Your data
Privacy policy
This policy explains what personal data Biodiversity Net Gain Hub collects, why, and your rights. In short: the site sets no advertising or tracking cookies, the estimator runs in your browser and sends us nothing, and the only personal data we hold is what you send us by email or through a form on this site.
Who we are
Biodiversity Net Gain Hub (biodiversity-net-gain-hub.co.uk) is published by Salman Ghani, who is the controller for data-protection purposes. Contact: [email protected].
What we collect and why
| Data | Source | Purpose | Lawful basis | Kept for |
|---|---|---|---|---|
| Server and security logs (IP address, browser type, pages requested) | Cloudflare, which hosts and protects the site | Serving pages, security, abuse prevention | Legitimate interests | Retained by Cloudflare for a limited period under its own policy |
| Aggregated visitor statistics (page views, referrers, country, device type) | Cloudflare Web Analytics (cookie-free) | Understanding which pages are useful | Legitimate interests | Aggregated only; we retain no personal data |
| Enquiries you send about listed providers (name, organisation, work email, message) | You | Reviewing your enquiry and, only if you ask us to in your message, passing it to a relevant listed provider | Legitimate interests / steps at your request before a contract | 12 months, then deleted |
| Listing requests you send (name, organisation, work email, firm type, description) | You | Reviewing and publishing a directory listing you have requested | Contract / legitimate interests | For as long as the listing is live, then 12 months |
| Other emails you send us | You | Answering your query, recording corrections | Legitimate interests | 12 months, then deleted |
| Estimator inputs | You | Calculation in your browser | — | Not stored, not transmitted to us |
Sharing
Enquiries about listed providers are shared with a provider only when you ask us to pass them on, and only the details needed to respond. Listing details you send are published in the directory as you requested. Our hosting, analytics and email-forwarding provider is Cloudflare, Inc. Form submissions are delivered to our mailbox by Formsubmit. We do not sell personal data. If paid listings are introduced later, this policy will be updated to name the payment processor before any payment is taken.
Cookies
No advertising or tracking cookies. Cloudflare Web Analytics does not use cookies or track you across sites. Cloudflare may set strictly necessary security cookies (for example __cf_bm) to protect the site from automated abuse.
Your rights
Under UK GDPR you can ask for access to, correction or erasure of your personal data, object to or restrict processing, and complain to the Information Commissioner's Office (ico.org.uk). Email [email protected] to exercise any right.
Children and changes
The site is not directed at children and we do not knowingly collect their data. Last updated 22 September 2026; material changes will be dated here.