Privacy Policy

Who we are

The Wholeness Index is operated by Pathfinder Educational Limited, a company registered in England and Wales. Our registered address is GM Digital Security Hub (DiSH), Heron House, 47 Lloyd Street, Manchester, M2 5LE.

The Wholeness Index is a product of the Sterizo Research Group, the research and insight division of Pathfinder Educational Limited. For privacy-related enquiries, contact us at [email protected].

What data we collect

We collect the following categories of personal data:

• Email address — collected when you request a sign-in link, complete an assessment, or are invited by a coach.
• Assessment responses — your answers to the Rapid Classifier (15 items) or Full Trapezium Assessment (88 items).
• Assessment results — your archetype classification, domain scores, and derived indices.
• Profile information — your name and role, where provided.
• Payment information — processed by Stripe. We do not store card details.
• Usage data — pages visited, actions taken, and session metadata, collected via standard server logs.

How we use your data

We use your data to:

• Deliver the assessment and display your results
• Send your result summary and follow-up development emails
• Process payments and manage your account access
• Enable coaches to view results you have explicitly consented to share
• Improve the instrument and platform through aggregated, anonymised research analysis

We do not use your data for advertising. We do not sell your data to third parties. We do not use your individual assessment data for any purpose beyond the services described above without your explicit consent.

Legal basis for processing

We process your data on the following legal bases under UK GDPR:

• Contract — to deliver the services you have purchased or signed up for.
• Consent — for marketing emails and for sharing results with coaches.
• Legitimate interests — for improving our platform and conducting aggregated research analysis.

Your results and consent to share

Your assessment results are private by default. If you complete an assessment via a coach-deployed link, you will be asked whether you consent to share your result with that coach. Sharing is entirely optional and you may decline without affecting your access to your own results.

If you share your result, your coach will be able to see your archetype classification and domain scores. They will not be able to see your individual item responses.

Data retention

We retain your account data for as long as your account is active. Assessment results are retained for 3 years from the date of completion to support longitudinal development tracking. You may request deletion of your data at any time.

Third-party services

We use the following third-party services to operate the platform:

• Supabase — database and authentication (EU region)
• Stripe — payment processing
• Resend — transactional email delivery
• Microsoft Azure — hosting infrastructure
• Cloudflare — DNS, CDN, and security

Each of these services operates under its own privacy policy and data processing agreement. All data is stored within the UK or EEA, or under adequate safeguards where transferred outside.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, email [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or by a notice on the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.