Privacy policy

Earworm Agency Limited, registered in England and Wales, company no. 14843820, VAT registration no. 449 7546 43. For anything in this policy, email privacy@earworm.co.

We are the data controller for the information you give us through Optics.

Your answers. Your responses to the assessment questions. While you answer, these are saved in your own browser so you can pick up where you left off. They contain no personal details.

Contact details. When you ask for your full report: your name, email address, company, website, role and any optional answers about budget and approvals, together with the consent choices you made.

Website information. If you agree, we read public pages of your website and of competitors you name, to suggest details and tailor your report.

Account data. For Earworm staff only: email address and a record of sign in.

Technical data. Standard server logs needed to run and secure the service.

Optics uses only essential browser storage: to save your progress through the assessment, to remember your report, to remember that you have seen the cookie notice, and to keep staff signed in. We do not use advertising or tracking cookies.

• To produce your score and report. Basis: legitimate interests in providing the service you asked for.
• To follow up about your report, where you agreed to this. Basis: consent, which you can withdraw at any time.
• To keep the service secure and meet legal obligations. Basis: legal obligation and legitimate interests.

• Report requests and contact details: up to 24 months.
• Answers saved in your browser: until you clear them or your browser storage.

We do not sell personal data. We use a small number of suppliers who process data on our behalf: our cloud database and application hosting provider, a website reading service, and an AI provider that helps write the report text. Each is bound by a data processing agreement. We may also disclose data where the law requires it.

We operate under the UK GDPR and the Data Protection Act 2018, and under the EU GDPR where it applies. You have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. To exercise any of these, email privacy@earworm.co. We respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EU.

Some suppliers are based in the United States. Where personal data is transferred outside the UK or EEA we rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, together with the UK extension to the EU-US Data Privacy Framework where the supplier is certified.

Data is encrypted in transit, and only authorised Earworm staff can read report requests.

If we change this policy we will update the date at the top of this page.

Email privacy@earworm.co, or write to Earworm Agency Limited at the registered address shown on our company record.