What we collect
When you request a response or report, we collect your first name, work email, organisation, optional role and phone number, requirement where relevant, consent and source-page context. For governance and capability reports we collect the assessment name, version, dimension scores, overall score, maturity level, priority gaps and your consultation choice. We do not collect free-text assessment answers, browsing history or sensitive business evidence.
Assessment privacy notice
When you select Show my result or Show my capability profile, we save the assessment type and version, dimension scores, calculated score, priority gaps, completion date, the connection IP address, and approximate country and region derived by Cloudflare from the connection. We use these records to analyse common gaps, improve our services and understand demand by region. Location can be missing or inaccurate, especially with VPNs, and does not establish where a person lives. IP addresses are recorded to support connection-level record review and abuse investigation, not to identify or authenticate people. Shared networks, VPNs and changing IPs limit what they establish. We do not collect exact coordinates, browsing history or user-agent fingerprints in assessment records.
An unlinked result has a random assessment ID and no supplied email. If you subsequently submit the form, we associate the current result with your supplied contact details using a private per-result token; we do not match people by IP. We do not verify email ownership. A tab-only session token lets us link the most recent result for up to 24 hours; assessment answers are not kept in persistent browser storage. Closing the tab removes this browser linkage. You can obtain results without registering or providing an email.
Email confirmation and service providers
We record your request immediately and attempt to send an acknowledgement or report and a business notification. Your details are stored when you submit. We do not verify ownership of the email address you provide. Cloudflare provides hosting, security checks and storage; Brevo delivers emails. These providers may process data outside Australia. Submitting a form does not subscribe you to marketing.
Use and retention
We use these details to deliver the requested report, respond to your enquiry and discuss findings if you request consultation. Submission does not subscribe you to marketing. IP addresses are cleared after 30 days by the daily retention job and are excluded from the private analysis display as soon as they expire. Detailed assessment completion records are deleted after 365 days by a daily retention job and during subsequent assessment collection. Records older than 365 days are excluded from analysis immediately. Enquiry records are kept while the enquiry or resulting engagement is active and reviewed for deletion when no longer needed, subject to applicable record-keeping obligations. Email messages and provider logs have their own retention.
Your choices
You can use the site and see assessment results without providing contact details; completed assessment scores are still recorded for analysis as described above. For access, correction, deletion requests or privacy questions, email hello@zenaidigital.com.