Independent UK governance, risk & complianceOur editorial standards ↗Practical guidance. Accountable decisions.

About the reference desk

Privacy & browser storage

How the publication and its browser-local working tools handle information.

Publication version 2.0 · 1 November 2026

The publication and its tools

GRC.me.uk is an independent publication founded by Mihail Florin Gavrila. The working tools run in your browser. This release has no newsletter submission service, contact form, marketing pixels, analytics tags, remote assessment API or document-upload endpoint.

What stays in the browser

Text you enter into the readiness review, connected workspace, registers and templates is held in the current page by default. It is not submitted by these tools to the publisher or a remote assessment service. Reloading or leaving can lose unsaved work. A warning helps protect work you have changed, but exporting a working copy is the reliable way to retain it.

Save on this device stores a copy in this browser’s local storage only after you choose that action. Load saved copy is a separate action. People with access to the same browser profile or device may be able to read it. Use the tool’s remove-saved-copy control to delete it. Clearing browser site data also removes local copies. The task finder and search use your selections within the page.

Exports and imports

JSON working copies, text exports, CSV downloads and printouts are created on your device. Imports are read locally to restore the relevant tool. The file contents are not uploaded by the application. You control where exported files go and who receives them. Use references to sensitive evidence, not raw patient records, identity documents, privileged material or unnecessary personal details.

Hosting and access

Serving this website still involves ordinary network processing such as IP addresses, request information and technical logs by the hosting and access providers. A private hosted version may require ChatGPT sign-in and its access controls. The publisher’s browser tools do not remove that underlying processing. Provider retention and account handling are governed by the relevant provider arrangements.

External sources

Following an external source link loads another organisation’s site under its own privacy arrangements. We do not control that processing. Source references and related-publication links are identified in the content.

Questions and future changes

No enquiry submission channel is implemented in this release. Do not enter a data-rights request into a working tool: the publisher will not receive it. Any future contact, account, analytics or subscription feature must add accurate recipient, purpose, legal-basis, retention and rights information before collecting information.