LAST UPDATED · 26 MAY 2026
GDPR Policy
This GDPR Policy is a focused supplement to the Privacy Policy for people in the UK, EEA, and EU. It summarizes controller details, lawful bases, transfer safeguards, and data-subject rights for the current Chalkline Reports launch configuration.
Supplemental Notice
This GDPR Policy supplements, and does not replace, the Privacy Policy. If there is a conflict, the more specific GDPR-focused statement in this document controls for UK, EEA, and EU data-protection issues.
1. Scope and controller details
This policy applies to personal data processed in connection with theChalkline Reports website where the UK GDPR, EU GDPR, or related EEA data-protection laws apply.
- Controller: Design Glyphe Limited operating Chalkline Reports
- Privacy contact: privacy@chalklinereports.xyz
- GDPR contact: gdpr@chalklinereports.xyz
- Registered address: 39 Ibrahim Jalo Waziri Street, Zone E, NASS Quarters, Abuja, FCT 900104, Nigeria
2. Categories of personal data in scope
For GDPR-covered users, the categories of personal data in scope generally include:
- contact details and business identifiers you submit through the diagnostic;
- diagnostic answers and generated report content;
- message history related to your diagnostic request;
- technical request data and short-lived browser-session data used to deliver the site.
3. Lawful bases for processing
| Processing activity | Lawful basis |
|---|---|
| Deliver the diagnostic you requested | Performance of a contract or steps taken at your request before entering a contract. |
| Generate and maintain the hosted report page during its active window | Performance of a contract or steps taken at your request before entering a contract. |
| Reply on the channels you selected for diagnostic-related follow-up | Performance of a contract or legitimate interests in responding to a direct business inquiry. |
| Protect the website, investigate misuse, and preserve operational logs | Legitimate interests in operating a secure business website and protecting our rights. |
| Send optional operational notes if you separately opt in | Consent. |
| Comply with legal obligations, law-enforcement requests, or dispute handling | Legal obligation or legitimate interests, depending on the nature of the request. |
4. Legitimate interests statement
Where we rely on legitimate interests, those interests generally include operating the site safely, responding to a direct B2B inquiry, preventing abuse, preserving evidence for disputes, and maintaining a workable record of a diagnostic request.
We do not use legitimate interests as a blanket substitute for consent where consent is the better legal basis, such as an optional notes subscription.
5. International transfers
Chalkline Reports serves multiple regions, and personal data may be processed outside the UK, EEA, or EU. Where applicable law requires transfer safeguards, we intend to rely on appropriate mechanisms such as contractual safeguards, vendor commitments, or other lawful transfer tools that fit the current processing arrangement.
The hosted-report environment is currently designed for operational simplicity rather than region-specific data residency. The current report availability target is 90 days.
6. Your GDPR rights
If GDPR applies to you, you may have the right to:
- request access to your personal data;
- request rectification of inaccurate or incomplete data;
- request erasure, where applicable;
- request restriction of processing;
- object to processing based on legitimate interests;
- request portability of data you provided to us; and
- withdraw consent where consent is the basis for processing.
Requests should be sent to gdpr@chalklinereports.xyz or privacy@chalklinereports.xyz. We may ask for information reasonably necessary to verify your identity and the scope of your request.
7. Complaints
If you believe our handling of your personal data infringes applicable GDPR rules, you may complain to the supervisory authority in the place where you live, work, or where the alleged infringement occurred.
We would, however, appreciate the opportunity to address your concern directly first through gdpr@chalklinereports.xyz.
8. Retention under the current launch model
The retention approach described in the Privacy Policy also applies here. The key practical point is that the current launch implementation uses transient application storage, so some records may disappear earlier than the intended retention window if the service is restarted or replaced.
9. Contact
- GDPR contact: gdpr@chalklinereports.xyz
- Privacy contact: privacy@chalklinereports.xyz
- Postal address: 39 Ibrahim Jalo Waziri Street, Zone E, NASS Quarters, Abuja, FCT 900104, Nigeria