What this system collects, why, and where it's kept.
This is a plain-English notice for a small, internally-run tool — it isn't a substitute for any official corporate privacy policies that may also apply to you.
The Wessex DPM Access Passport System is built and operated by Oliver Viney for Wessex Region access-planning teams. Questions or requests about your data can be sent to support@nrapps.co.uk.
There's no public sign-up. Accounts are created individually for approved users by an administrator and identified by your work email or username. Passwords are stored as salted hashes, never in plain text. Each account has one role (admin, standard, or viewer) that controls what you can see and do.
Logging in sets a single signed, httpOnly, secure cookie that identifies your
session for up to 30 days. It carries no tracking or analytics data, and nothing is sent to
any third party for advertising or analytics purposes.
Risk assessments you create or edit — access point details, route/ELR/mileage or grid reference, the risk factors and triggers selected, the resulting RAG rating, free-text notes, who issued the assessment, timestamps, and any attached photos — are stored in a private GitHub repository that only this system's server can write to. Assessment history is kept as an ongoing audit trail for access management; older entries can persist in the repository's version history even after an edit.
Each assessment can generate a "share link" / QR code that opens a read-only fact sheet with no login required — this is by design, so a driver or site visitor can check access conditions on their phone before arriving. That page includes an optional feedback form; any name, contact detail, or photo submitted through it is provided voluntarily by whoever fills it in.
Searching by postcode or grid reference sends that location text (not your identity) via this system's server to OpenStreetMap's Nominatim (geocoding) and Overpass (nearby-feature) services, to help populate hazard information near an access point.
To ask what's held about you, request a correction, or ask for something to be removed, contact support@nrapps.co.uk. Bear in mind some assessment data may need to be retained for site-safety record-keeping even after a correction request.