Legal

Privacy Policy

Last updated: April 2026

    We keep this simple. We collect only what we need, we don't sell your data to anyone, and you can ask us to delete it at any time.
  

Who we are

This website is operated by RS Works Ltd, trading as The Covered Collective. We are registered in England and Wales, Company Number 17187693. Our contact email is hello@thecoveredcollective.co.

For the purposes of UK GDPR, RS Works Ltd is the data controller for personal data collected through this website.

What data we collect and why

We collect personal data in two ways on this site:

Contact form — when you use the contact form we collect your name, organisation, email address and message. We use this solely to respond to your enquiry. Our legal basis is legitimate interests — you have reached out to us and we have a legitimate interest in responding.

MBA paper request — when you request a copy of the research paper we collect your name, organisation and email address. We use this to send you the paper and to understand who is engaging with our research. Our legal basis is legitimate interests.

We do not collect any special category data. We do not use your data for automated decision-making or profiling. We do not use your data for marketing without your explicit consent.

How your data is stored

Form submissions are processed by Formspree, a third-party form handling service. Formspree stores submissions on its servers for up to 30 days on our free tier. Formspree is GDPR-compliant and processes data in accordance with its own Privacy Policy.

Emails sent to us are stored in our Google Workspace account, which is GDPR-compliant and governed by Google's data processing terms.

We do not store your personal data in any database of our own.

How long we keep your data

Form submissions via Formspree: deleted automatically after 30 days from Formspree's servers
Emails: retained for as long as reasonably necessary to manage our correspondence, typically no longer than 2 years

You can ask us to delete your data at any time — see Your Rights below.

Who we share your data with

We do not sell, rent or trade your personal data. We share it only with the processors listed above (Formspree, Google Workspace) who act on our instructions and are bound by data processing agreements.

Cookies

This website does not set any cookies of its own. Formspree may set functional cookies when processing form submissions. This website is hosted on GitHub Pages, which does not set tracking cookies. We do not use any analytics, advertising or tracking tools.

Your rights under UK GDPR

You have the right to:

Access — request a copy of the personal data we hold about you
Rectification — ask us to correct inaccurate data
Erasure — ask us to delete your data
Restriction — ask us to limit how we use your data
Objection — object to our use of your data where we rely on legitimate interests
Portability — request your data in a portable format

To exercise any of these rights, email us at hello@thecoveredcollective.co. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top of this page will always reflect the most recent version. Material changes will be noted here.

Contact

Any questions about this policy or how we handle your data: hello@thecoveredcollective.co