Privacy Policy

We may collect the following types of information:

• Personal Information: Name and email address, collected at the point of assessment submission
• Assessment Data: Responses, scores, and outputs generated through the diagnostic

We only collect information necessary to deliver your assessment results and store them permanently for your access.

We use your information to:

• Generate insights, reports, and assessment outputs
• Improve our methodologies and platform performance
• Communicate relevant updates or follow-ups

We do not sell your data.

We use modern, enterprise-grade infrastructure to protect your data. Our platform leverages Neon, a secure, cloud-native database provider.

Security measures include:

• Encryption of data in transit (TLS)
• Encryption of data at rest (industry-standard)
• Strict access controls and authentication
• Continuous monitoring and auditing

Our infrastructure aligns with globally recognised standards including SOC 2, ISO 27001, GDPR, and HIPAA-level practices.

Access to your data is tightly controlled:

• Only authorised individuals can access data where necessary
• Access is logged and regularly reviewed

We follow a least-privilege approach to ensure maximum protection.

We do not share your personal or assessment data with third parties, except:

• Where required by law
• Where necessary to operate secure infrastructure (hosting providers)

We do not sell or monetise your personal data.

We retain data only as long as necessary to provide our services and meet legal or contractual obligations.

You may request deletion of your data at any time.

Depending on your location, you may have the right to access, correct, or request deletion of your data.

To exercise these rights, contact: kevinianallen@gmail.com

We understand that assessment responses at leadership or board level may be highly sensitive.

• Your responses are treated as confidential
• Results are only shared with authorised participants
• Aggregated insights may be used for research, but never in a way that identifies individuals or organisations

We may update this Privacy Policy from time to time. Updates will be posted on this page.