Privacy Policy

1. Introduction

Personality Institute ("we," "us," or "our") operates the website located at personality.institute and all associated subdomains, products, and services (collectively, the "Platform"). We are committed to protecting your personal information and being transparent about how we collect, use, and share it.

This Privacy Policy describes our data practices in connection with your use of the Platform, including the completion of personality assessments, purchase of premium reports, practitioner licensing, and organizational subscriptions. It applies to all users: individuals, coaches and consultants, and organizational administrators.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please do not use the Platform.

2. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically through your use of the Platform, and information received from third parties.

2.1 Information You Provide

• Account and registration data: name, email address, professional credentials (e.g., ICF designation), organization name, and password when you create an account.
• Assessment responses: your answers to personality assessment instruments, including DISC, Big Five (OCEAN), Enneagram, Emotional Intelligence, Burnout Index, Psychological Safety, Leadership Styles, and Values assessments.
• Payment information: billing name, billing address, and payment card details. Payment card data is processed by a PCI-DSS-compliant third-party processor and is not stored on our servers.
• Communications: messages, feedback, support requests, and other content you submit to us.
• Practitioner and organizational data: client lists, team member information, and usage data that practitioners or organizational administrators input into the Platform.

2.2 Information Collected Automatically

• Usage data: pages visited, features used, time spent on the Platform, assessment completion rates, and interaction logs.
• Device and technical data: IP address, browser type and version, operating system, device identifiers, and referring URL.
• Cookies and tracking technologies: session cookies, persistent cookies, and similar technologies as described in Section 7 of this Policy.

2.3 Information from Third Parties

• Payment processors (e.g., Stripe): transaction confirmation, billing address verification, and fraud signals.
• Email service providers: delivery and open/click analytics for communications we send.
• Analytics providers: aggregated behavioral and demographic data to help us understand Platform usage.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To deliver, operate, and improve the Platform, including generating assessment results and personalized reports.
• To process transactions, fulfill purchases, and manage subscriptions and licenses.
• To communicate with you about your account, purchase confirmations, updates, and support inquiries.
• To send marketing and educational communications, where you have opted in or where otherwise permitted by applicable law. You may opt out at any time.
• To enforce our Terms of Use, detect fraud, and protect the security and integrity of the Platform.
• To comply with legal obligations and respond to lawful requests from public authorities.
• To conduct aggregate analytics and research to improve assessment quality and Platform functionality. Assessment responses used for research are de-identified or aggregated.
• To enable practitioner and organizational features, such as team dashboards, bulk report generation, and client management tools.

We do not sell your personal information to third parties. We do not use assessment response data for employment screening, credit decisions, insurance underwriting, or any other legally regulated purpose without your explicit, separate consent.

4. Legal Basis for Processing

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we process your information on the following bases:

• Contract: processing necessary to fulfill our agreement with you, including delivering assessments, reports, and subscription services.
• Legitimate interests: improving the Platform, preventing fraud, and sending relevant communications, where these interests are not overridden by your rights.
• Consent: for marketing communications and any processing for which we have requested your consent, which you may withdraw at any time.
• Legal obligation: compliance with applicable laws and regulations.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. How We Share Your Information

We do not sell personal information. We share your information only in the following circumstances:

5.1 Service Providers

We share information with third-party vendors who perform services on our behalf, including payment processing, email delivery, hosting, analytics, and customer support. These vendors are contractually required to use your information only to perform services for us and in accordance with this Policy.

5.2 Practitioner-Client Relationships

If you complete assessments through a practitioner's account or a license administered by a coach or organizational administrator, your assessment results and report data will be accessible to that practitioner or administrator as part of the service they have licensed. Practitioners are required to agree to our Terms of Use, which include data handling obligations.

5.3 Organizational Accounts

If your account is associated with an organizational subscription, your organizational administrator may have access to your assessment results, usage data, and account information as permitted by the subscription agreement.

5.4 Legal Requirements and Protection

We may disclose information when we believe disclosure is required by law, court order, or governmental authority; necessary to enforce our Terms of Use; or needed to protect the rights, property, or safety of Personality Institute, our users, or the public.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

6. Data Retention

We retain your personal information for as long as necessary to provide Platform services, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account data: retained for the duration of your account and for a reasonable period thereafter for legal and operational purposes.
• Assessment responses: retained for the life of your account. De-identified assessment data may be retained indefinitely for research and Platform improvement purposes.
• Transaction records: retained for a minimum of seven (7) years to satisfy tax and accounting requirements.
• Marketing preferences: retained until you opt out or request deletion, and for a period thereafter to honor opt-out requests.

You may request deletion of your personal information at any time, subject to the exceptions described in Section 8.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate the Platform, remember your preferences, and understand how users interact with our services.

• Strictly necessary cookies: required for the Platform to function, including session management, authentication, and security. These cannot be disabled.
• Functional cookies: enable personalization features such as remembering your assessment progress and display preferences.
• Analytics cookies: allow us to measure Platform performance and understand user behavior in aggregate.
• Marketing cookies: used to deliver relevant content. These are only deployed with your consent where required by applicable law.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete information.
• Deletion: request deletion of your personal information, subject to our retention obligations.
• Portability: receive your data in a structured, machine-readable format where technically feasible.
• Restriction: request that we limit the processing of your information in certain circumstances.
• Objection: object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw consent: withdraw any consent you have given, without affecting prior lawful processing.

California residents have additional rights under the CCPA, including the right to know about and opt out of the sale of personal information. We do not sell personal information, and we do not discriminate against users who exercise their privacy rights.

To exercise any of these rights, contact us at privacy@personality.institute. We will respond within the timeframe required by applicable law (generally 30 to 45 days) and may require verification of your identity before processing certain requests.

9. Data Security

We implement technical and organizational measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit (TLS), access controls, regular security reviews, and contractual data protection requirements for service providers.

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. In the event of a data breach that requires notification under applicable law, we will notify affected users as required.

10. Children's Privacy

The Platform is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@personality.institute and we will delete it promptly.

Users between the ages of 13 and 18 should obtain parental consent before using the Platform. Certain assessment instruments are designed for adult populations and may not be appropriate for minors.

11. International Data Transfers

Personality Institute is based in the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

For users in the EEA, UK, or other jurisdictions with data transfer restrictions, we rely on appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms) when transferring data internationally.

12. Third-Party Links and Services

The Platform may contain links to third-party websites or integrate with third-party tools. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through the Platform. We are not responsible for the data practices of third parties.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated Policy with a revised effective date and, where appropriate, send an email notification. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

Prior versions of this Policy will be made available upon request.

14. Contact Us

Questions, concerns, or requests regarding this Privacy Policy or our data practices may be directed to: