Privacy

Who we are

Door Openers is a toolkit that independent HR consultants use to run diagnostics for their own clients. It is operated by PeoplePipeline Limited, a company registered in England and Wales (company number 17188424), whose registered office is at 4 Castle Mount, St. Valerie Road, Bournemouth, England, BH2 6PQ. For anything in this notice, email aaronthorley@door-openers.com.

Two different relationships

This matters more than anything else on the page, so it comes first.

• Your own account. When you sign up as a consultant, we decide how your account data is handled. We are the data controller for it.
• Your clients' data. When you run a diagnostic on a client company, you decide what to collect and why. You are the data controller; we are your processor, and we act on your instructions. We do not use your clients' data for our own purposes, ever.

What we collect

From consultants, when you create and use an account:

• Your name, email address, consultancy name, the contact email you want clients to see, your logo if you upload one, and your chosen link name.
• The client companies, pipeline leads, calendar entries and follow-up notes you enter.
• Basic records of your use of the app, so we can keep it working and support you.

From the people your clients ask to complete a diagnostic:

• Business diagnostics (People Health Check, Staff Turnover Calculator) collect the company name and answers about how the business runs. If the person asks for a copy of their report, we store the email address they give for that.
• Staff pulse surveys are anonymous. We store the scores, the eNPS rating and any free-text comment. We do not store names, email addresses or IP addresses against a response, so neither we nor the consultant can tell who said what. Please still avoid putting anything identifying into a free-text comment.
• If a consultant submits a psychometric profiling request, that request includes the name of the person being put forward.

From visitors who use the chat on our own website:

• The messages you type, the page you opened the chat from, and a name and email address if you choose to give them so a person can reply. The first answers come from an automated assistant working from a fixed description of the product; nothing you type is used to train anything. The chat is on our marketing pages only and never on a client-facing diagnostic or report.

What we do not do

• We do not sell your data, or your clients' data, to anyone.
• We do not use client answers to train models or to build a product we sell on.
• We do not put our own branding, tracking or marketing in front of your clients. The diagnostics carry your name, not ours, and our website analytics does not run on them at all.
• We never see your card details. Payments are handled by Stripe.

Why we are allowed to hold it

• Contract - we need your account data to give you the service you have signed up for.
• Legitimate interests - keeping the service secure and working, and dealing with support requests.
• Legal obligation - billing and tax records.
• Where you act as controller for your clients' data, establishing the lawful basis for collecting it is your responsibility, not ours.

Who else is involved

We keep the list of third parties short on purpose. Each of these processes data only so the service can function:

• Base44 - the platform the application and its database run on.
• Stripe - subscription payments. They receive your billing details directly; we receive only the subscription status.
• Google - only if you choose to connect Google Calendar, and only for the calendar entries you sync.
• Google Analytics - visits to our own marketing pages, and only if you accept analytics cookies. It is not present on client-facing diagnostics or inside the consultant portal. See Cookies and analytics below.
• Google Ads - a conversion tag that tells Google when a visit from one of our adverts turned into a signup or a subscription. It is present on our marketing pages and on the portal's dashboard and billing pages only, sets no cookies until you accept them, and is never on client-facing diagnostics.

How long we keep it

• Account and client records stay while your account is open. Delete a record in the app and it goes; close your account and we remove your data within 30 days, other than anything we must keep for tax.
• Billing records are kept for six years, because HMRC requires it.
• Anonymous pulse responses stay attached to the survey they belong to until the consultant deletes it.
• Website chat transcripts are deleted 90 days after the last message.

Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to processing, or ask for it in a portable format. Email aaronthorley@door-openers.com and we will respond within one month.

If your data was collected by a consultant using Door Openers, they are the controller, so ask them first, and it will usually be far quicker. Their contact email is shown on the diagnostic you completed. If you cannot reach them, write to us and we will help.

If you think we have got it wrong, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first so we can put it right.

Cookies and analytics

We use Google Analytics on our own marketing pages - the home page, the blog, the tool pages, the sample report and the signup pages - to understand which of them bring consultants to Door Openers. It sets cookies, so we ask before loading it: nothing is requested from Google until you accept, and declining leaves the site working exactly as it is. To change your answer later, clear this site's data in your browser and choose again.

It runs nowhere else. There is no analytics, advertising or marketing tag on the diagnostics and surveys your clients complete - those pages carry your branding, and your clients are not our audience to measure. Google Analytics is not inside the consultant portal either, because client company names appear in portal web addresses and we are not willing to send those to a third party.

The one thing that does run inside the portal is a Google Ads conversion tag, on the dashboard and billing pages only. Those two addresses carry no client names. It reports that a signup or a subscription happened, so we can tell whether an advert paid for itself, and nothing about you or your clients beyond that. Like Analytics it sets no cookies unless you accept them.

Beyond that single conversion count we do not use advertising cookies, and we do not track you across other websites. Separately from analytics, the app stores what it needs to keep you signed in, and a diagnostic in progress is saved in your own browser so you do not lose your answers if you refresh. That stays on your device and is cleared when the diagnostic is submitted.

Security

Data is encrypted in transit. Access to the consultant portal requires a login, and each consultant can only see their own clients and records. Client-facing diagnostic links use an unguessable token rather than exposing anything about your account.

Changes

If we change this notice we will update the date at the top. If a change materially affects how we handle your data, we will email account holders rather than rely on you noticing.