Privacy Policy

1. Who we are

Performance Systems Lab is the data controller for personal data processed through this website. You can reach us about your data at hello@performancesystemslab.com.

2. What personal data we collect

We may collect:

• Diagnostic responses — your answers to the performance diagnostic, and the resulting scores and report.
• Contact details — name and email address you provide to receive your report or to contact us.
• Engagement enquiries — information you submit when requesting an engagement or a call.
• Technical data — limited analytics/usage data (see our Cookie Policy).

3. How we use your data

• To generate and send your performance diagnostic report.
• To respond to enquiries and provide our services.
• To improve our diagnostics and content (in aggregate, non-identifying form).
• If you opt in, to send you occasional updates about our work — you can unsubscribe at any time.

4. Legal basis for processing

Under UK GDPR / EU GDPR we rely on: consent (e.g. diagnostic submission, marketing), legitimate interests (improving our services), and contract (delivering services you request).

5. Sharing and third-party processors

We do not sell your data. We share it only with service providers that help us operate, including:

• Form provider — Tally processes diagnostic form submissions on our behalf. See Tally’s privacy policy for how they handle data.
• Email and hosting providers — used to deliver your report and operate the website.

6. How long we keep it

We keep personal data only as long as necessary for the purposes above or as required by law. We retain diagnostic responses and the contact details you provide for 6 months, after which they are deleted, unless we are required to keep them longer by law.

7. Your rights

You have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. To exercise any right, contact us at hello@performancesystemslab.com.

8. International transfers

Some of our service providers may process data outside the UK or EEA. Where they do, we rely on appropriate safeguards, such as Standard Contractual Clauses, to protect your data.

9. Security

We use appropriate technical and organisational measures to protect your data, including HTTPS, access controls, and confidential handling of diagnostic responses. No method is 100% secure, but we work to protect your information.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the latest version.