Privacy notice · Version 1 October 2026

Your assessment data, explained plainly.

This diagnostic is designed to collect only the information needed to calculate and improve a strategy-execution maturity result. It does not ask for your name or special-category personal data. An email address is requested only if you separately choose to receive a result summary and ask Elevating Work to contact you.

What we collect

We collect country, role level, answers to 20 maturity statements, your confidence estimate, optional feedback on whether the result resonates, a submission time and a randomly generated response reference. The optional value-exposure calculator uses broad currency, financial-value and execution-dependency ranges. Those calculator choices stay in your browser unless you explicitly request a conversation. If you do, we also store the selected ranges, calculated exposure range, your email address and the time of the request so the conversation can be relevant to your result. Invitation links may contain a general source label, such as a named beta cohort, so Elevating Work can distinguish where responses originated. The source label does not contain your name or a unique personal identifier.

Please do not include names, confidential information, health information, political views or other sensitive personal data in the optional feedback box.

Why we use it

The information is used to calculate your diagnostic, identify broad strengths and execution risks, analyse aggregated patterns and improve the assessment. If you request contact, it is also used to send your transactional result summary to you and a corresponding follow-up notification to Fred Pernet. The intended lawful basis for the diagnostic is Elevating Work's legitimate interest in providing and improving a voluntary business assessment. An optional contact request is processed with your consent.

The score is an indicative management diagnostic. It is not used to make legal or similarly significant automated decisions about an individual. The strategic value exposure is a ballpark decision aid based on the ranges and confidence supplied by the participant. It is not a financial forecast or a formal Value-at-Risk measure.

Who can access it

Individual submissions are not displayed to other survey participants. Access is limited to authorized assessment administrators and the service providers needed to host, maintain and—when requested—deliver transactional email from the tool. When enabled, Resend receives the destination email address and the summary message content solely to provide email delivery. We do not sell responses or use them for unrelated advertising.

Requesting a conversation does not subscribe you to a newsletter or wider marketing. Your email is used only to respond about this result unless you later make a separate choice.

How long we keep it

Assessment records, including an optional contact email, are scheduled for deletion after 24 months. Data needed for longer-term benchmarking should first be aggregated or anonymized so it no longer identifies a participant.

Security and cookies

The application validates submissions on the server, limits input size, uses unguessable one-time tokens for feedback updates and prevents organization-wide results being returned through the public submission endpoint. Browser protections also restrict framing, referrer leakage and access to device features.

The assessment itself does not set analytics or advertising cookies. The hosting platform may use strictly necessary security or session storage when access controls are enabled.

Your choices and rights

Participation, feedback and the contact request are voluntary. You can withdraw a contact request at any time and ask not to receive further contact; an email that has already been sent cannot be recalled. Depending on your location, you may have rights to access, correct or erase your data, restrict or object to processing, and complain to a data-protection authority. Keep the response reference shown on your results page: it helps the controller locate the correct record without collecting your identity in the survey.

Contact fred@elevatingwork.co.uk to exercise these rights. In the UK, you may also complain to the Information Commissioner's Office.

International processing and changes

Before public launch, the controller must confirm where the hosting service processes data and document any required international-transfer safeguards and processor terms. Material changes to this notice will be reflected in a new version date.