Your data, where it lives, and who sees it.

Who runs PRC Workforce

PRC Workforce is operated by Jon Cull, sole trader, registered in England and Wales. Jon Cull is the data controller for all enquiry and participant data submitted through this site. Business address available on request to brokers and procurement contacts.

Which law applies

UK GDPR and the Data Protection Act 2018. Where participant or buyer data is transferred outside the UK, transfers rely on Standard Contractual Clauses, the UK International Data Transfer Addendum, and the UK Extension to the EU-US Data Privacy Framework, as applicable to each processor.

ICO registration completes prior to first cohort activation. Registration number will be published on this page on completion.

Where your data is stored

Five named processors handle PRC operations. We do not use anyone else.

What we share, and with whom

The five processors above. No-one else. Specifically:

• No sale of data to third parties. Ever.
• No sharing with data brokers, marketing networks, or advertising platforms.
• No transfer to organisations other than the named processors required to run the protocol.
• No employer-side access to individual participant responses, at any tier of the product.

What employers receive

Organisations commissioning PRC see three things and nothing else:

• Seat occupancy: how many of the seats they purchased are in use.
• Cohort completion rate: how many participants reached Day 90.
• Aggregate outcome movement: how the cohort moved across the seven PRC Index measures, from the Day 1 baseline through Days 30, 60 and 90. Withheld entirely below five seats, because an average of fewer than five reveals an individual score.

No names. No roles. No departments. Seat numbers only. This is the product. It is architecturally enforced from Day 1, not promised in policy.

What we collect from participants

Numbers only. A personal email address at registration. No work email is requested at any stage. Seven PRC Index scores rated 1 to 10 at Days 1, 30, 60 and 90, across seven measures of observable operational output. One weekly number, 1 to 10, for each of thirteen weeks.

Nothing a participant writes is collected. There is nowhere in the protocol to type it. There is no free-text field, no submission form, and no upload. Every written answer across the ninety days stays in the participant's own private note and never enters this system.

No clinical instruments are used. No diagnostic categories are recorded. No special category data is processed.

How long we hold it

Participant records are deleted 90 days after the protocol ends. Day 180. Deletion is a permanent removal of the record and every value attached to it at the processor. Our email processor clears its own backups within a further 30 days, after which the data is unrecoverable by anyone, including us.

A participant may request deletion at any point before Day 180. Email jon@prcworkforce.com and it is actioned without exception.

Enquiry data from this site is held for 12 months unless the enquiry converts to a contracted cohort.

Your rights under UK GDPR

You have the right to:

• Access the data held about you.
• Correct anything inaccurate.
• Request deletion.
• Port your data to another provider.
• Restrict processing.
• Object to processing.
• Complain to the Information Commissioner's Office at ico.org.uk.

To exercise any of these, email jon@prcworkforce.com. Response within 30 days as required by UK GDPR.

Cookies and tracking

This site does not use third-party advertising trackers or behavioural marketing pixels. Any analytics in use are operational only and named in this notice. No data from this site is shared with advertising networks for retargeting or profiling.