Privacy & data

Legionella.io is an educational site. You do not need an account, and reading articles, using tools and downloading resources does not require you to give us your name or email address. Optional analytics is off until you accept it.

Controller and contact details

REMOTE TECH LTD is the controller for the processing described in this notice.

Use that email for a rights request or data-protection complaint. We may need proportionate information to confirm identity before disclosing or changing personal information.

Information we handle

• Ordinary web requests: hosting and security systems necessarily receive request metadata such as IP address, time, requested path, browser/user agent and response status. This supports delivery, fault diagnosis and protection from abuse.
• Browser-only workspace data: themes, saved tool results, a site label and playbook progress stay in your browser’s local storage. The site does not upload these records. They can include information you type into or save from a tool, so use the workspace only on a device you trust.
• Newsletter data: if you subscribe, we send Kit your email address, consent/subscription status and the site page/path fields shown in the form. Kit processes the subscription, confirmation, delivery and unsubscribe records.
• Optional analytics: if you accept optional analytics, enabled providers receive sanitised page paths and allowlisted usage information described below. We do not send raw search terms, calculator answers or results, quiz answers, symptom dates, site or building names, workspace contents, form values or email addresses.
• Messages: if you email us, we receive your address and whatever you include. Do not send health or other sensitive information unless it is necessary for your request.

Lawful bases and purposes

Local storage and cookies

These first-party browser records support visitor-requested features. They are not accounts and do not synchronise between devices.

Google Analytics may set _ga and _ga_* only after acceptance. This site configures those identifiers not to refresh and to expire after 180 days. Rejecting later removes accessible GA cookies and reloads the page to stop optional scripts. You can review or change the choice using Cookie settings.

Measurement safeguards

Optional interaction events use controlled IDs and bands: for example, a search records a result-count band and query-length band, not what you typed; a quiz records a broad score band, not answers or an exact score. Unknown event names, properties and values are dropped before a provider is called. Core Web Vitals are reduced to “good”, “needs improvement” or “poor”.

Aggregate optional product events: maximum 14 months. Access is limited to named engineering, product and privacy owners and reviewed quarterly.

Processors and recipients

The registry below drives both this notice and which optional scripts the site can load. “Disabled” means the service is not authorised to receive new browser data from this build.

Website hosting, DNS/CDN, operational email and security providers may also receive data needed to deliver those services. Their exact production-account identities, locations and log settings must be checked against the internal data inventory before release; we do not use that gap as permission to add an unexplained tracker.

International transfers

Cloudflare, Google and Kit may process information outside the UK, including in the United States. Their published terms describe mechanisms such as the UK Extension to the EU-US Data Privacy Framework and the UK Addendum or contractual clauses. Those provider statements do not replace our duty to verify the terms that apply to the actual production accounts. You can ask us for information about the relevant safeguard.

How long we keep information

• Browser-only records remain until their listed expiry, you reset them or browser storage is cleared.
• The optional-analytics choice expires after 180 days and becomes invalid immediately when the policy version changes.
• Active newsletter data remains until unsubscribe or a valid deletion request. We may retain the minimum suppression record needed to avoid sending more marketing and meet legal obligations.
• Provider analytics retention is stated in each processor record. The live GA4 property setting is a release-verification item and must not exceed the disclosed configuration.
• Operational logs and correspondence are kept only as long as needed for security, fault resolution, the request/complaint and any applicable legal claims, then deleted or irreversibly aggregated.

Your data-protection rights

Depending on the processing and any lawful exemption, you may have rights to be informed, access your personal information, correct it, erase it, restrict its use, object to processing and receive information you supplied in a portable form. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful processing. You also have an absolute right to object to direct marketing. These rights are not all absolute.

Complain to us or the ICO

Email with “Data protection complaint” in the subject. We will acknowledge a data-protection complaint within 30 days, take appropriate steps without unjustifiable delay, keep you informed and explain the outcome. If you remain dissatisfied, you can make a complaint to the Information Commissioner’s Office.

Automated decision-making

We do not use the personal information described here to make solely automated decisions that produce legal or similarly significant effects. Educational calculators and quizzes run in the browser and do not make a professional or compliance decision.

External links and changes

Links to official sources and L8log take you to another site whose own privacy information applies. We review this notice when purposes, processors or law change. A material change creates a new policy version and asks again before optional analytics loads.

Sources for this notice

• ICO - Right to be informed
• ICO - Guidance on storage and access technologies
• ICO - Make a complaint

This notice explains our current processing; it is not legal advice. Contract and production-account checks identified in the internal inventory still need a named privacy owner.