Privacy Policy

About this policy

This Privacy Policy explains how Business Diagnostic (the "Service", available at BusinessDiagnostic.co.uk) collects, uses and protects information when you use our free business diagnostic tools. We have written it in plain language so you can understand exactly what happens to your information.

The data controller responsible for your personal data is Ased Iqbal trading as Thinkerz Consulting ("we", "us" or "our"). For any privacy-related questions or requests, please contact us at hello@thinkerz.co.uk.

The Service provides three free, structured self-diagnostic assessments — the Financial Health Check, the Operational Risk & Efficiency Scan, and the Commercial Opportunity Map. Each assessment asks you a series of questions about your business, calculates a score using a transparent weighting framework, and presents you with a results dashboard and downloadable PDF report.

You do not need to create an account, log in, or provide an email address to use any of the diagnostics or to receive your results.

Information we collect

We collect only the information necessary to operate the Service. The categories of information are set out below.

Assessment responses

When you complete a diagnostic, your answers to the assessment questions are processed by the scoring engine to calculate your overall score, category scores and traffic-light (Red/Amber/Green) status. Your responses are stored so that your results can be retrieved and displayed to you, and so that the PDF report can be generated.

Company or business name

At the end of each assessment, you have the option to enter a company or business name. This is entirely voluntary. If provided, it is used solely to personalise your results dashboard and PDF report. If you do not provide a company name, your report will be headed "Your Diagnostic Report" instead.

Generated assessment results

The Service generates an overall score, category scores, findings, recommendations and a unique reference number (for example, FHC-AB12CD) for each completed assessment. These generated results are stored so that you can access them via a non-guessable result link.

Ask a Question submissions

If you choose to submit a question about your results through the "Ask a Question" form, we collect:

• Your name;
• Your email address (so that we can reply to you);
• Your company name, if you choose to provide it; and
• Your question or message.

Your diagnostic results (assessment title, scores, category breakdown and key findings) are automatically attached to your enquiry to provide context, so that we can respond to your question meaningfully without you needing to copy information across.

Technical and security information

As with any web application, certain technical information is necessarily processed when you use the Service, including your IP address, browser type and the timing of requests. This information is used to operate the Service securely, to prevent abuse, and to apply rate limiting — for example, limiting the number of "Ask a Question" submissions that can be made from a single result within a given timeframe.

How we use your information

We use the information we collect for the following purposes:

• Providing the diagnostic: processing your assessment responses to calculate scores, generate findings and recommendations, and produce your results dashboard and PDF report.
• Maintaining result records: storing your assessment results so that they can be retrieved through a non-guessable result link during and after your active session.
• Responding to enquiries: receiving, reviewing and replying to questions you submit through the "Ask a Question" form.
• Security, abuse prevention and rate limiting: protecting the Service from misuse, applying submission limits, and preventing duplicate or automated spam submissions.
• Operating and improving the Service: tracking anonymised usage events (such as the number of assessments started or completed) to help us understand how the diagnostics are used and to identify areas for improvement.

No account required

You do not need to create an account, register, or provide an email address to use any of the diagnostic tools or to access your results or PDF report. The only time we ask for an email address is if you voluntarily choose to submit a question through the "Ask a Question" form.

How your results are stored and accessed

When you complete an assessment, your responses and generated results are stored in the Service's database. Each result is assigned a non-guessable, randomly generated access token, which forms part of the result link (for example, /results/<token>). Your results can only be accessed by someone who has that exact link — they are not listed publicly, and result links are not indexed by search engines.

During your active session, your most recent result is also stored temporarily in your browser's session storage so that you can navigate between the results dashboard and other pages without losing your place. This temporary data is cleared when you close your browser.

Ask a Question — how your enquiry is handled

When you submit a question through the "Ask a Question" form, your enquiry is validated and stored in the Service's database. A notification email is then sent through our connected Gmail integration to alert us that a new question has been received. This email includes your name, email address, company name (if provided), your question, and a summary of your diagnostic results for context.

Your email address is used as the "Reply-To" address on the notification email so that we can respond directly to you. The notification email is sent on a best-effort basis — if the email delivery fails for any reason, your enquiry is still stored in the database and can be retrieved by us independently.

To protect against abuse, the Service limits the number of "Ask a Question" submissions that can be made for a single result to three within any one-hour period, and prevents identical duplicate submissions within a five-minute window.

Data retention

Assessment results are retained so that you can access your results via your result link and so that we can maintain an accurate record of the diagnostics that have been completed. We may retain results for as long as they remain useful for the purposes described in this policy, and may subsequently delete or anonymise them.

"Ask a Question" submissions are retained for as long as is necessary to respond to your enquiry and to maintain a record of the correspondence. If you ask us to delete your enquiry data, we will do so where we are not legally required to retain it.

Anonymised, aggregated usage data may be retained indefinitely for analytical purposes. This data does not identify you personally.

Data security

We take reasonable and proportionate steps to protect the information collected by the Service. These measures include:

• Storing assessment results behind non-guessable access tokens, so that results are only accessible to someone who has the exact result link.
• Applying server-side validation, rate limiting and duplicate-submission protection on the "Ask a Question" form to prevent abuse.
• Restricting access to enquiry records to authorised administrators only.
• Configuring the Service so that result pages and assessment-runner pages are not indexed by search engines.

No method of transmission over the internet or method of electronic storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

Cookies and analytics

The Service uses minimal cookies and similar technologies for the purpose of operating the application and collecting anonymised analytics. We track basic, anonymised usage events — such as the number of assessments started, completed and viewed, and the number of PDF reports downloaded — to help us understand how the Service is used and to improve it.

We do not use cookies for advertising, do not engage in cross-site tracking, and do not sell any information to third parties.

Sharing of information

We do not sell your information. We do not share your assessment responses or results with third parties, except as described in this policy (for example, the notification email sent when you submit an "Ask a Question" enquiry, which is processed through our email integration).

We may disclose information where required to do so by law, or where we believe in good faith that disclosure is necessary to protect the rights, property or safety of the Service, our users or others.

Your data protection rights (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have certain rights in relation to your personal data, including:

• The right to be informed about how your data is used (this policy);
• The right of access to your personal data;
• The right to have inaccurate personal data rectified;
• The right to erasure (also known as the right to be forgotten);
• The right to restrict or object to the processing of your data; and
• The right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately.

The ICO can be contacted at ico.org.uk or by calling 0303 123 1113.

To exercise any of these rights, or if you have any questions about how we handle your information, please contact us at hello@thinkerz.co.uk.

Children's privacy

The Service is designed for use by business owners, operators, investors, advisers and other adults engaged in evaluating or supporting businesses. It is not directed at children, and we do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can take appropriate steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the Service or for legal, operational or regulatory reasons. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact us

If you have any questions, concerns or requests relating to this Privacy Policy or the way we handle your information, please email hello@thinkerz.co.uk.