Privacy notice

The controller of personal data collected through this site is UPWARD Insights (Laura Smith), Business ID 3213526-8, VAT FI32135268, Helsinki, Finland. Contact: contact@workupward.com.

If you have a question about your data, write to that address and you will get a human answer.

Participation — when you answer a question prompt, add a wondering, vote in a poll or tick "Curious, too?", the text you write is stored, together with an email address only if you chose to give one. Legal basis: your consent, given by submitting the form. Poll voting stores a random key in your browser so one browser counts once; it identifies a browser, not a person.

Enquiries — name, email, organisation, location and your message, so the conversation can happen. Legal basis: steps taken at your request before entering a contract, and legitimate interest in answering people who write.

Letters — your email address, subscription source, and whether you confirmed. Legal basis: consent, confirmed by double opt-in, withdrawable at any time from the link in every letter.

Bookings and purchases — name, email, organisation, location, the question you want to bring, the times booked, and the payment status. Legal basis: performance of a contract, and legal obligations such as accounting and VAT.

Ongoing engagements — the same, plus session history, invoices and notes needed to run the engagement.

Site measurement — the path visited, the referring website's domain, whether the screen is phone, tablet or desktop, and the date. No cookies, no IP address, no identifiers, nothing that can be traced back to you. Legal basis: legitimate interest in knowing which questions get read.

Hosting and database — Lovable Cloud, on infrastructure inside the EU.

Payments — Stripe, which handles card details directly; card numbers never reach this site.

Email — Postmark, for confirmations, notifications and letters.

Calendar and video — Google Calendar and Google Meet, for booked sessions and their meeting links.

Each of these acts as a processor under a data processing agreement, or as an independent controller for their own payment and fraud obligations. Where data leaves the EU, it does so under the European Commission's standard contractual clauses.

Participation and wonderings: kept while the question is live, then anonymised.

Enquiries: two years from the last message.

Letters: until you unsubscribe, plus the record that you unsubscribed.

Bookings, purchases and engagements: the statutory accounting retention period of six years plus the current financial year.

Site measurement: 24 months in aggregate form.

You can ask for a copy of your data, correction, erasure, restriction, portability, or object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting what happened before.

Write to contact@workupward.com and you will get a response within one month.

If you are not satisfied, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

Responses, wonderings and quotes are reviewed before anything appears on the site, and anything published is shown without your email address. If you would rather something you sent were removed, ask and it will be.