Polarisk · Privacy
What we collect, and what we never collect
Privacy is not a footnote for us. It is how the assessment is designed. Here is the promise in plain English first, then the formal notice underneath.
- What we never do
-
- We never show a result for fewer than five people. This floor is enforced on the server, so no individual can be identified from any figure we report.
- We never build per-employee dashboards. There is no screen, anywhere, that shows how one named person answered.
- We never put trackers on this website. No analytics, no advertising pixels, no third-party scripts. You can check the page source.
- We never sell or share your data for marketing. Survey data is used to produce your report, and nothing else.
- What we do
-
- The readiness check stores nothing on our servers. It runs and scores entirely in your browser. Close the tab and it is gone.
- The Assessment survey collects answers at group level. We report them by team or site, only where the group is large enough to protect identity.
- We hold survey data under a written agreement with your organisation, for a defined period, then return or delete it.
The formal notice
Who we are
Polarisk provides physician-signed psychosocial risk assessment. In this notice, "we" and "Polarisk" mean the Polarisk business operating polarisk.co.uk. For anything in this notice, you can contact us at privacy@polarisk.co.uk.
Controller and processor
For visitors to this website, Polarisk is the data controller for the very limited information described below. For a Polarisk Assessment, your organisation is the data controller for its workforce survey and Polarisk acts as its data processor, under a written data processing agreement and on documented instructions.
What this website collects
This website does not use analytics, advertising or third-party tracking, and it sets no non-essential cookies. Our hosting provider processes standard server logs, including IP address and request information, to deliver the site securely and guard against abuse. Booking a call is handled by our scheduling provider on its own pages; if you book, you give that information directly to them.
The readiness check
The readiness check runs entirely in your browser. Your answers are scored on your own device and are not sent to or stored on our servers. If you arrive with information in the web address, such as a sector or organisation size from an outreach link, it is used only to tailor what you see on the page and is not recorded by us.
The Assessment survey
When your organisation commissions an Assessment, staff complete a validated survey aligned to ISO 45003. We collect answers to produce group-level findings. Results are reported at team or site level only, never as individual scores, and only where the group is large enough that no one can be singled out. No result is ever shown for fewer than five people, a floor enforced on the server. We do not ask for or store health records about identifiable individuals, so the report is management information about groups, not a clinical record of any person.
Lawful basis
Where Polarisk is the controller for website data, our lawful basis is our legitimate interest in running a secure website. Where your organisation is the controller for an Assessment, it relies on its own lawful basis, typically its legitimate interests and its legal obligation to assess and manage psychosocial risk at work, and Polarisk processes the data only on its instructions.
Retention
Server logs are kept only as long as needed for security and troubleshooting, then deleted. Assessment survey data is held for the period set in the agreement with your organisation, after which it is returned or securely deleted. We keep the finished report for as long as our client relationship and our legal obligations require.
Your rights
Under UK data protection law you have rights to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability, subject to the usual conditions. Because survey answers are aggregated and hold no identifier, we often cannot single out one person's response, which is by design. If your data sits within an Assessment, please raise your request with your employer as the controller, or contact us and we will help. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
International
We deliver assessments in the United Kingdom, Australia and the United States. Where data is processed across borders, we use appropriate safeguards and set the details out in the agreement with your organisation.
Changes
If we change this notice, we will update the date at the top of the page. Material changes affecting an active Assessment will be raised with your organisation directly.
Contact
Questions about this notice or your data can go to privacy@polarisk.co.uk.