Privacy notice
Last updated: 28 March 2026
This notice explains what data ProblemSmith Ltd collects, why, and what happens to it. Written in plain language because privacy policies shouldn't require a law degree.
Who we are
ProblemSmith Ltd is a UK-registered company. The data controller is Lee Smith.
Contact: [email protected]
What we collect and why
| Data | Why we collect it | Lawful basis |
|---|---|---|
| Survey responses | Academic-grade research into how product development teams handle problem definition. Responses are anonymised in all published outputs. | Legitimate interest |
| Email address | To send you the anonymised research findings when published. Only collected if you opt in. | Consent |
| Name, company, job title, LinkedIn | To verify identity and vet access when you opt in to product updates or beta tools. We review applications individually. | Consent |
| Analytics (PostHog) | Page views, scroll depth, form interaction patterns. Used to improve the site. No advertising. No third-party tracking. | Legitimate interest |
What we don't do: sell your data, share it with advertisers, use it for cold outreach you didn't ask for, or hand it to third parties for their own purposes.
Beta access vetting
If you opt in for early access to Problemsmith tools, we review your details before granting access. This is to protect pre-release intellectual property. We may decline applications without giving a reason. Your details are used solely for this vetting process and any subsequent beta communications you've consented to.
Where your data is stored
Survey responses are stored in Google Sheets (Google Workspace, EU data residency). Analytics data is processed by PostHog (US-hosted, SOC 2 compliant). Contact details for beta access are stored in secure systems operated by ProblemSmith Ltd. No data is stored on personal devices or unencrypted systems.
How long we keep it
| Data | Retention |
|---|---|
| Survey responses | 12 months from submission, then deleted |
| Email (findings only) | Until the research report is sent, then deleted |
| Contact details (updates/beta) | Until you withdraw consent |
| Analytics | Rolling 12 months |
Your rights
Under UK GDPR, you have the right to access your data, correct it, delete it, restrict processing, object to processing, and data portability. You can also withdraw consent at any time; withdrawing consent doesn't affect the lawfulness of processing before withdrawal.
To exercise any of these rights, email [email protected]. We'll respond within 30 days.
Cookies
PostHog sets a first-party cookie to distinguish unique visitors. We also set a ps_cookie_consent cookie to remember your cookie preference. No third-party cookies. No advertising pixels. No cross-site tracking. If you decline cookies, PostHog tracking is disabled entirely.
Third-party processors
| Service | Purpose | Location |
|---|---|---|
| Google Workspace | Survey response storage | EU |
| PostHog | Web analytics | US (SOC 2) |
| Netlify | Website hosting | US |
International transfers
Some processors are US-based. Where data leaves the UK, transfers are covered by standard contractual clauses (SCCs) or the processor's compliance framework. PostHog and Netlify both maintain SOC 2 compliance and standard contractual clauses for EU/UK data transfers.
Complaints
If you're not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Changes to this notice
If we change how we handle data, we'll update this page and the "last updated" date. No retroactive changes to how existing data is used without fresh consent.