Privacy Policy

This notice tells you how we look after your personal data when you visit our website at https://www.offer.cymru/, or any local council website that uses the Offer self-help tool (together, the Website). It sets out what information we collect about you, what we use it for, whom we share it with, and what to do if you have any concerns about your personal data.

We may sometimes need to update this notice, to reflect any changes to the way the Website is provided, or to comply with new legal requirements. We will notify you of any important changes before they take effect.

Last updated: 22 September 2026

The information we collect about you

Offer is designed so that using it does not require you to identify yourself. We do not ask for your name, email address, date of birth, or any other information that could identify you, and we do not require you to create an account.

We collect the following, none of which is linked to your identity:

Anonymous Session Data — a random reference generated by your browser when you start using the tool, used only to keep track of your progress through the questions during that visit;

Answer Data — the topics and questions you select as you work through the tool, and the recommendations you're shown as a result. These are stored against your anonymous session reference only, never against you as a person;

Usage Data — which step of the tool you reached, and where people commonly stop partway through (so we know which questions to improve), page views, and how long the tool takes to complete;

Technical Data — your device's IP address, browser type and version, and general (city/region-level) location, collected automatically by our hosting infrastructure as part of normal, secure operation of any website.

We do not collect Contact Data, Financial Data, Social Media Data, or any Special Category Data (such as health, religion, or ethnicity), even though some of the questions in the tool relate to your circumstances — your answers are stored anonymously and are never combined with anything that could identify you.

How we collect your information

We collect information in the following ways:

Automated technologies — as you use the Website, our own internal analytics automatically records the Usage Data and Anonymous Session Data described above. This is a first-party system that we built and operate ourselves — we do not use Google Analytics or any other third-party analytics or advertising tool, and no data is sold or shared with advertisers.

Technical Data is collected automatically by the infrastructure that hosts the Website, as happens with any website request.

We do not receive any information about you from third parties.

Who we share your information with

We share (or may share) information with:

Our hosting and infrastructure providers — the company that hosts the Website's servers and database (railway.com), who process data only on our instructions;

Participating local councils — each council using Offer can see anonymised, aggregated statistics (such as how many people completed the tool, or which topics were most common) for their own area, but never any information that identifies an individual visitor;

Regulatory authorities, where we're legally required to provide information; and

Our professional advisers, such as accountants or legal advisors, where necessary.

We do not sell any information to anyone, for any purpose.

Where your information is located or transferred to

The Website is hosted in the EU. We do not transfer your information outside the UK or EEA. If this changes, we'll update this notice and put appropriate safeguards in place.

Third-party links

The Website may include links to third-party websites — for example, a council's own website, or a product or service we recommend to you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

How we keep your information safe

We have appropriate technical and organisational security measures in place to prevent data from being accidentally lost, accessed, altered, or disclosed without authorisation. Access to any data we hold is limited to those who need it to operate and improve the Website.

Because the Website does not collect identifying information, the risk of harm from a security incident is low. If we ever became aware of an incident affecting personal data, we would notify the ICO and, where required, the individuals affected.

Your legal rights

Because we don't collect any information that identifies you, we're not able to search our systems for "your" data specifically — an anonymous session reference can't be traced back to a particular person, including by us. This means individual rights such as access, correction, deletion, and portability aren't usually applicable to Answer Data or Anonymous Session Data, since there's nothing in our systems that we can single out as belonging to you.

Where we do hold information that could be considered personal data (such as Technical Data collected through normal website hosting), you still have rights under UK data protection law, including the right to:

Access a copy of your personal data;

Correct inaccurate personal data;

Delete personal data where there's no good reason for us to keep it;

Restrict or object to how we use it; and

Complain to the ICO if you're unhappy with how we've handled your information — you can do this at ico.org.uk.

Our cookie policy

We use a single cookie on the Website:

Cookie: oht-locale

Purpose: Remembers whether you've chosen to view the Website in English or Welsh

Duration: Persistent, until you clear your browser's cookies

This cookie is strictly necessary for the Website to function as you'd expect (showing you the site in your preferred language) and doesn't require your consent under UK cookie law. We do not use any advertising, tracking, or third-party cookies.

You can manage or delete cookies through your browser settings at any time, though this may mean the Website forgets your language preference.

Local storage

In addition to the cookie above, the Website uses your browser's local storage in two ways:

To remember your language preference (the same purpose as the cookie above); and

To temporarily hold your progress through the self-help tool (the questions you've answered so far) using session storage, so you don't lose your place if you navigate between pages. This is automatically cleared when you close your browser tab — nothing about your progress is kept on your device after that.