Privacy Policy

We collect personal information at three points during your FFi experience.

Before you start the diagnostic

When you register via the form on our home page, we collect:

• Your first name, last name, and email address
• A consent record, including the timestamp and IP address at the point of form submission

This information is stored in our database and linked to the diagnostic session that follows.

During the diagnostic

We collect:

• Organisation type, career stage, responsibility, and geography
• Your responses to the diagnostic questionnaire (9-dimension assessment)
• Your calculated dimension scores and overall Future Fluency profile
• Date and time of diagnostic completion

We also collect anonymous usage analytics: page views, drop-off points, active time on page (tab-visible time only), and browser and device type. This data cannot be used to identify you.

After completion

Your scorecard report is automatically sent to the email address you provided at registration. If you separately opt in to receive follow-up content (“field notes”), that is a distinct, explicit choice and does not affect delivery of your scorecard.

We collect only the information necessary to deliver your results, run aggregated research to improve the FFi framework, and communicate with you where you have given consent to do so.

Under the Australian Privacy Act 1988, we collect your information with your informed consent (APP 3, APP 5).

If you are located in the European Economic Area or United Kingdom, our lawful basis for processing is your explicit consent under GDPR Article 6(1)(a).

Consent is captured at the point of registration, before you begin the diagnostic, via the form on our home page. By submitting that form, you consent to:

• Receiving your scorecard report by email upon completion of the diagnostic
• Your de-identified, aggregated responses being used for research to improve the FFi framework

If you separately opt in to receive follow-up content (“field notes”), that is a distinct consent event and is not a condition of accessing your results.

You may withdraw consent at any time by contacting us at hello@futurefluencyindex.com. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

We use your personal information for the following purposes:

• To generate and deliver your FFi diagnostic results and report
• To conduct a debrief session with you, if you have requested one
• To contact you regarding your results or relevant follow-up content, if you have opted in to receive such communications
• To conduct aggregated, de-identified research to improve the FFi framework and its validity
• To maintain records of your consent

We will not use your personal information for any other purpose without your explicit consent.

Access to your personal information is strictly limited to authorised members of the FFi team. No third party will receive your identifiable personal information without your explicit consent.

Where we engage enterprise organisations to deliver FFi diagnostics to their teams, we will share only aggregated, de-identified cohort results with that organisation. Never individual-level data without the explicit consent of the individual participant.

We use the following third-party services to operate FFi. Each acts as a data processor under our instruction, and we have verified that each maintains appropriate data protection agreements:

Where personal data is transferred to processors located outside Australia (Vercel, Resend, Cal.com), we ensure that appropriate safeguards are in place in accordance with APP 8 and, where applicable, GDPR Chapter V.

We retain all personal data for a period of 24 months from the date of collection, after which it is securely deleted. This applies to:

• Diagnostic responses and dimension scores
• Name, email address, and organisation information
• Consent records and timestamps

De-identified, aggregated research data may be retained indefinitely as it cannot be used to identify you.

You may request deletion of your data at any time prior to the end of the retention period. See Section 8 below.

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:

• All data stored in Supabase is encrypted at rest (AES-256) and in transit (TLS 1.2+)
• Row-level security policies restrict data access to authorised accounts only
• The diagnostic tool is hosted over HTTPS; all form submissions are encrypted in transit
• No diagnostic data is stored in browser storage, email inboxes, or shared drives

You have the following rights regarding your personal information:

To exercise any of these rights, please contact hello@futurefluencyindex.com. We will acknowledge your request within 5 business days and respond in full within 30 days.

If you believe we have not handled your personal information appropriately, we encourage you to contact us first at hello@futurefluencyindex.com. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you remain unsatisfied after contacting us, you may escalate to the relevant authority:

• Australia: Office of the Australian Information Commissioner: www.oaic.gov.au
• European Union / UK: Your local Data Protection Authority

We may update this Privacy Policy from time to time. Where changes are material, we will notify participants by email or via a prominent notice in the diagnostic tool. The version number and effective date at the top of this document will always reflect the most recent version.

The FFi website is designed to minimise data collection on your device. We do not use advertising cookies, retargeting pixels, or any third-party tracking tools such as Google Analytics, Meta Pixel, or similar.

Essential cookies: A small functional cookie or local storage entry is set to remember your response to the site notice banner. This is required for the site to function correctly and does not contain personally identifiable information.

Cookieless analytics: We use Vercel Analytics to collect anonymised, aggregate data about page views and site usage. Vercel Analytics is cookieless by design: no cookies are set on your device and no personally identifiable information is collected or stored. Visitor metrics are derived from anonymised, server-side signals that cannot be used to identify you.

What this means for you: Because we do not set analytics cookies, no cookie consent is required for analytics under GDPR or the Australian Privacy Act. We display a site notice as a matter of transparency, not legal obligation.