Turbulent Ground
Privacy Notice
Last updated: June 2026
Turbulent Ground is run by Graham Beale. This notice explains what personal data is collected when you use this site, why it is collected, where it is stored, and your rights in relation to it. Graham is based in the United Kingdom and this notice is written to comply with UK GDPR.
What we collect and why
Diagnostic submissions. When you complete the Care Capital diagnostic and submit the capture form, we collect:
- Your work email address — used to send your results (if you opted in) and to group responses by organisation for aggregate analysis.
- Your name and team name, if you choose to provide them.
- Your five dimension scores and overall score (0–100), calculated from your 25 answers.
- Your raw answers to all 25 questions — stored so scores can be recomputed if the scoring model is updated.
- Optional context fields: role, organisation size, sector, country.
- Three consent flags recording exactly what you agreed to.
- A source tag and UTM parameters if you arrived via a tracked link.
The legal basis for processing is consent (Article 6(1)(a) UK GDPR). You indicate this by submitting the form. You can withdraw consent at any time by emailing privacy@turbulentground.com.
Analytics. This site uses Plausible Analytics, a privacy-first tool. It does not use cookies, collect personal data, or track you across sites. Aggregate page-view and referral data only.
How we use your email domain
We derive your email domain (the part after @) server-side and store it alongside your submission. This lets us group responses by organisation and show aggregate benchmarks over time.
Minimum group size safeguard: no organisation-level aggregate, benchmark, or per-group comparison is computed or displayed until at least three submissions exist for that domain. This prevents any individual's data from being identifiable through a group result.
Consumer email domains (Gmail, Outlook, Hotmail, Yahoo, iCloud, Proton, and others) are treated as ungrouped individuals and never combined into a company-level aggregate.
Where data is stored
Submission records are stored in Airtable (airtable.com), a cloud database with servers in the United States. Airtable is covered by a Data Processing Agreement and participates in the UK International Data Transfer Agreement framework.
Results emails are sent via Resend (resend.com). Resend processes your email address to deliver the message and does not use it for any other purpose.
The site is hosted on Vercel (vercel.com). Vercel processes request logs transiently; no personal data is stored in logs beyond standard retention.
How long we keep it
Submission records are retained for three years from the date of submission, or until you request deletion, whichever comes first. We review and purge stale records annually.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate data.
- Erasure ("right to be forgotten").
- Restriction of processing.
- Data portability — receive your data in a machine-readable format.
- Object to processing.
- Withdraw consent at any time without affecting prior processing.
To exercise any of these rights, email privacy@turbulentground.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Questions? Email privacy@turbulentground.com.