PRC Workforce Back to main site

Privacy and Data Notice

Your data, where it lives, and who sees it.

PRC is built on anonymity architecture. This page sets out exactly how that works and who holds what.

The core commitment

Employers commissioning PRC receive seat-level aggregate data only. No individual responses. No names. No roles. No departments. This is enforced at the data layer, not promised in policy.

Who runs PRC Workforce

PRC Workforce is operated by Jon Cull, sole trader, registered in England and Wales. Jon Cull is the data controller for all enquiry and participant data submitted through this site. Business address available on request to brokers and procurement contacts.

Which law applies

UK GDPR and the Data Protection Act 2018. Where participant or buyer data is transferred outside the UK, standard contractual clauses are in place with each processor and the UK International Data Transfer Addendum applies.

ICO registration completes prior to first cohort activation. Registration number will be published on this page on completion.

Where your data is stored

Five named processors handle PRC operations. We do not use anyone else.

Formspree
Enquiry form submissions from this site.
US, SCCs
Airtable
Participant seat records, weekly markers, PRC Index scores.
US, SCCs
Kit
Protocol email delivery across the 90 days.
US, SCCs
Stripe
Payment processing for corporate purchases.
UK, EU, US
Namecheap
Website hosting and corporate domain email.
UK

What we share, and with whom

The five processors above. No-one else. Specifically:

What employers receive

Organisations commissioning PRC see three things and nothing else:

No names. No roles. No departments. Seat numbers only. This is the product. It is architecturally enforced from Day 1, not promised in policy.

What we collect from participants

A personal email address at registration. No work email is accepted at any stage. Weekly marker responses submitted through the anonymous form. PRC Index scores rated 1 to 10 at Days 1, 30, 60 and 90 across seven measures of observable operational output. No clinical instruments are used. No diagnostic categories are recorded.

How long we hold it

Participant data is held for the duration of the 90-day protocol plus 24 months for cohort outcome analysis. After that, identifying fields are deleted and only aggregate cohort numbers remain. Enquiry data from this site is held for 12 months unless the enquiry converts to a contracted cohort.

Your rights under UK GDPR

You have the right to:

To exercise any of these, email jon@prcworkforce.com. Response within 30 days as required by UK GDPR.

Cookies and tracking

This site does not use third-party advertising trackers or behavioural marketing pixels. Any analytics in use are operational only and named in this notice. No data from this site is shared with advertising networks for retargeting or profiling.

Outcome Tracking

PRC uses objective metrics only. Self-rated scores of observable operational output, recorded by the participant at four fixed points across 90 days. Not a clinical instrument. Not a diagnostic measure.

Medical Disclaimer

This information is for educational purposes and does not constitute medical advice. Consult a qualified healthcare professional or your GP before starting any behavioural protocol or making changes related to a health condition.

Contact for data matters: jon@prcworkforce.com

Last updated: 13 May 2026

This notice is reviewed at minimum every 12 months or whenever a processor, jurisdiction, or data category changes.