Your WorkStyle Assessment
Privacy Policy
DRAFT — pending review by Full Focus counsel. Bracketed items are awaiting client confirmation. Describes actual current system behaviour.
1. Who we are
Full Focus [legal entity name + registered address — TBD] is the data controller for Your WorkStyle Assessment. Questions or requests: [privacy contact email — TBD] or the self-service portal at /manage.
2. What we collect
You provide:
- Your first name, last name, and email address (at opt-in).
- Your 25 answers. One question asks about current life circumstances and may include health-related or relationship information — special-category data under GDPR Article 9. We process it only with the explicit consent you give at the checkbox, and you can decline to take the Assessment if you prefer not to consent.
Collected automatically when you use the Assessment: country (from IP), browser type and timezone, referral source and campaign tags, and interaction signals such as time per question. Your progress is saved in your browser’s local storage — we use no advertising or cross-site tracking cookies.
3. Why we process it
To compute and show your WorkStyle results and full report; to send your results email and a short follow-up series personalised to your result (with your consent); to protect the service from abuse and understand aggregate funnel performance (legitimate interest, using de-identified statistics); and to meet legal obligations. Special-category answers are processed solely on your explicit consent (Article 9(2)(a)) to personalise results and follow-up.
4. Where it lives and who processes it
Your data is stored in a PostgreSQL database hosted by Neon in Frankfurt, Germany (EU). Processors acting on our instructions:
- Vercel — application hosting and delivery.
- Resend — sending your results and service emails.
- Klaviyo (US) — the follow-up email series and marketing preferences.
- Google (US) — your results page embeds a short video hosted on Google Drive. When that player loads, Google receives your IP address and may set its own cookies. We do not send Google your name, email, or answers.
Where a processor operates outside the EU/UK, transfers are protected by appropriate safeguards such as Standard Contractual Clauses [counsel to confirm mechanism per processor — TBD].
5. How long we keep it
Personal data is kept while your record is active and is automatically erased after 24 months of inactivity. Erasure — automatic or requested — permanently removes your identity everywhere: your contact details are deleted, your answers are stripped of every identifying detail (including the life-circumstances tags), and only anonymous statistics plus a hashed, non-identifying receipt of the erasure remain. Consent records are retained as an audit trail with identifiers detached.
6. Your rights
You can, at any time: request a copy of your data (export), have it erased, correct it, or withdraw consent (which stops all further processing of your answers and emails). The fastest route is the self-service portal at /manage; every request is confirmed by email. You also have the right to complain to your supervisory authority [lead authority — TBD].
7. Emails and marketing
After completing the Assessment you receive your results email and a short series related to your WorkStyle. Every marketing email has an unsubscribe link; unsubscribing never affects access to your results.
8. Children
Your WorkStyle Assessment is intended for working professionals and not directed at children [minimum age — TBD, counsel].
9. Changes
This policy is versioned; the version you consented under is recorded and never silently rewritten. This page is version v0.1.0-draft. Material changes take effect as a new version with a new effective date.