01 Who we are
FrontPace LTD is the data controller for the personal data described in this notice. You can reach us at admin[at]frontpace.net.
FrontPace LTD is registered in England and Wales with company number 17201701. Registered office: 13 Freeland Park, Wareham Road, Poole BH16 6FA, United Kingdom.
Where we carry out an SAA for a client organisation, that organisation and FrontPace each have their own responsibilities for the personal data involved. Section 3 explains how that works and who to approach about what.
02 When you visit this website
Analytics
We use Statcounter, a web analytics service, to understand how the site is used – which pages are viewed, how visitors arrive and roughly where in the world they are. Statcounter places a cookie in your browser and records your IP address, approximate location, browser and device type, the pages you view and the page that referred you.
We use this only to see how the site performs in aggregate. We do not use it to build profiles, to advertise to you or to try to identify you personally.
This privacy page is excluded from analytics, so no analytics cookie is set while you read it.
The introduction video
The video on the SAA page is hosted on our own server. Playing it sends no data about you to YouTube, Vimeo or any other video platform.
Server logs
Our hosting provider keeps standard server logs for security and to keep the site running. These logs may include IP addresses. Our hosting provider is Gigahost AS, Søndre Kullerød 2, 3241 Sandefjord, Norway.
03 When you take part in an SAA
If your employer has engaged FrontPace to run a Strategy Alignment Analysis, you may be asked to complete a questionnaire, take part in an interview and prioritise a set of strategic focus areas through a web link. If your organisation has also commissioned the optional SAA+ module, you may in addition be asked to take part in a session where a strategy framework is developed. This section explains what happens to what you tell us.
What we collect
- your name, role and work contact details
- your answers to the initial questionnaire
- what you tell us in an individual interview, if one is held
- your individual prioritisation of the strategic focus areas
- the correlation factors calculated from those prioritisations
- what you contribute in an SAA+ session, if your organisation has commissioned that module
Why we collect it
To produce the SAA report, run the workshop, prepare the summary alignment report and hold the debrief with your team leader. Where SAA+ is included, we also use what emerges in the session to develop the strategy framework. The method measures how closely a leadership team's priorities align – it does not produce a score or rating for any individual.
Who sees your answers
Your answers are seen by the FrontPace consultant running the assignment and by your organisation.
Your individual answers are shared with your organisation, and they are attributed to you. Your questionnaire responses and your prioritisation of the focus areas form part of the SAA report and of the work that follows – the workshop, the summary alignment report, the debrief with your team leader and any SAA+ session.
Your answers are not disclosed to anyone outside the assignment. FrontPace is bound by a signed non-disclosure agreement with your organisation, and that agreement continues to apply after the assignment ends.
Your organisation is responsible for telling you this before you answer. If you have not been told, or you are uneasy about it, speak to your team leader or contact us before you complete the questionnaire.
SAA+ | Strategy framework
SAA+ is an optional add-on module. If your organisation has commissioned it, a complete strategy framework is developed over a one- or two-day session with the senior leadership team.
During the session we note the contributions, judgements and decisions that emerge from the work, and we build them into the framework delivered to your organisation. The notes and the finished framework may show who contributed what. We do not make audio or video recordings of the session.
In every other respect the same applies as to the rest of the assignment: the material is seen by the FrontPace consultant running the session and by your organisation, and the non-disclosure agreement mentioned above applies here too. Retention periods are set out in section 7.
Legal basis
We rely on legitimate interests. The interest is your organisation's: to understand how closely its leadership team's priorities line up, to be able to act on what the analysis shows, and – where SAA+ is included – to turn that into a strategy framework. Where we run an assignment on your organisation's instructions, it is your organisation that decides why and how your data is used, and we act on its behalf.
We have weighed that interest against your privacy, and the following safeguards are in place: you are told how your responses will be used before you answer; the analysis measures the team rather than scoring you individually; your responses, and the notes from any SAA+ session, are deleted or returned within 30 days of the assignment ending; and you can object to our use of your data at any time, as set out in section 8.
Automated decisions
The correlation factor is produced by our own calculation method. It serves as a starting point for discussion in the workshop and the debrief. The calculation makes no decisions about you as an individual.
Anonymised data
We may use combined, anonymised results to develop our method and to build general benchmarks. We only do this when no client, individual or identifiable situation can be recognised from the data. If a result could still be traced back to a person, we treat it as personal data and the rest of this notice applies to it.
04 When you contact us
If you email us, we keep your message and our reply, together with your name, email address and anything else you choose to tell us, so that we can respond and keep a record of what was agreed. We do this on the basis of our legitimate interest in dealing with enquiries and managing our client relationships.
06 Transfers outside the EEA
We do not transfer personal data outside the EEA, beyond what follows from our own place of establishment and from the providers listed in section 5.
FrontPace LTD is established in the United Kingdom, so the personal data we handle is processed there. The United Kingdom is outside the EEA, but the European Commission has decided that it offers an adequate level of protection, which allows personal data to move between the EEA and the United Kingdom without further formalities.
Gigahost AS hosts this website in Norway, which is inside the EEA. Statcounter is an Irish company. Microsoft may process some data outside the EEA in the course of running its services, under the transfer safeguards it applies as a provider.
07 How long we keep information
| Information | Kept for |
|---|---|
| SAA questionnaire answers and individual online prioritisations | Deleted no later than 30 days after the assignment ends, or sooner if the client asks in writing. |
| Notes and working material from an SAA+ session | Deleted no later than 30 days after the assignment ends, or sooner if the client asks in writing. |
| SAA reports and the strategy framework from SAA+ | Held by the client organisation. We keep a copy only where the law requires it. |
| Email correspondence | Up to six years, reflecting tax record-keeping requirements and the limitation period for contract claims. SAA participant responses are deleted on the 30-day schedule above, wherever they are held. |
| Website analytics | Six months. |
08 Your rights
You can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that is wrong or incomplete
- delete your data, if there is no good reason for us to keep it
- restrict how we use it, or object to us using it
- send your data to you or to another organisation in a structured, machine-readable format
Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did before you withdrew it.
Email admin[at]frontpace.net and we will respond within one month. If your data was collected as part of an SAA run for your employer, we may need to pass your request on to them, and we will tell you if we do.
09 Complaints
If you are unhappy with how we have handled your personal data, please let us know at admin[at]frontpace.net so that we can try to put things right. We will acknowledge your complaint within 30 days, investigate the matter without undue delay, and inform you of the outcome.
You also have the right to lodge a complaint with a data protection supervisory authority, and you do not have to complain to us first.
FrontPace LTD is established in the United Kingdom, so the authority responsible for us is the Information Commissioner's Office (ICO). You can complain to the ICO at ico.org.uk/make-a-complaint, by telephone on 0303 123 1113 (+44 1625 545 745 from outside the United Kingdom), or by post to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. The ICO will normally ask whether you have raised the matter with us first.
FrontPace LTD is registered with the ICO under registration number ZC232442. FrontPace registration certificate with ICO can be verified here
If you live or work in an EEA country, or the matter you are complaining about happened there, you can complain to the supervisory authority in that country instead. Contact details for every EEA supervisory authority are published by the European Data Protection Board at edpb.europa.eu. Complaining to your local authority does not stop you also raising the matter with the ICO.
10 Changes to this notice
We review this notice whenever we change how we work with personal data – a new tool, a new purpose, a new provider or a different retention period. The date at the top shows when the notice was last changed.