This policy explains what personal data DISCProfile.me collects, why, who we share it with and your rights. DISCProfile.me is run by James Calver, a sole trader trading as DISCProfile.me, of 4th Floor, 399-401 Strand, London WC2R 0LT ("we", "us"). We are the controller of your personal data under UK data protection law. Contact us about anything in this policy at hello@discprofile.me.
What we collect
| Data | When we collect it |
|---|---|
| Name and email address | When you buy an assessment, create an account, or are invited by a business |
| Your assessment answers, results and DiSC profile | When you take the assessment |
| Your manager's email address | Only if you, or the business inviting you, choose to send a manager a copy of your report |
| Billing address | Only if you ask for an invoice at checkout |
| Payment details | Handled by Stripe. We never see or store your card number |
| Business account details: business name, logo, and the names and emails of colleagues and people invited | When a business uses our business portal |
| Course progress, quiz results and certificate | When you take the DISC Practitioner Certification |
| Your approximate country | Worked out from your connection to show prices in your currency. We don't store it |
| How you use the site | Through cookies, only with your consent (see Cookies) |
How we use it and our lawful basis
- To provide what you bought or were given (the assessment, your report, your account, the course and certificate). Lawful basis: performance of a contract with you.
- To provide assessments to businesses' staff (sending the invite, delivering your report to you, and telling the business whether you've finished). Lawful basis: our and the business's legitimate interests in providing the assessment the business paid for. You can choose not to take part.
- To take payments and keep financial records. Lawful basis: contract, and our legal obligation to keep accounting records.
- To send emails about your purchase or assessment, such as receipts, invites and your report. We don't send marketing emails.
- To understand how the site is used and improve it. Lawful basis: your consent to analytics cookies.
Who can see your results
- You always receive your own report.
- Your manager, only if a manager's email was added when the assessment was bought or the invite was sent. You are told about this before you start.
- A business that invited you sees whether you've been invited, started or finished. It does not see your answers or results unless your manager copy goes to someone there.
- Anyone you share your profile link with. Your results page has a Share option that creates a page showing your name and DiSC style. Only people with the link can see it.
- Course certificates can be checked by anyone with the certificate's verification link, which shows your name and completion date.
Companies that process data for us
We use these providers to run the service. They may only use your data to provide their service to us.
| Provider | What they do | Where data is processed |
|---|---|---|
| Clerk | Account sign-in | United States |
| Stripe | Payments and invoices | UK, EU and United States |
| Resend | Sending our emails | United States |
| Neon | Our database | Germany (EU) |
| Vercel | Hosting the website | United States and global |
| Google (Analytics) | Website usage statistics, with consent | United States |
We may also share data if the law requires it, or with a buyer if the business is sold.
International transfers
Some providers process data outside the UK. Transfers to the EU rely on UK adequacy regulations. Transfers to the United States rely on the UK-US data bridge where the provider is certified, or on the UK's International Data Transfer Agreement or Addendum to the EU standard contractual clauses.
How long we keep it
- Assessments and results: 3 years after the assessment was last updated (usually when you finished it), so you can return to your report, then deleted automatically.
- Accounts: deleted automatically after 3 years without a sign-in, unless you have course access or a business account.
- You can ask us to delete any of your data sooner.
- Payment and invoice records: 6 years, as required for tax.
- Business portal records: while the business account is open, then deleted on request.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Where we rely on consent, you can withdraw it at any time. Email hello@discprofile.me and we'll respond within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
- Essential cookies keep you signed in (Clerk), remember your assessment for 2 hours after payment, and protect payments (Stripe). The site doesn't work without them.
- Analytics cookies (Google Analytics) are set only if you accept them. You can change your choice at any time using "Cookie settings" at the bottom of every page.
Children
The service is for adults. We don't knowingly collect data from anyone under 16.
Changes
We'll update this page when how we use data changes, and change the date at the top.