Privacy notice — version v1, published 2026-05-19
Who controls your data
AG Barr plc ("AG Barr") is the data controller for personal data processed through the Prioritisation Dashboard. AG Barr's People Performance function operates this service for the 12-week Prioritisation & Productivity Programme pilot.
Who processes it
Data is stored in Supabase (PostgreSQL, EU/UK region) and served via Vercel (London region). Magic-link emails are delivered via Supabase Auth's transactional email infrastructure. We do not use Google Analytics, Facebook pixels, or any third-party advertising trackers.
What we collect
- Your name, work email, and assigned pilot team.
- Your responses to programme tools — chronotype quiz, baseline questionnaire, energy log entries, meeting audits, Eisenhower tasks, Ivy Lee lists, 1-3-5 plans, deep work sessions, shutdown checklists, peak-day blueprints, habit tracker entries.
- Consent timestamps, IP address, and user agent at the moment you accept this notice (for the audit trail).
What we do with it
- Show you your own longitudinal data, so you can see how your habits are changing.
- Produce anonymised aggregate reports for the Executive Committee. Aggregates enforce a minimum cell size of 5 respondents — if a slice has fewer than 5 people, it shows as "Insufficient data" rather than the underlying numbers.
- With your explicit opt-in only, approach you about being featured as a named case study. You can withdraw that opt-in at any time.
A note on the chronotype quiz
The chronotype quiz is an rMEQ-inspired short questionnaire used as a starting hypothesis about your natural rhythm — not a clinical diagnosis. The 7-Day Energy Log provides the empirical validation per individual: it records your actual energy and focus curve, and where the log disagrees with the quiz result, the log is the authority.
Your rights
- Right to access (Art. 15) — download a JSON export of every row of your data via /data-rights.
- Right to erasure (Art. 17) — delete your account from the same page. We soft-delete for 30 days (so you can recover by accident), then hard-purge.
- Right to withdraw consent — at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Retention
We retain participant-level data for 12 months past the end of the programme, then auto-purge. Aggregate reports (already non-identifying) are retained indefinitely for organisational learning.
Contact
Questions or concerns? Email performance@agbarr.example (replace with the real People Performance inbox before launch).