Privacy Policy

Who we are

Inductio provides guided site inductions delivered over WhatsApp. This policy explains what personal data we handle, why, and how long we keep it — both for visitors to this website and for people who complete an induction run.

For induction runs, our customer (the organisation whose site you are being inducted onto) is the data controller and Inductio is a data processor acting on their instructions under a data processing agreement. For this website, Inductio is the controller.

Questions about this policy: hello@inductio.co.uk.

This website

This site collects as little as possible. We do not use advertising trackers and we do not set marketing cookies. If you email us or use the contact form, we receive your name, email address, and message, and use them only to reply to you.

The browser demo on the Play page runs entirely in your browser — nothing you type into it is sent to our servers.

During an induction run

To deliver an induction we process: the phone number of the WhatsApp account taking part, the group or team name chosen at the start, the messages exchanged with the guide (including answers to health & safety questions), photos submitted for location challenges, and timestamps of each stage.

This data is used solely to run the induction, notify the right staff hosts, and produce the compliance record your inducting organisation requires. It is never used for marketing and never sold or shared beyond the sub-processors listed below.

How long we keep it — anonymisation by design

Identifiable run data is short-lived by design. An automated sweep runs every night:

Completed runs — a few hours after completion, the run record is irreversibly anonymised. Names and session identifiers are replaced with an anonymous player number, and the message transcript, question answers, and any challenge photos are deleted. Only anonymous completion statistics (score, duration, stages visited) remain.

Abandoned runs — runs with no activity for several hours are deleted outright, including transcript, answers, and photos.

The compliance record is delivered to the inducting organisation before anonymisation. After that, the organisation holds its own copy as controller; we no longer hold anything that identifies you.

Staff host records (names and contact details of the customer's own employees who greet groups) are employment data held under the customer's data processing agreement and are managed on their instructions.

Where the data lives

All run data is stored and processed on Cloudflare infrastructure (Workers, D1, and R2). The AI that interprets natural-language answers runs on Cloudflare Workers AI — your messages are not sent to any third-party AI provider.

Messages are carried by WhatsApp, operated by Meta Platforms. Meta's handling of WhatsApp message data is described in the WhatsApp Privacy Policy.

Legal basis

Induction runs are processed on the basis of the inducting organisation's legitimate interest in (and, in most sectors, legal obligation towards) health & safety induction and record-keeping. Website enquiries are processed on the basis of legitimate interest in responding to you.

Your rights

Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. For induction run data, the quickest route is usually the organisation that inducted you (the controller) — though note that identifiable data is deleted automatically within hours regardless.

You can contact us at hello@inductio.co.uk, and you have the right to complain to the Information Commissioner's Office.

Changes to this policy

If we change how we handle personal data, we will update this page and the date above. Material changes affecting active customers are communicated directly.