Privacy policy

Who is responsible

BlindSpot Barometer decides how and why your personal information is handled on this platform, and is responsible for it.

For anything in this policy, including a request about your own data, write to support@blindspotbarometer.com.

What we collect

Account details you provide when registering: your name, email address and, optionally, your organisation and phone number.

Records of your purchases, the assessments you have access to, and your cart and wishlist activity.

Where an assessment is prepared for you, the specific information that preparation requires. We ask only for the fields the process needs.

Basic technical information that every website receives, such as your IP address and browser, used to keep the service secure and working.

What we do not collect

We never receive or store your card details. Payment is handled entirely by Paystack on their own pages.

We do not sell your personal information, and we do not share it with advertisers.

How we use it

To provide the service: processing purchases, granting and verifying access, and keeping your history available to you.

To send transactional messages such as purchase confirmations, receipts and updates on prepared assessments. These are part of the service and are not marketing.

To send optional reminders about items left in your cart or wishlist. You can turn these off at any time in your account settings, and turning them off stops them entirely.

To keep the platform secure, investigate misuse, and meet our legal and accounting obligations.

Cookies and your session

We use a small number of strictly necessary cookies. The important one holds your sign-in session; it is httpOnly, so it cannot be read by scripts in your browser, and it exists only to keep you signed in.

We do not use advertising or cross-site tracking cookies. Because every cookie we set is necessary to provide a service you asked for, there is no consent banner to dismiss.

Who else processes it

We rely on a small number of service providers who process data on our behalf, under contract and only on our instructions: Paystack for payments, our email provider for transactional mail, and our database and application hosting providers.

Information submitted for a prepared assessment is visible to you and to the staff processing that request, and is shared with the provider delivering that assessment.

We may disclose information where the law requires it, or to establish or defend a legal claim.

Where it is stored

Our infrastructure providers operate data centres outside your country, so your information may be processed abroad. Where that happens we rely on the safeguards in our agreements with those providers to keep the protection travelling with the data.

How long we keep it

Your account and its purchase history are kept for as long as your account is open, because your access to what you bought depends on them.

If you close your account, we delete the personal details we no longer need and keep only what we must: records of completed transactions, retained for the period tax and accounting law requires.

Records of emails we sent you are kept as an operational log so we can show what was sent and why.

How we protect it

Traffic to the platform is encrypted in transit. Passwords are never stored in a readable form: each is hashed with Argon2id, so a copy of our database would not reveal them.

Access to a purchased assessment is checked on every request against the entitlement that granted it, rather than being assumed from a link.

Your choices and rights

You can update your profile and communication preferences from your account settings at any time.

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to us and we will respond within one month.

If you believe we have handled your information badly, tell us first so we can fix it. You also have the right to complain to your local data protection authority.

Children

This service is not intended for children. We do not knowingly collect information from anyone under 18, and we delete it if we discover we have.

Changes to this policy

We update this policy when the way we handle information changes. The date at the top of this page shows when the current version took effect, and we will tell you by email before a material change takes effect.