Privacy & website analytics
This short notice explains the information used when someone visits the public GACG website. Separate participation and data notices appear before either wellbeing assessment, and the GACG Portal has a fuller privacy and personal-data policy.
First-party website statistics
GACG uses a self-hosted, first-party statistics system to understand which public pages are useful, how visitors discover them and whether important journeys are working. It records canonical page views, estimated browser-tab sessions, broad device categories, selected actions such as assessment starts or successful enquiry forms, and browser-supplied referring addresses. The reporting centre provides daily, weekly, monthly and yearly summaries.
To estimate unique visitors, GACG places a random first-party analytics cookie in the browser for up to 400 days. The identifier contains no name, email address, Portal account number or other information supplied by the visitor. The raw identifier is not stored in the statistics database: the server derives and retains only a 16-byte one-way hash. “Estimated unique visitors” means distinct browser identifiers across a selected reporting range, not verified people. A browser may be shared, reset or configured to reject storage, and one person may use several browsers or devices. Estimated sessions count the first tracked page in each browser-tab session and are not standard time-window analytics sessions.
A referring address is stored only when it is supplied by the visitor's browser. Credentials and fragments are not retained, and query names or values that appear likely to contain access tokens, verification or session secrets, email addresses or similar sensitive information are redacted before storage. Browsers and referring websites may shorten or withhold this address, so a report may contain a complete referring page, a domain only, or no referrer. Referring addresses are used for aggregate discovery reporting, not individual profiling.
The supporting browser-identifier and referrer records are automatically removed when more than 730 days old. Non-identifying aggregate totals may be retained for longer-term comparison. The statistics system does not retain IP addresses, raw user-agent strings, Portal account IDs, free text or assessment answers, cannot access visitors' device MAC addresses, and does not join statistics to Portal accounts, enquiries or wellbeing responses. Supported browser Do Not Track and Global Privacy Control signals are honoured.
Enquiries and applications
If you submit an enquiry, course-interest form, collaboration application or Portal form, GACG uses the information you provide to assess and respond to that request, operate the relevant workflow and maintain appropriate business records. Do not submit sensitive or confidential information unless it has been requested and an appropriate channel has been agreed.
Wellbeing assessments
The public wellbeing assessments use a separate anonymous response dataset. It is not joined to site statistics, Portal accounts or hosting logs. Each assessment provides its own participation and data notice before questions are shown.
Functional sessions and hosting logs
The website may use functional session technology to recognise an existing Portal login and support security. Routine hosting, security and access logs may separately process technical information for service operation, abuse prevention and troubleshooting. These logs are not joined to anonymous assessment responses for respondent profiling.