and nothing that identifies you.

Server logs

Kept by Vercel for the period set by our hosting provider’s plan, then deleted.

Information about client work is kept for the period set out in the agreement with the client organisation.

Cookies and tracking

This website does not set cookies of its own. It does not use advertising pixels.

This website uses Vercel Web Analytics to count page visits and a few Health Check steps (for example, starting it, finishing it and downloading the report). It does not use cookies and does not track you across other sites. It never receives your individual answers, your email address or anything you type. For the Health Check it records which route you took, the overall result band and how many answers were Not sure in broad groups, without anything that identifies you. It also records whether you asked for the report by email, how far through you got, which kind of problem stopped an emailed report, and which next-step link you chose.

The Health Check keeps your answers in your browser’s session storage so that you can go back and refresh the page. It is normally cleared when you close the tab, and it is only sent to us if you download or email a report.

The booking calendar on the contact page is provided by Calendly. Nothing from Calendly loads until you choose to show the calendar. When you do, Calendly loads its own cookies, analytics and marketing tools under Calendly’s own privacy policy, and Calendly acts as a separate controller for that information. You can book without the calendar by emailing us instead.

Cloudflare Turnstile does not use tracking cookies, but it does process the browser signals described under Spam protection.

Fonts are served from this website, not from a third party. Links to LinkedIn and YouTube only send information to those sites if you choose to follow them.

Your rights

Under UK data protection law, you can ask us to:

• tell you what personal information we hold about you and give you a copy
• correct information that is wrong or incomplete
• delete your information
• restrict how we use it
• stop using it, where we rely on legitimate interests or for marketing
• pass it to you or another organisation in a usable format

Contact hello@frankawuku.com if you have a question about your information or want to make a request. We will respond within one month.

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Changes to this notice

We will update this notice when our practices change and show the date of the latest version at the top of this page.