Your information. A clear purpose.

Last updated: 24 October 2026.

Who is responsible

Marie Weidlich, operating as CTRLALTX, is responsible for the personal information collected through these research download forms. Contact info@ctrlaltx.uk about your information or preferences.

What we collect

We collect your name, email, the report requested and the time of the request. Company and role are optional. We record whether you choose marketing emails and the wording version shown. We also record campaign parameters from the page URL, if present, and the referring website’s hostname, to understand where report requests come from. We do not collect the referring page’s full address through the form.

How we use it

We use your details to provide the requested report, keep a record of that request, understand demand for our research and protect the service from misuse. These uses support our legitimate interests in delivering requested research and operating the website. We do not treat a report request as permission for ongoing marketing emails.

If you tick the separate optional box, we record your consent to receive CTRLALTX research and information about relevant services by email. You can withdraw that consent at any time by contacting us or using the unsubscribe option in a marketing email. Declining marketing does not prevent the report download.

Storage and service providers

Report request records are held in our Cloudflare D1 database, with access restricted through the Cloudflare account. Cloudflare also hosts the site and processes requests to operate and secure it. We do not sell these contact details or give another organisation permission to use them for its own marketing. Google Workspace processes a notification containing the submitted report request details and marketing preference, sent to our business mailbox at info@ctrlaltx.uk. These alerts help us manage research enquiries; they do not subscribe you to marketing.

Cloudflare and Google Workspace may process information outside the UK. Its applicable data-processing arrangements describe the safeguards used for international processing. See Cloudflare’s data-processing terms and Google Workspace’s data-processing terms.

Retention

Report request records in the website database are scheduled for deletion after 12 months. Notification emails are reviewed and deleted within the same retention period unless a subsequent business relationship requires a separate record. Download sessions last 24 hours; expired session records are removed by a daily cleanup. To limit abuse, the service temporarily records a salted, daily-changing hash derived from the request’s network address; the form database does not store that raw address. Rate-limit records are removed after a day. The hosting provider may process network information separately for service operation and security.

Essential cookies

After a successful request, an essential, report-specific cookie allows this browser to download the PDF for 24 hours. It is used for access to the requested file. The download form does not introduce advertising pixels or behavioural analytics cookies.

Your choices and rights

You may ask to access, correct or delete your personal information, object to processing based on legitimate interests, or withdraw marketing consent. Other rights may apply depending on the circumstances. Email us with your request. You can also complain to the Information Commissioner’s Office.

Immediate access

The PDF is unlocked in your browser after the request is saved. We do not require a marketing opt-in or claim that submitting the form verifies ownership of the email address. This download service does not currently send an automatic copy of the report by email.