Privacy, in plain English.
The short version: we set no cookies of our own, we run no analytics or trackers, and the documents you send us are used for exactly one thing, checking and publishing your event documentation. The longer version follows.
Who we are
SAG Portal is a trading name of Portalworks Ltd, a company registered in England and Wales, company number 17364487, registered office Imperial House, 79–81 Hornby Street, Bury BL9 5BN. We operate sagportal.co.uk from the United Kingdom, providing the Document Checker and secure documentation portals for event organisers and their Safety Advisory Groups.
Portalworks Ltd is the data controller for personal data we hold about you, and the data processor for the documents you send us, which remain yours. For anything about your data, email hello@sagportal.co.uk.
What we collect
If you email us: your name, your email address and whatever you choose to include. If you buy from us: payment is taken by Stripe, and we never see or store card numbers. If you upload documents for a check: your email address, the event name, and the documents themselves, for as long as it takes to deliver and then the retention period below. That is the lot.
Visiting this site sends us nothing. No cookies of our own, no analytics, no advertising pixels, no tracking of any kind.
Documents you send us
Event safety packs contain operational detail and sometimes personal data, for example key contact sheets. We process those documents only to run the check you asked for and to build the portal you asked us to publish, on your instructions. The organiser remains responsible for the content of their pack.
How documents are protected
Documents you upload for a check travel over an encrypted connection and sit on an encrypted disk while we process them. Published portals go further: each document is encrypted (AES-256) before it reaches our hosting and only unlocks in an authorised reader’s browser. Portal addresses are unlisted, carry headers telling search engines not to index them, and sit behind a password that the organiser distributes separately. Anyone inspecting our pages sees scrambled text, not your plans.
Who else handles your data
We are a small company and we run on other people’s infrastructure. Each of these sees only what it needs to:
- Cloudflare hosts this website and our DNS, and serves published portals.
- Fly.io runs the Document Checker, in its London region. Documents you upload for a check are processed and held there for the retention period below.
- Stripe takes payment. It sees your card details; we never do.
- Resend delivers our email, including your report. It carries the report, never your documents.
How long we keep things
Documents uploaded for a check are deleted 30 days after the last check on that pass, or 90 days for Agency. A record that a check ran, without the documents, is kept for 12 months so we can answer questions about it. Portals stay live for the period agreed with the organiser, typically until shortly after the event, and are then removed. If you want something deleted sooner, ask and we will.
Your rights
Under UK data protection law you can ask us what we hold about you, ask for a copy, ask for corrections, or ask for deletion. Email us and we will help. If you think we have fallen short, you can complain to the Information Commissioner’s Office at ico.org.uk.
Contact
hello@sagportal.co.uk
Last updated October 2026. Written in plain English on purpose. Our terms are written the same way.