Privacy
How Salient One handles personal data.
Social Impact draft recovery
Guest assessment drafts use browser storage and are recoverable for 30 days; expired copies are removed on the next workspace visit. Anyone using that browser may access guest drafts. Signed-in drafts autosave privately to the owning account, with account-separated device recovery and conflict checks. Account drafts remain until deleted from the workspace. Report revisions and exports are separate explicit actions. Project text is excluded from optional analytics and public discovery. The toolbar reports device or cloud saving failures.
Data controller
Salient One is operated by SalientOne OÜ, which is the data controller for personal data collected through this website and through engagement enquiries. The firm operates as an independent advisory practice.
What we collect
Through engagement enquiries and direct email correspondence, we may collect: name, professional role, organisation, email address, and the content of your enquiry. Form submissions are sent to us through Telegram for notification.
Cloudflare Web Analytics supplies aggregate website measurements without analytics cookies. We also count successful widget, calendar, feed and report responses in Cloudflare Analytics Engine using fixed resource categories. These counters contain no account identifiers, IP addresses, URL queries, filenames, screening inputs or document contents. A response count does not identify a reader or prove a subscription or completed download. Private owner reports combine these aggregate measurements with required account action records, separately consented page analytics and search-console data; they are not published on the website.
Required account action records. For signed-in use across Risks, Humanitarian and Social Impact, we record your account association, fixed action type, product, timestamp and success, failure or cancellation outcome. This covers account administration, saved work, analysis requests, source/report access and exports where observed by the service. These service records are required and are independent of optional analytics acceptance, decline or withdrawal. They exclude document text, screening inputs, questions, filenames, private source URLs and request/response bodies. Private owner reporting uses these records to understand actual service use; they are not sent to Google Analytics or Clarity. Browser-only actions are labelled reported observations and cannot prove reading or a completed download.
With your consent, this website uses Google Analytics for aggregate site usage analytics and Microsoft Clarity for behavioural analytics, including heatmaps and session recordings. These services are loaded only after you accept the cookie banner, and your choice — accept or decline — is stored in a consent cookie so you are not asked again. If you decline, neither analytics service is loaded. Clarity masks sensitive content by default. We do not use third-party behavioural advertising services.
Purpose and legal basis
Personal data submitted in engagement enquiries or by email is processed for the purpose of responding to your enquiry and, where appropriate, establishing a client or advisory relationship. The legal basis is legitimate interest (Article 6(1)(f) GDPR) for inbound enquiries, and contract performance (Article 6(1)(b) GDPR) where an engagement is agreed. Optional analytics data is processed on the basis of consent (Article 6(1)(a) GDPR); you can withdraw optional analytics through Cookie settings. Required account records support the requested account service and its operation; declining optional analytics does not disable them.
Retention
Required account action records and optional account activity are retained for 90 days, then excluded from reports and purged daily. Optional signup attribution is retained for 365 days and journey records for 30 days. Optional analytics withdrawal deletes optional records, not required service records. Account deletion removes associated action records. These limits do not automatically delete private Pro work or Social Impact cloud drafts, which remain under their existing explicit-deletion controls.
Enquiry data is retained for the duration of the correspondence and for a reasonable period thereafter. Where an engagement is established, data is retained in accordance with the terms of that engagement and applicable professional record-keeping obligations.
Your rights
You have the right to access, rectify, or erase your personal data, to restrict or object to processing, and to data portability. To exercise these rights, contact us at the address below. You also have the right to lodge a complaint with a supervisory authority.
Contact
For privacy-related requests, including subject access requests, write to engage@salientone.eu with the subject line "GDPR Request".
Pro accounts and billing
Pro services use the same verified Salient One account as S1 and HUM. We store account identifiers, the selected product, checkout transaction and Paddle customer/subscription identifiers, subscription status, billing-period dates and a minimal webhook event record to provide the service and reconcile billing. Payment card details are handled by Paddle and are not stored by Salient One. See Paddle’s privacy notice.
Subscription records are processed to perform the service contract and meet applicable record-keeping obligations. Billing and Pro account pages do not load the website’s optional analytics scripts. Funding filters are used to produce the requested response; reports are returned to your browser without being stored as a separate report archive.
Private responses are excluded from public discovery and browser service-worker caches. Account-linked service records are removed with the account where applicable; Paddle may retain billing records under its own legal obligations. Contact us for access, correction, deletion or billing-record retention questions.