Privacy Policy

StationX Research, a division of Station X (UK) Ltd (“StationX”, “we”, “us”, or “our”), operates jobzonerisk.com (the “Website”). This Privacy Policy explains what personal data we collect, why we collect it, and your rights.

We are committed to collecting as little personal data as possible. We do not run advertising and we do not sell your data.

1. Data Controller

The data controller is Station X (UK) Ltd. For questions about this policy or to exercise your data rights, contact us at stationx.net/contact.

2. What We Collect

2.1 Email Address (Voluntary)

If you choose to subscribe to role update notifications or register interest in a new assessment, we collect your email address. This is the only personal data we actively request. You are not required to provide your email to use the Website.

2.2 Server Logs (Automatic)

Our web server automatically records standard access logs, which may include:

• Your IP address
• The pages you visited and when
• Your browser type and operating system
• The referring URL (how you arrived at our site)

Server logs are used solely for security monitoring, error diagnosis, and abuse prevention. They are not used for analytics, profiling, or marketing.

2.3 Analytics Data (Automatic)

We use Google Analytics (GA4) to understand how visitors use the Website. Google Analytics collects:

• Pages visited and time spent on each page
• Approximate geographic location (city/country level, derived from IP address)
• Device type, browser, and operating system
• Referral source (how you arrived at our site)

Google Analytics uses cookies to distinguish unique visitors. See Google’s Privacy Policy for details on how Google processes this data. You can opt out — see Cookies below.

2.4 What We Do NOT Collect

• We do not use advertising cookies or retargeting
• We do not collect phone numbers, payment details, or precise location data
• We do not create user accounts or profiles
• We do not use fingerprinting or cross-site tracking

3. Cookies

The Website uses cookies set by Google Analytics to distinguish unique visitors and analyse usage patterns. These are non-essential analytics cookies. No advertising or marketing cookies are used.

You can control cookies through your browser settings or by installing the Google Analytics Opt-out Browser Add-on. Disabling cookies will not affect your ability to use the Website.

4. How We Use Your Data

We will never use your email address for unsolicited marketing. You will only receive communications you have explicitly requested.

5. Third-Party Processors

We share personal data with the following third-party service providers, who process it on our behalf:

We do not sell, rent, or share your personal data with anyone else. We do not share data for advertising or cross-context behavioural targeting.

6. International Data Transfers

StationX is based in the United Kingdom. Our server and email service provider are located in the United States. Transfers of personal data from the UK to the US are covered by the UK-US Data Bridge, which provides an adequate level of protection recognised by the UK government.

7. Data Retention

• Email addresses: Retained for as long as you remain subscribed. When you unsubscribe, your email is removed from our mailing list. You can unsubscribe at any time via the link in any email we send.
• Server logs: Retained for a limited period for security purposes, then deleted.

8. Your Rights

8.1 Under UK GDPR

If you are in the United Kingdom or European Economic Area, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate personal data
• Erase your personal data (“right to be forgotten”)
• Restrict how we process your data
• Data portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interest
• Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data rights have been violated.

8.2 Under US State Privacy Laws (CCPA/CPRA and Others)

If you are a resident of California or another US state with consumer privacy legislation, you have the right to:

• Know what personal data we collect and how we use it
• Delete your personal data
• Opt out of the sale or sharing of personal data — we do not sell or share your data, so there is nothing to opt out of
• Non-discrimination — we will not treat you differently for exercising your privacy rights

To exercise any of these rights, contact us at stationx.net/contact. We will respond within one month.

9. Children’s Privacy

This Website is not directed at anyone under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete it promptly.

10. Security

We take appropriate technical and organisational measures to protect your personal data, including encryption in transit and minimal data collection by design. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

11. Compliance with Law

We will disclose your personal data where required to do so by law, regulation, or court order.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page. The “last updated” date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically.

13. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at stationx.net/contact.