Research and waiting-list privacy

Who is responsible?

ROBELIUM Ltd is responsible for this research. Contact support@robelium.com with a privacy question or rights request. Portmill Engineering provides a place to find the survey; taking part is optional and does not affect garage services.

Survey responses

You can submit without an email address. We record your selected answers, optional postcode district, comment, language, survey version, source and submission time. We use these to understand roadside-assistance needs and plan services, relying on our legitimate interests in product research. The pilot accepts responses for 30 days from activation, unless closed earlier. Do not include names, phone numbers, addresses, vehicle registrations, health details or other identifying information in comments.

Automated masking runs before comments are stored but cannot guarantee removal of all identifying information. An authorised privacy reviewer checks comments before other authorised research readers can see them. Opinions are not rewritten. We do not match your survey answers to your email registration, and do not ask for a survey account. We cannot necessarily find a particular response from your email address alone.

Optional launch waiting list

Only if you separately opt in, we record your email, postcode district, source, language, consent wording and version, signup and confirmation times, and delivery or unsubscribe status. This uses your consent to send one launch notification relevant to your area, not an ongoing newsletter. Confirm the email link within 48 hours of its creation. Confirmation may be delayed; if no email arrives within 24 hours, you can request it again while registration is open. Not joining or not confirming does not affect your survey response. Existing contacts are not assumed to have consented to this new purpose. During the pilot we send only confirmation emails. Confirmed registrations are kept for up to 12 months under the privacy notice, unless you unsubscribe sooner.

You can withdraw at any time using the unsubscribe link shown after successful confirmation, a link in a future authorised launch email, or by contacting support@robelium.com. The link on the confirmation page is not retained after refreshing that page or reopening an already-used confirmation link; contact us if it is no longer available. Withdrawal does not affect processing already carried out. We retain a protected suppression record to prevent further Research launch messages. Independently held contact details for a different purpose are not automatically erased by a Research unsubscribe.

Access and service providers

Contact details are available only to the authorised Owner in Research administration. Other authorised research readers receive aggregates and privacy-reviewed comments, not contact records. The website uses Vercel hosting, a MongoDB Atlas database in Ireland, and Resend for individual emails. Resend stores email and log data in the United States even when email is sent through its Ireland region. We use Cloudflare as a reverse proxy to route and protect traffic between your device and our website. Cloudflare processes connection information, including your IP address and request metadata, and handles information transmitted through this website, including survey submissions and email registration details. Cloudflare may keep separate service and security records. Providers may also process service and security information outside the UK.

Information about provider processing and contractual transfer safeguards is available in the processing terms of Vercel, MongoDB, Resend and Cloudflare. Cloudflare also describes its handling of connection, service and security information in its Cloudflare Privacy Policy. Contact us for information about safeguards applicable to your data. Research does not enable scan tracking, advertising pixels, survey analytics or automated decisions with significant effects.

Abuse prevention

For request limits we derive a daily changing protected network identifier from the connecting IP address (IPv6 addresses are grouped by network). We do not store the raw address in Research, attach this identifier to answers or contacts, or use it to count distinct people. Rate-limit records expire within approximately 24 hours plus database cleanup delay. Hosting providers may keep separate infrastructure logs under their own verified retention terms. Shared networks can share a limit. A short-lived request challenge adds automated-abuse resistance but is not proof that a visitor is human.

Restricted research views

Other authorised research readers receive only an unfiltered view after collection closes. Counts are presented in separate question tables. Postcode-district counts may be shown only when at least 5 responses exist for that district and the release safeguards are met. Counts below 5 and additional counts needed to protect them are withheld, including their district labels. Exact totals are not displayed separately, but may be deduced by adding visible counts when all cells in a table are eligible. No full postcodes or individual response records are shown. Reviewed comments are released together without source, district, response identifiers or submission time. 5 responses do not necessarily mean 5 distinct people and these safeguards do not guarantee anonymity. Comments are released only after collection closes, in a batch of at least 5 comments, and only once all comments have been reviewed by the Owner.

Retention

• Responses: up to 12 months after the collection period closes.
• Unconfirmed registrations: up to 30 days from first signup; confirmation links expire after 48 hours.
• Confirmed registrations: up to 12 months from confirmation, with a necessity review at 6 months. If a future authorised launch notification is delivered, the registration is normally removed from the active Research list within 30 days of delivery, and never later than its 12-month expiry.
• Consent evidence: protected email fingerprint, wording, source and timestamps for 12 months after the registration ends. Suppression fingerprints remain while needed to respect the opt-out for this purpose.
• Routine completed delivery records: 30 days. Uncertain delivery records are held for manual reconciliation; they are not automatically resent.

Expired records are excluded from use; scheduled cleanup removes them. Database backups are taken daily and retained on an 8-day rolling basis, so removed records may remain in a backup until it expires. A restored backup must have deletions and opt-outs reapplied before normal processing resumes. Resend retains email and delivery-log data for 30 days and states a 7-day backup retention period. Provider security and service records may have separate retention periods; contact us for details.

Your choices and rights

You can skip optional questions, decline the waiting list, withdraw email consent, and contact us about access, correction, deletion, restriction or an objection to the use of your information. Which rights apply depends on the processing and whether we can identify your record. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.