Privacy Policy

This Privacy Policy explains how The Natework Group LLC, dba Connector Profile ("Connector Profile," "we," "us," or "our," the data controller) collects, uses, stores, and protects your personal data when you use ConnectorProfile.com and our assessment services.

1. Who We Are

The Natework Group LLC, dba Connector Profile (data controller)
Email: support@ConnectorProfile.com
Website: ConnectorProfile.com

We have not appointed a formal EU or UK representative under Articles 27 GDPR/UK GDPR. If you have concerns about this, please contact us using the details above.

2. What We Collect

2.1 Information You Provide

During assessment: Name (optional for free Snapshot), email address (optional for free Snapshot; required for account creation), assessment responses, and audience type selection.

During account creation: First and last name, email address. Your password is processed and stored by our authentication provider: we never see your raw password.

During purchase: Name and billing information collected and processed by Stripe. We never see or store your credit card number. We store only a transaction reference, product purchased, date, and amount.

Voluntarily: Newsletter subscription preferences, marketing communication consent, and support inquiries.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect: IP address, browser type and version, pages viewed, time spent, referring URL, and device type.

2.3 Cookies

Type	Purpose	Duration
Essential	Authentication, session management, security	Session / 7 days
Functional	Saving assessment progress, preferences	30 days
Analytics	Anonymized usage statistics	1 year

We do not use third-party advertising cookies. Non-essential cookies are only set with your prior consent, collected via our cookie banner. See our Cookie Policy for details.

3. How We Use Your Data & Our Legal Basis

Under the GDPR, we must have a valid legal basis for each way we use your personal data. Here is how they map:

Processing Activity	Legal Basis
Assessment scoring and profile generation	Contract: necessary to deliver the service you requested. Providing this data is a contractual requirement to receive an assessment result; without it, we cannot generate one.
Account management	Contract
Payment processing	Contract, and legal obligation for tax/accounting records
Marketing emails	Consent: explicit opt-in required; withdrawable at any time with no effect on your ability to use paid services you've already purchased
Creating and using De-identified Data to improve our products and conduct statistical validation and research	Legitimate interests (improving product quality and scientific validity); you may object at any time, see Section 8
IPIP research data use and possible future sharing with outside researchers (Section 5.1)	Consent, always optional for you, given specifically when you take the IPIP assessment; withdrawable at any time from Account Settings
Website security, fraud prevention, audit logs	Legitimate interests

Where we rely on legitimate interests, we have considered that interest against your rights and freedoms, and concluded our interest is not overridden by any impact on you; you may ask us for more detail about this balancing test at any time.

4. Data Sharing

We do not sell your personal data. We share data only with the recipients below, each bound by a data processing agreement:

Recipient	Purpose	Data Shared
Stripe	Payment processing	Name, email, billing address for checkout
Clerk	Authentication	Email, name for account management
HubSpot	CRM / email marketing	Name, email, marketing consent status, and product-usage data including your assessment scores and archetype/stage results, audience type, purchase and lifetime spend history, and (for employer/organization inquiries) company name and headcount
Google Calendar	Scheduling group coaching sessions	Email address, for members who RSVP to a coaching session (Google sends the calendar invite, update, and cancellation emails directly)
Email provider	Transactional emails	Email address, name, result summary
Azure	Cloud hosting and database	All data (encrypted at rest)

5. Assessment Data: Important Notices

Your assessment results are provided for your personal professional development and self-reflection. Your profile reflects your self-reported behaviors at a specific point in time. These behaviors are changeable and developable. Your profile is not a permanent characterization of you as a person.

De-identified Data

We create de-identified/pseudonymized data from your assessment responses, scores, archetypes, and related usage data, and use it internally to improve Connector Profile and to conduct statistical validation and research on the assessment instrument. We do not share, license, or otherwise provide this data to any outside organization. Depending on how it's processed, this data may still be pseudonymized personal data under the GDPR rather than fully anonymous, and we rely on our legitimate interests (Section 3) as the legal basis for this use; you may object to it at any time. We do not process special category data (such as health-related inferences that might be drawn from assessment content) on the basis of legitimate interests or any basis other than your explicit consent.

5.1 IPIP Research Data Consent

Our IPIP personality assessment (a free short form and a paid, more detailed IPIP-NEO-120 version) is based on the public-domain International Personality Item Pool instrument, an independently validated measure widely used in personality research. If you take either version, we ask whether you want to opt in to a specific research use of that data: your IPIP responses and results, together with your existing Connector Score and Professional/Career Transition results, used to validate our own assessments against this established external instrument.

This consent is entirely optional and never required to take either the free short form or the paid IPIP-NEO-120. Declining has no effect on your ability to take, complete, or receive results from either assessment.

If you opt in, we use this combined data internally to statistically validate the Professional and Career Transition assessments, and we may, in the future, share a de-identified version of it with outside researchers (for example, academic institutions or independent researchers) studying personality assessment validity, career development, or related workforce topics. Any organization we share this data with is required, by contract, to maintain technical and business safeguards against reidentification, to refrain from attempting to reidentify or relink the data to you, and to use it only for the kind of research described here.

You can withdraw this consent at any time from Account Settings, with no effect on your access to any assessment or paid product. Withdrawing stops future use of your data for this purpose but does not undo research already completed with data collected before you withdrew.

6. Data Retention

Data Type	Retention Period
Account and profile	Until deletion requested, then 30 days to process
Assessment responses	Until deletion requested
Assessment results	Until deletion requested
Purchase records	7 years (legal/tax obligation), personal data minimized, amounts retained
Email communication logs	1 year
Security and audit logs	2 years
Anonymized analytics	Indefinite (no personal data)
Consent records	7 years

7. International Data Transfers

Our services are operated from the United States. If you are located in the EEA, UK, or Switzerland, using our services means your personal data is transferred to and processed in the US, a country that has not received an adequacy decision from the European Commission, UK government, or Swiss authorities covering all data. For these transfers, we rely on the European Commission's Standard Contractual Clauses (SCCs) (and the UK International Data Transfer Addendum, where applicable) with our service providers, together with Data Processing Agreements. You may request a copy of the relevant safeguards by contacting us.

8. Your Rights

Under the GDPR/UK GDPR, you have the right to:

• Access: obtain a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request deletion of your account and associated personal data.
• Restriction of processing: request that we limit how we use your data in certain circumstances.
• Data portability: receive your data in a structured, machine-readable format, or have it transmitted to another controller where technically feasible.
• Object: object to processing based on our legitimate interests (Section 3), including the De-identified Data use described in Section 5, at any time.
• Withdraw consent: for any processing based on consent (marketing, IPIP research use), at any time, with no effect on the lawfulness of processing before withdrawal.
• Lodge a complaint: with your national data protection authority. See Section 13 for details.

To exercise your rights: Email support@ConnectorProfile.com with subject "Privacy Request." We will respond within one month, as required by the GDPR (extendable by a further two months for complex requests, with notice to you).

9. Security

We implement HTTPS encryption for all data in transit, encryption at rest for all stored data, authentication via a trusted third-party provider, role-based access control, audit logging of admin actions, and regular security reviews. Despite these measures, no internet transmission or storage system is 100% secure. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities as required by applicable law.

10. Automated Decision-Making

Your assessment score and archetype are generated by an automated scoring algorithm based on your responses. This does not produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR: results are for personal professional development only, are never used for hiring, employment, credit, insurance, or any other legally or similarly significant decision about you, and you always have the ability to discuss or contest your results by contacting us.

11. Children's Privacy

Our services are intended for professionals 18 years of age and older. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a revised "Last Updated" date and, for registered users, by email. Continued use of our services after changes constitutes acceptance, without prejudice to any consent-based processing, which always remains withdrawable.

13. Contact Us & Complaints

The Natework Group LLC, dba Connector Profile
Email: support@ConnectorProfile.com
For data deletion requests: support@ConnectorProfile.com (subject: "Data Deletion Request")

If you are not satisfied with our response, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or the place of the alleged infringement. A list of EU supervisory authorities is available from the European Data Protection Board; UK residents may contact the Information Commissioner's Office (ICO); Swiss residents may contact the Federal Data Protection and Information Commissioner (FDPIC).