Human Potential Development Inc. (“us”, “we”, or “our”) operates the Being at Full Potential websites and applications at https://beingatfullpotential.io, including the Human Potential Assessment (individual, team/organizational and 360° versions) and the Inner Development Guide (IDG) assessment (together, the “Service”).
This page explains what personal data we collect when you use our Service, how we use it, and the choices and rights you have. We act as the data controller for this personal data. Unless otherwise defined here, terms have the same meaning as in our Terms and Conditions.
Definitions
- Personal Data — information about an identified or identifiable living individual.
- Usage Data — data collected automatically from your use of the Service or its infrastructure (for example, how long a page is viewed).
- Cookies — small files stored on your device.
- Data Controller — the party that determines the purposes and means of processing personal data. For this Service, that is us.
- Data Processor / Service Provider — a party that processes data on the controller’s behalf.
- Data Subject (or User) — the individual whose Personal Data is processed.
Data We Collect
Information you give us
- Account details — your email address, your password (stored only in encrypted/hashed form) and your name.
- Profile details — demographic information you provide at sign-up or in your profile, such as your age group/generation and geographic region. Some organizational assessments may ask for additional profile fields configured by the organization.
- Assessment responses — the answers you give in an assessment, and the scores, states and reports we generate from them. These reflect your own self-assessment and are central to the Service.
- Journal and reflections — any notes, reflections or growth entries you choose to record in the Service.
- Communication preferences — for example, whether you opt in to our newsletter.
Information collected automatically
- Usage and device data — such as your IP address, browser type and version, the pages you visit, the dates, times and duration of visits, device identifiers and diagnostic data. On a mobile device this may include device type, operating system and mobile identifiers.
- Cookies and similar technologies — see below.
Cookies and Local Storage
We use cookies, browser local storage and similar technologies to operate the Service, keep you signed in, remember your preferences (such as your chosen language), and help us understand and improve how the Service is used. You can set your browser to refuse some or all cookies, but some parts of the Service may then not work properly. Examples include:
- Essential / session — required to sign you in and run the Service.
- Preference — remember settings such as your language.
- Analytics — help us understand usage (see “Service Providers”).
How We Use Your Data
- To provide and maintain the Service, including generating your assessment reports.
- For team or organizational assessments, we report only aggregated results to the organization, so it can understand overall progress and choose development interventions. Your individual results are shared with the organization only with your explicit consent.
- To notify you about changes to the Service.
- To let you take part in interactive features when you choose to.
- To provide customer support.
- To understand usage so we can improve the Service.
- To monitor the Service and to detect, prevent and address technical or security issues.
- With your consent where required, to send you news, resources and information about our services. You can opt out at any time via the unsubscribe link in our emails or in your settings.
Legal Bases (EEA / UK)
If you are in the European Economic Area or the United Kingdom, we rely on one or more of the following legal bases, depending on the data and context:
- Performance of a contract with you.
- Your consent (which you may withdraw at any time).
- Our legitimate interests, where not overridden by your rights.
- Compliance with a legal obligation.
Retention
We keep your Personal Data only as long as necessary for the purposes in this policy — including to provide the Service to you, comply with our legal obligations, resolve disputes and enforce our agreements. Usage Data is generally kept for a shorter period, except where it is used to strengthen security or improve the Service, or where we must retain it longer by law. You can ask us to delete your account and associated data (see “Your Rights”).
Sharing and International Transfers
We do not sell your Personal Data. We share it only with the service providers described below, with an organization where you have consented (or in aggregated form for organizational assessments), or where required by law.
We store your data on secure servers located in Germany, within the European Union. As our company is established in Canada, your data may also be accessed from Canada. Where data is transferred outside your own country, we take steps to ensure it is protected in line with this policy and applicable law (for example, appropriate contractual safeguards).
Disclosure
Business transfers. If we are involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will give notice before your data becomes subject to a different privacy policy.
Legal requirements. We may disclose your Personal Data in good faith where necessary to comply with the law or valid requests by public authorities, to protect our rights or property, to investigate possible wrongdoing, to protect the safety of users or the public, or to protect against legal liability.
Security
The security of your data matters to us, and we use commercially reasonable measures (including hashing of passwords and encryption in transit) to protect it. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Your Rights
Depending on where you live, you may have some or all of the following rights over your Personal Data:
- Access, correction and deletion — view and update much of your data in your account settings, or ask us for access, correction or deletion.
- Rectification — have inaccurate or incomplete data corrected.
- Objection and restriction — object to, or ask us to restrict, certain processing.
- Portability — receive a copy of your data in a structured, commonly used, machine-readable format.
- Withdraw consent — where we rely on your consent, withdraw it at any time.
We may need to verify your identity before acting on a request. To exercise any right, contact us using the details below. You also have the right to complain to your local data protection authority (in the EEA or UK).
“Do Not Track”
We do not currently respond to browser “Do Not Track” signals.
Service Providers
We use trusted third parties to help us run the Service. They may access your Personal Data only to perform tasks on our behalf and must not use it for any other purpose. These include:
- Analytics and search — Google Analytics and Google Search Console, to understand usage and improve the Service and its visibility in search. See Google’s Privacy Policy.
- Email and CRM — Brevo, to send transactional emails and, where you opt in, our newsletter.
- Donations — if you choose to make a donation, it is processed by PayPal under PayPal’s own privacy policy. We do not receive or store your card details.
- Hosting and infrastructure — to host the Service and store your data securely on servers located in Germany (EU).
Links to Other Sites
The Service may link to sites we do not operate. We are not responsible for their content or privacy practices, and we encourage you to review the privacy policy of every site you visit.
Children’s Privacy
The Service is not directed to anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us with Personal Data, please contact us and we will take steps to remove it.
Changes to This Policy
We may update this policy from time to time. We will post the updated policy on this page, update the “last updated” date, and, where appropriate, notify you by email or a notice in the Service. Please review it periodically.
Contact Us
If you have any questions about this policy, or you want to exercise your rights, contact us at beingatfullpotential@gmail.com.