Privacy

Privacy information

Last updated: 8 September 2026. Telos is operated by Project Intel Ltd (company number SC899679), trading as Telos. For privacy questions, email hello@teloshealth.co.uk.

Telos provides educational, non-clinical material and practical tools for follow-through. It is not healthcare, psychotherapy, diagnosis, treatment or crisis support.

Information we collect

When you contact us, we may collect the details you choose to provide: your name, email address, organisation and role, the nature of your enquiry, optional message, marketing preference, the form and page used, and campaign parameters present in the page address. We also process limited technical and security information needed to protect the site and its forms.

If you connect an encrypted workbook backup, we process the email address you verify, sign-in and session security records, and the encrypted backup itself. We do not receive your vault passphrase, recovery key, scores, notes or workbook reflections in readable form. If you apply for full-course workbook access, we also process your name, the verified email address, request and approval status, and a time-limited security token used to send the approval request to Telos.

Please do not submit health, medical, trauma, diagnosis or other sensitive personal information through our forms. They are not designed for it.

Why we use it

We use enquiry details to respond to you, administer a requested resource or service, protect the site from abuse and maintain necessary business records. We use our legitimate interests to respond to genuine enquiries and operate a secure website; where you ask us to send occasional Telos emails, we rely on your optional consent. You can withdraw that consent at any time.

We use workbook email records to verify access to the encrypted backup you request. We use full-course access requests to review and grant or decline manual access to the online course workbook. Approval is separate from marketing consent.

Who processes it

Cloudflare provides website hosting, security, Turnstile form protection and the secure enquiry and workbook-access database. Resend delivers form notifications, workbook sign-in and course-access emails, and requested Daily Questions starter emails. Any additional payment, SMS or calling provider will be identified before that service is activated. We do not sell personal data or give employers access to participants’ private workbooks, reflections or health information.

Your private Daily Questions workbook

The workbook encrypts your answers, notes, name and Microgoal records in your browser before storing them locally. Your vault passphrase and recovery key unlock the contents. Telos does not receive them and cannot recover readable entries if you lose both.

If you choose to connect email backup, Cloudflare stores your email address, account and access records, encrypted workbook and encrypted key wrappers. Resend sends one-time sign-in codes. Email verification authorises access to the encrypted copy; it does not decrypt it. Google Workspace processes correspondence sent to our business inbox. Workbook entries are not copied into enquiry notifications or marketing records.

The backup service also processes sign-in timestamps, hashed sign-in codes and session tokens, a hashed network address for abuse prevention, and encrypted-record sizes, revisions and update times. These account and security details are not hidden by workbook-content encryption. This is not an anonymous service.

We use this information to provide the backup you request and protect access. Account access is separate from optional marketing consent. We do not use private workbook content for employer reporting or marketing.

Local data remains until removed from the browser. You can request removal of your online backup and account by emailing us from your connected address; do not send passphrases, recovery keys or private entries. Signing out does not delete a backup, and clearing your browser does not remove an online copy. The current backup service does not automatically delete inactive accounts.

Sign-in codes expire after 15 minutes and sessions after 30 days; those are access-expiry periods, not promises that all associated security records are immediately deleted. Contact us about account or security-record retention and deletion.

Keep your device and keys secure. A readable export no longer has workbook encryption, and another person can see an unlocked screen. No online service can guarantee protection from a compromised device or altered software. Read workbook help before relying on a backup.

Calls and group sessions

If you speak answers to a caller or group, those people can hear them. Any call recording, AI processing or score-recording arrangements will be explained separately before the service starts. Agree what you want to share; a call does not give someone access to your encrypted workbook.

Retention and marketing

We normally retain an enquiry for up to 12 months after the last meaningful contact, unless a longer period is needed for a resulting contract, legal obligation or dispute. Marketing preferences and opt-out records are kept only as long as necessary to honour them. Every marketing email will include a simple unsubscribe route.

Your rights

You may ask us to access, correct, erase, restrict or transfer personal data where the law allows. You may object to direct marketing at any time. Contact hello@teloshealth.co.uk. You may also complain to the Information Commissioner’s Office.

Cookies and similar technology

See our Cookie information. The workbook uses essential browser storage and, for connected backup, a sign-in cookie. We do not use advertising pixels or browser local-storage campaign attribution.