Privacy Policy

1. Who we are

Full Focus [legal entity name + registered address — TBD] is the data controller for Your WorkStyle Assessment. Questions or requests: [privacy contact email — TBD] or the manual request form at /manage.

2. What we collect

You provide:

• Your first name and email address (at opt-in).
• Your 25 answers. Twenty of them are about how you work. The remaining five ask about your current life circumstances, your gender, your age range, your role or seniority, and the kind of support you would consider next. We use these to personalise your results and follow-up, and to understand our audience in aggregate; the gender, age and role answers are also stored against your profile in our email platform for segmentation.
• One of those questions — about current life circumstances — may include health-related or relationship information, which is special-category data under GDPR Article 9. We process it only with the explicit consent you give at the checkbox, keep those selections in the first-party database, and do not send them to email or analytics vendors. You can decline to take the Assessment if you prefer not to consent.

Collected automatically when you use the Assessment: country (from IP), browser type and timezone, referral source and campaign tags, and interaction signals such as time per question. Your progress is saved in your browser’s local storage — we use no advertising or cross-site tracking cookies.

3. Why we process it

To compute and show your WorkStyle results and full report; to send your results email and a short follow-up series personalised to your result (with your consent); to protect the service from abuse and understand aggregate funnel performance (legitimate interest, using de-identified statistics); and to meet legal obligations. Special-category answers are processed solely on your explicit consent (Article 9(2)(a)) to personalise results and follow-up.

4. Where it lives and who processes it

Your data is stored in a PostgreSQL database hosted by Supabase in Amazon Web Services’ US East (N. Virginia) region, in the United States. Processors acting on our instructions:

• Supabase (US) — the database holding your answers and contact details.
• Vercel — application hosting, delivery, and hosting the results videos. Video requests include your IP address; we do not send your name, email, or answers with them.
• Google (US) — after assessment opt-in, Google Tag Manager may load our analytics. Loading it means Google receives your IP address. It carries no advertising or cross-site tracking tags.
• Plausible — privacy-friendly website analytics: which pages are visited and where visitors arrive from, measured without cookies and without tracking you across other sites. We do not send it your name, email, answers or results.
• Klaviyo (US) — sending your results email, assessment reminders and follow-up series, and managing email preferences.

Because your data — including the special-category answers described above — is stored and processed in the United States, transfers out of the EU/UK are protected by appropriate safeguards such as Standard Contractual Clauses [counsel to confirm the mechanism for the database and for each processor — TBD].

5. How long we keep it

Personal data is kept while your record is active and is automatically erased after 24 months of inactivity. Erasure — automatic or requested — permanently removes your identity everywhere: your contact details are deleted, your answers are stripped of every identifying detail (including the life-circumstances tags), and only anonymous statistics plus a hashed, non-identifying receipt of the erasure remain. Consent records are retained as an audit trail with identifiers detached.

6. Your rights

You can, at any time: request a copy of your data (export), have it erased, correct it, or withdraw consent (which stops all further processing of your answers and emails). The form at /manage queues export and erasure requests for manual review; an authorised team member verifies identity by email before fulfilling them. Other rights requests use the privacy contact above. You also have the right to complain to your supervisory authority [lead authority — TBD].

7. Emails and marketing

After completing the Assessment you receive your results email and a short series related to your WorkStyle. Every marketing email has an unsubscribe link; unsubscribing never affects access to your results.

8. Children

Your WorkStyle Assessment is intended for working professionals and not directed at children [minimum age — TBD, counsel].

9. Changes

This policy is versioned; the version you consented under is recorded and never silently rewritten. This page is version v0.3.0. Material changes take effect as a new version with a new effective date.