Privacy Policy

1. Information We Collect

We collect personal data to provide and improve our Service, which helps you understand yourself better and matches you with other people or organizations. The types of information we collect include:

• Personal Information: When you register for an account, we may collect your name, email address, phone number, and other contact details. You may also provide additional information, such as preferences or demographic details, to enhance your profile.
• Psychological and Behavioral Data: With your explicit consent, we collect information about your interests, preferences, personality traits, and other behavioral data to create psychological profiles. This helps us provide personalized insights and match you with compatible individuals or organizations.
• Usage Data: We automatically collect data about your interactions with our Service, such as pages visited, time spent on the Service, and features used. This may include your IP address, device information, browser type, and operating system.
• Payment Information: When you make payments through our Service, we use Stripe, a third-party payment processor, to process your payment details securely. We do not store your payment card details; these are handled directly by Stripe in accordance with their Privacy Policy (see Section 5 below).
• Engagement Data: If you contact us, attend our events, or sign up for communications, we may collect details about these interactions, such as your registration information or responses to surveys.

2. How We Use Your Information

We use your personal data to provide, improve, and personalize our Service. Specifically, we use your information to:

• Create and maintain your account to access our Service.
• Develop psychological profiles based on your explicit consent to help you gain insights into yourself and improve your experience.
• Match you with other individuals or organizations based on compatibility, preferences, or shared interests.
• Process payments securely through Stripe for any paid features or services.
• Communicate with you, including responding to inquiries, sending updates, or marketing our services (with your permission or where allowed by law).
• Analyze usage patterns to improve our Service, enhance user experience, and develop new features.
• Comply with legal obligations, such as anti-money laundering (AML) or know-your-customer (KYC) requirements, where applicable.
• Prevent fraud, ensure security, and protect the integrity of our Service.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the UK GDPR:

• Consent: We rely on your explicit consent to collect and process sensitive data, such as psychological or behavioral information, for creating profiles and matching purposes. You may withdraw your consent at any time (see Section 8).
• Contract: We process data necessary to fulfill our contract with you, such as providing access to the Service or processing payments.
• Legitimate Interests: We process data for our legitimate business interests, such as improving the Service, preventing fraud, or responding to your inquiries, provided these interests are not overridden by your rights.
• Legal Obligation: We process data to comply with applicable laws, such as tax or regulatory requirements.

4. Sharing Your Information

We do not sell, trade, or release your personal data to third parties for marketing purposes without your explicit permission. We may share your data in the following limited circumstances:

• With Service Providers: We share data with trusted third-party service providers, such as Stripe for payment processing, who process data on our behalf to provide the Service. These providers are bound by agreements to protect your data and only use it for specified purposes.
• For Matching Purposes: With your explicit consent, we may share relevant profile information (e.g., preferences or interests) with other users or organizations to facilitate matches, but only to the extent you have authorized.
• For Legal Reasons: We may disclose data if required by law, such as to comply with a legal process, respond to regulatory authorities, or protect our rights, property, or safety.
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, but we will notify you and ensure your data remains protected.

5. Use of Stripe for Payments

We use Stripe for payments, analytics, and other business services. Stripe may collect personal data, including via cookies and similar technologies. The personal data Stripe collects may include transactional data and identifying information about devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection, loss prevention, authentication, and analytics related to the performance of its services. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.

6. Your Rights and Choices

Under the UK GDPR, you have the following rights regarding your personal data:

• Access: Request access to the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal retention requirements.
• Restriction: Request that we limit the processing of your data in certain circumstances.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests, including for direct marketing purposes.
• Withdraw Consent: Withdraw consent for processing (e.g., for psychological profiling) at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise these rights, contact us at accounts@potentialisation.com. We may require verification of your identity before processing your request. You may also designate an authorized agent to make requests on your behalf, subject to verification.

We honor Global Privacy Control (GPC) opt-out preference signals where applicable.

7. Data Security

We implement technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration. These measures include encryption, access controls, and secure data storage. Your personal data is stored on servers located within the United Kingdom or the European Economic Area (EEA) to ensure compliance with UK GDPR requirements. However, no system is completely secure, and we cannot guarantee absolute security.

8. Withdrawing Consent

If you have provided explicit consent for us to process sensitive data, such as for psychological profiling or matching, you may withdraw your consent at any time by contacting us at accounts@potentialisation.com or using the settings in your account. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal, and we will cease processing the relevant data unless another legal basis applies.

9. International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom or the European Economic Area (EEA) to comply with UK GDPR requirements. In limited circumstances, we may transfer your personal data to countries outside the UK/EEA, such as to the United States (e.g., for payment processing by Stripe). Where such transfers occur, we ensure compliance with UK GDPR through appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA), standard contractual clauses, or other approved mechanisms to protect your data.

10. Retention of Data

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including to provide the Service, comply with legal obligations, or resolve disputes. When data is no longer needed, we securely delete or anonymize it in accordance with UK GDPR requirements.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. You can manage your cookie preferences through your browser settings or our cookie consent tool (if applicable). For more details, see our Cookie Policy [link to Cookie Policy, if available].

12. Third-Party Links

Our Service may contain links to third-party websites or services not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal data.

13. Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16 without parental consent. If we learn that we have collected such data, we will take steps to delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website or by other means, such as email, as required by UK GDPR. Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

You may also contact our Data Protection Officer (if appointed) at accounts@potentialisation.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO), the supervisory authority for data protection in the UK: