Privacy notice
This website · last updated 10 October 2026
This page covers two things: this website, which collects very little, and the public reviews about employers that the Why Here product collects. If you wrote a public review about an employer, the second part is the one that concerns you, and you did not have to come here to find it: it is here because we are required to say it somewhere you can reach without an account.
Who is responsible for your information. The data controller is Why Here Ltd, Unit 18 Gateway 1000, Whittle Way, Stevenage, England, SG1 2FP (company number 16094419), a company registered in England and Wales.
For anything about your information, including a request to be removed, email legal@whyhere.work.
What we collect, and only if you give it to us
| What | When | Where it goes |
|---|---|---|
| Your work email address, the fact that you ticked the consent box (with the wording you agreed to), and the address and title of the page you sent it from. HubSpot also receives your IP address and browser details, as any service does when your browser sends it something | Only if you submit the waiting list form | HubSpot, our customer relationship tool. The form sends to HubSpot's EU data centre; HubSpot, Inc. is headquartered in the United States, and its own data processing terms govern any access from outside the EU. We use it to hold the waiting list and to email you about early access |
| Standard web request information, such as your IP address and browser | Every visit, as with any website | Vercel, who host this site, in their request logs |
What we do not do here. This site has no analytics, no tracking pixels and no advertising tags. We set no cookies of our own. Its fonts and images are served from this site itself, so showing you a page contacts no third party: until 10 October 2026 the fonts came from Google, which saw your IP address when you visited, and that is no longer the case. It is a set of static pages with no database and no server of its own, so there is nowhere on it for your details to be stored: the waiting list form hands your address straight to HubSpot and keeps nothing.
Why we are allowed to hold it
Your consent, which you give by ticking the box on the form, and which we record alongside your address so there is a trail of what you agreed to. You can withdraw it at any time and we will delete your address.
How long we keep it
Until you ask us to delete it, or until the waiting list is no longer being used, whichever comes first. We do not pass your address to anyone other than HubSpot, and we never sell it.
Your rights
If you are in the UK or the EU you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to our using it. We will respond within one month. You can also complain to a regulator: in the UK that is the Information Commissioner's Office (ico.org.uk), and in the EU it is your national data protection authority.
Public reviews about employers
Why Here measures how an employer is talked about publicly, so that the employer can see whether what they say about themselves matches what their people say. To do that we collect reviews and public posts that employees and candidates have already published, for example on Glassdoor, Kununu and Reddit, together with public job adverts and public professional listings. We also collect public news and press mentions of the employer, through search results. A press article can name a person, which a review normally does not. The collection is done for us by Bright Data, Apify and Serper (a search provider).
The lawful basis is our legitimate interests, and those of the employer, in understanding how they are perceived. We have weighed that against the interests of the people who wrote the reviews, and the assessment turns on holding as little as possible:
- We do not keep anything that identifies the author. Handles (including
Reddit
u/names), links to profiles, photographs and email addresses are removed before anything is stored, and we never read the author field a platform provides. - Passages that reveal special-category information are removed before storage: health, religion or belief, sexuality, racial or ethnic origin, political opinion, and trade-union membership. If we cannot check a review, we do not store it.
- The words are deleted after 12 months. What remains after that is the rating and the summary measures, with no text.
- We only collect reviews published in the last 12 months.
- We do not contact reviewers, we do not try to identify them, and this data is never pooled across our customers or sold.
- An AI model reads the text, before it is stored, to do two of the things above: to find and remove special-category passages, and to classify the sentiment. The model is provided by Anthropic (Claude), by OpenAI's models served by Microsoft (Azure), or by another model provider reached through OpenRouter (a gateway that passes the text to the provider the employer has chosen); which one depends on the employer's own configuration, and some employers exclude particular providers by contract. When an OpenAI model is used on our own model route, the text passes through OpenRouter to Microsoft, whose servers run the model; an employer that connects its own model account decides where its own requests go. We do not use this text to train any model, and the providers we use are under terms that forbid them from doing so either.
- A review that is not in English is translated into English by the same AI model that reads it (above), so that it can be read alongside the others. The translation goes through the same removal of identifying and special-category details as the original.
- Where it goes. Bright Data Ltd is in Israel, which both the UK and the European Union recognise as providing an adequate level of data protection, so no additional transfer contract is required. Anthropic, OpenAI, Microsoft, OpenRouter, Apify and Serper are in the United States. Our subprocessor register, which we will send you on request, names each provider and where it processes data.
You have the right to object to this processing, and to ask for what we hold about you to be corrected or deleted. Because we hold no identifier, the practical route is to email legal@whyhere.work and quote the review: we will find it and delete it. You can also complain to a regulator, as described above.
How to reach us
Email legal@whyhere.work, or write to Why Here Ltd, Unit 18 Gateway 1000, Whittle Way, Stevenage, England, SG1 2FP (company number 16094419). To be taken off the waiting list, one line saying so is enough, and you do not need to give a reason.
Changes
If we start collecting anything else on this site, this page changes first. The date at the top is when it was last altered.