YOUR INFORMATION, EXPLAINED

Privacy notice

Version 1.3 · Applies to the Prism assessment and report service.

Who is responsible

The data controller is Prism Personality Range Assessment (PRA), at London UK. For a privacy question or to exercise your rights, email prism@safetyman.net.

What we collect and why

We collect your chosen report name and email address to personalise your result, connect it to an optional purchase and let you recover access. We store your question order, answers and calculated result to save progress and provide your assessment. We record the time, versions and exact wording of the terms and privacy notice presented when you accept them. We record whether you confirm that you are at least 18. We do not ask for your date of birth.

If you buy a report, WooCommerce and the selected payment provider process the billing, transaction and order details required at checkout. Prism connects your report to the order number and records your digital-content delivery choice. It does not collect full payment-card details. Do not put medical information or other sensitive information in your report name.

Our lawful bases

We use the information necessary to supply the assessment, save and recover access, provide your report and answer service requests to perform our agreement with you or take steps you request before a purchase (UK GDPR Article 6(1)(b)). Your chosen name supports report personalisation; an email address supports access recovery and purchase fulfilment. We use necessary accounting records to meet legal obligations (Article 6(1)(c)).

We use short-lived security records and necessary evidence of terms acceptance to protect the service, address misuse and resolve disputes under our legitimate interests (Article 6(1)(f)), balanced against your rights. You may object to processing on that basis. If information must be retained for a specific legal claim or obligation, we explain why and restrict its use. Agreeing to terms is not blanket consent to unrelated processing.

This assessment does not subscribe you to advertising or marketing. We do not sell your assessment information or use it to train an AI model. This version has no employer-facing or public result-sharing facility.

How the automated analysis works

Software adds the ratings for each personality style and calculates each share of the section total. Forced choices and answer order resolve tied totals. Separate rules compare natural and pressure responses and check agreement between similar questions. The result is a reflective profile generated automatically from your answers. We do not use it to make decisions with legal or similarly significant effects. If an explanation does not fit, contact us or use the feedback link on your result.

The questions are not designed to diagnose health conditions or infer special-category information. A development profile remains personal information. If you send sensitive information in a support request, we will assess the additional protections and lawful conditions needed before using it.

Who can receive the information

Access is limited to personnel and service providers who need it to operate the service, fulfil purchases or provide support. Our hosting provider and data location: Hostinger.

Other processors used by the operator, including transactional email and payment services: Stripe. Payment providers may also act as independent controllers for their own legal and security purposes; consult their checkout notices. We may disclose information where a legal obligation requires it.

International transfers and safeguards: None apply. Contact us for information about the safeguards that apply and how to obtain a copy.

How long we keep it

Incomplete and unpaid assessments are kept for 30 days from registration. Paid assessment records are kept for 365 days from payment so you can access your report. A scheduled daily job removes expired assessment records. Recovery links expire after 30 minutes. The essential session cookie expires after 30 days; recover access by email if your report remains within its access period.

Prism does not persist your raw IP address in its assessment table. A keyed, short-lived security counter derived from the connecting IP address limits requests and expires within one hour. Your host, WordPress security plugins and payment service may keep their own logs under the operator’s wider privacy arrangements. Backup copies expire within 30 days under the operator’s backup policy; erasure records must be reapplied if a backup is restored.

WooCommerce billing and order records are separate from the assessment and may need to be kept to meet accounting, tax or legal requirements. Their retention is governed by the store’s privacy notice and configured order-retention policy. A deleted assessment is not automatically recreated from an order. The operator must retain only what is justified for any continuing obligation.

Cookies and local storage

Prism uses one essential, secure, HTTP-only session cookie to keep access to your assessment private. It is used only to deliver the service you request. Your contrast preference may be kept in your browser. Answers are saved to the server while you complete the assessment; personal results and access tokens are not stored in browser local storage. WooCommerce uses necessary shopping and checkout cookies. This plugin adds no analytics, advertising cookies or third-party font requests. Other parts of the website may use separate services described in the main site privacy and cookie notices.

Your rights and choices

Depending on the circumstances, you can request access, correction, erasure, restriction, portability or object to certain uses of your information. Email the contact above. We may ask for proportionate evidence of identity to protect your records. We normally respond within one month; if a lawful extension is needed we explain it. You can download your assessment data or erase the assessment directly while signed in to your Prism session. Erasure ends online report access, including paid access, so save any report you wish to keep first.

If you ask us to erase information we must retain for a legal obligation or claim, we will explain the limited exception. You can complain to the UK Information Commissioner at ico.org.uk/make-a-complaint, or to the relevant supervisory authority where you live.

Before you submit

Supplying your chosen report name, an email address you control and the assessment answers is required for this registered service. If you do not wish to provide them, you can still read the public explanation of Prism. Your acknowledgement confirms that this notice was available to you; it does not waive your rights or consent to marketing.