Privacy notice
Privacy notice
DIGOSAR records only what a report needs: what you tell us, the page you were reading, and enough technical information to protect the reporting system and keep an audit trail.
What is recorded when you report a page
- What you enter: your name, your email address and your report.
- The page: its address, title and the version you saw, the section you were reading if the page marks its sections, and the times you opened and submitted the form. This is attached automatically so you do not have to copy it.
- Technical information: the IP address your report came from, an approximate location derived from it (country, region and nearest city — an approximation from network data, never your exact location), and the browser description your browser sends. No device fingerprinting is carried out.
Why it is recorded
The report and the page are needed to review your concern and, if necessary, to reply to you. The technical information is kept for report integrity, abuse prevention, security, investigation, duplicate detection and the audit trail.
Who is responsible
The controller of the personal information described in this notice is Panacea Bio Chem Limited, a company registered in England and Wales (number 16399508) at 61 Bridge Street, Kington HR5 3DJ, United Kingdom, which operates the DIGOSAR register. Questions about this notice go to privacy@digosar.com.
Who sees it
Only the authorised personnel handling reports. Your identity is not disclosed to the website or the subject reported except as set out under confidentiality. It is never used for advertising or commercial profiling, and it never enters site statistics.
How long it is kept
The IP address, approximate location and browser description are deleted from a report’s record twelve months after it was submitted. The rest of the record — your name, your email address, the report and the page — is deleted six years after it was submitted. What stays is one line in the register of reports: the reference, the page and the dates, with nothing that identifies you, so that the handling of reports can be audited. A one-way fingerprint used to recognise the same report sent twice is kept for thirty days.
If a report becomes part of an active investigation, security or legal case, the technical details relevant to that case stay with the case record for as long as the case requires; the hold is recorded beside the report and the ordinary periods apply again when it ends.
A submission refused as spam or abuse is not entered in the register; anything set aside from it for inspection is deleted within 90 days.
Each report reaches the people who handle it as an email. The copy kept by the service is deleted twelve months after the report was submitted.
The one cookie
The report form sets a single security cookie that ties the form you opened to the report you send, to stop forged submissions. It is strictly necessary, holds no personal information, is sent only to digosar.com and expires within two hours.
Site statistics
digosar.com runs no analytics or tracking script and sets no analytics cookie. The only record of a visit is the server log described below.
Server logs
Like any web server, digosar.com writes each request to an access log: the time, the page requested (without anything typed into a form or added to its address), the IP address, the browser description and the referring site. The log is used to keep the service secure and working, and it is deleted within nine weeks.
Your rights
You can ask to see the information held about you, to have it corrected or deleted, to restrict how it is used, or to object to its use. Write to privacy@digosar.com. You also have the right to complain to the data-protection authority where you live; in the United Kingdom that is the Information Commissioner’s Office.
Sources
- Information Commissioner’s Office. Right to be informed (UK GDPR guidance). https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-be-informed/