Privacy Policy

This Privacy Policy was last updated on September 20, 2026

Who we are

We are The Pay 100 Ltd. Throughout the site, the terms “we”, “us” and “our” refer to The Pay 100 Ltd. The Pay 100 Ltd offers this website, including all information, tools and services available from this site you, the user, conditioned upon your acceptance of all terms, conditions, policies and notices stated here. Our website address is: https://thepay100.org.

This privacy policy explains how The Pay 100 Ltd collects, uses, and shares your personal information.

Survey Specific/ forms:

What Personal Information Do We Collect?

We may collect the following personal information from you:

Names
Company names
Job title
Length of times with regard to employment
Personal financial information
Information in relation to working hours and unpaid overtime
Locations
Email address
Additional comments voluntarily offered

We collect this information when you submit your personal information into our forms.

How Do We Use Your Personal Information?

We use your personal information for the following purposes:

To allow us to contact respondents to verify unusual submissions
To prevent duplicate submissions
To prevent fraudulent submissions
To provide you with the services you have requested
To communicate with you about your account or form submission
To improve our services
To comply with legal requirements

Do We Share Your Personal Information?

We do not share your personal information with third parties for marketing purposes.

We may share your personal information with third parties in the following limited circumstances:

To provide you with the services you have requested
To comply with a legal requirement
To protect our rights or property
To protect the safety of our users

How Do We Protect Your Personal Information?

We take steps to protect your personal information from unauthorized access, use, and disclosure.

These steps include:

Using secure servers
Encrypting your personal information
Limiting access to your personal information to authorized employees

How Long Do We Keep Your Personal Information?

We keep your personal information for as long as necessary to provide you with the services you have requested or to comply with legal requirements.

More specifically:

The above unpublished personal information and raw dataset are retained for 12 months after the survey is published for duplicated detection, verification and handling challenges, then deleted or irreversibly separated from the survey dataset.
Survey data is retained as published for statistical/ research purposes, subject to appropriate safeguards.

Your Rights

You have the following rights with respect to your personal information:

The right to access your personal information
The right to correct your personal information
The right to delete your personal information
The right to object to the processing of your personal information
The right to restrict the processing of your personal information
The right to data portability
The right to complain to the Information Commissioner’s Office

Data Protection Impact Assessment (DPIA)

Processing:

Collection and statistical publication of UK architecture employee salary information.

Risks:

employee identification;
employment repercussions;
inaccurate submissions;
employer retaliation;
data breach;
re-identification for small samples.

Controls:

email separation;
non-publishing of sample size per listing;
aggregation;
restricted database access;
deletion schedule;
correction procedure;
security;
publication methodology.

Legitimate Interests Assessment (LIA)

Collecting data is necessary to publish information as a matter of public interest
Email addresses are necessary to allow us to contact respondents to verify unusual submissions; to prevent duplicate submissions; to prevent fraudulent submissions
Practice identification is necessary to publish information as a matter of public interest
Publishing practice-specific aggregated statistics is necessary to publish information as a matter of public interest, whilst mitigating personal risk for respondents
Risks then controls noted within DPIA outline privacy risks for individuals alongside mitigations
The above controls (safeguards) make the processing proportionate and necessary to enable the publishing of information as a matter of public interest

General Website

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

How to Contact Us

If you have any questions about this privacy policy, please contact us at:

data@thepay100.org

Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page.