Privacy Policy

We collect personal information at three points during your FFi experience.

Before you start the diagnostic

We collect:

• Your career stage and sector, which we use to contextualise your results
• A consent record, including the timestamp and IP address at the point of consent

If you arrive via a New Chapter Talent link, we also collect the vacancy reference code carried by that link. See Section 5a.

During the diagnostic

We collect:

• Organisation type, career stage, responsibility, function, gender, and geography
• Your responses to the diagnostic questionnaire (9-dimension assessment)
• Any free-text notes you choose to enter (for example, in response to "what prompted you to take this?")
• Your calculated dimension scores and overall Future Fluency profile
• Date and time of diagnostic completion

We also collect anonymous usage analytics: page views, drop-off points, active time on page (tab-visible time only), and browser and device type. This data cannot be used to identify you.

Please note that some of this information is used to generate an AI-assisted interpretation of your results. See Section 4 for exactly what is and isn’t shared, and please avoid entering identifying details (such as names or contact information) in free-text fields.

At the final step

After the questions, we ask for your first name, last name and email address so that we can send you your scorecard.

If you arrived via a New Chapter Talent link, this is also the point at which we ask for your separate consent to share your scorecard with New Chapter Talent. See Section 5a.

After completion

Your scorecard report is automatically sent to the email address you provided. If you separately opt in to receive follow-up content ("field notes"), that is a distinct, explicit choice and does not affect delivery of your scorecard.

We collect only the information necessary to deliver your results, run aggregated research to improve the FFi framework, and communicate with you where you have given consent to do so.

Sensitive information. We do not ask for, and do not intend to collect, sensitive or special-category information (such as health, racial or ethnic origin, religious or political beliefs, or sexual orientation). Please do not enter information of this kind in any free-text field.

Age. FFi is intended for adults. It is not directed at anyone under 18, and we do not knowingly collect personal information from children. If you believe someone under 18 has provided us with personal information, please contact us and we will delete it.

Under the Australian Privacy Act 1988, we collect your information with your informed consent (APP 3, APP 5).

If you are located in the European Economic Area or United Kingdom, our lawful basis for processing is your explicit consent under GDPR Article 6(1)(a). Where we deliver the results you have requested, that processing is also necessary to provide the service to you.

Consent is captured before you begin the diagnostic. By giving it, you consent to:

• Receiving your scorecard report by email upon completion of the diagnostic
• Your responses being processed (including by our AI interpretation provider, as described in Section 4) to generate that report
• Your de-identified, aggregated responses being used for research to improve the FFi framework

If you arrive via a New Chapter Talent link, sharing your results with New Chapter Talent is a separate consent, asked separately at the final step and recorded separately. It is not part of the consent above and it is not a condition of taking the diagnostic. See Section 5a.

If you separately opt in to receive follow-up content ("field notes"), that is a distinct consent event and is not a condition of accessing your results.

You may withdraw consent at any time by contacting us at hello@futurefluencyindex.com. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

We use your personal information for the following purposes:

• To generate and deliver your FFi diagnostic results and report, including AI-assisted interpretation (see Section 4)
• To disclose your results to New Chapter Talent, where you have given separate consent for us to do so (see Section 5a)
• To conduct a debrief session with you, if you have requested one
• To contact you regarding your results or relevant follow-up content, if you have opted in to receive such communications
• To conduct aggregated, de-identified research to improve the FFi framework and its validity
• To maintain records of your consent

We will not use your personal information for any other purpose without your explicit consent.

Your results include a written interpretation generated with the assistance of artificial intelligence. We use the Anthropic Claude API to help produce this interpretation.

What we send to the AI service to generate your interpretation:

• Your first name only
• De-identified categories: business model/organisation type, career stage, sector, function, and geography
• Your numerical scores (composite, dimension scores, percentile, and tier)
• Cohort benchmark aggregates (such as averages and cohort size)
• Derived behavioural flags (calculated indicators that contain no personal identifiers)
• Any free-text notes you entered during the diagnostic

What we never send: your email address, last name, account or user identifiers, assessment identifiers, organisation name, or the fact that you arrived through a New Chapter Talent link.

The AI provider processes this information solely to generate and return your interpretation. Your data is not used to train the provider’s AI models. The provider retains the information only for a limited period (currently up to 30 days) for security and abuse-monitoring purposes, after which it is deleted. It may be retained longer only where required to investigate misuse or to meet a legal obligation.

Because any free-text notes you enter are included in the information sent for interpretation, please do not include names, contact details, or other identifying information in those fields.

This interpretation supports your reflection and development. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects (see Section 10).

Access to your personal information within FFi is strictly limited to authorised members of the FFi team, the third-party processors listed in Section 6 (who act only on our instructions and only as needed to deliver the service), and, where you have given explicit consent, New Chapter Talent, who can access your profile directly through their own password-protected dashboard, as described in Section 5a. No other third party will receive your identifiable personal information without your explicit consent.

Where we engage enterprise organisations to deliver FFi diagnostics to their teams, we will share only aggregated, de-identified cohort results with that organisation, never individual-level data without the explicit consent of the individual participant. Where a cohort is small enough that aggregated results could identify an individual, we suppress or withhold those results to protect participant privacy.

Our role when an employer commissions a cohort. When you take the diagnostic on your own, FFi is the data controller for your personal information. When an employer or other organisation commissions a cohort and invites you to take part, that organisation is the data controller and FFi acts as its data processor, handling your information only as needed to deliver the service it has commissioned. In that situation, requests to access, correct, or delete your data are directed to that organisation, and we will support them in responding. We still only ever share aggregated, de-identified results with the commissioning organisation, as described above.

This arrangement covers an employer running a cohort for its own people. It does not cover New Chapter Talent. Section 5a sets out that arrangement, which works differently.

FFi works with New Chapter Talent, a recruitment firm that invites candidates to complete the diagnostic as part of a hiring process. If New Chapter Talent asks, FFi may also produce written commentary comparing your diagnostic profile against the stated requirements of the specific role, including how your dimension scores compare with other candidates who completed the diagnostic for that same role. This commentary is prepared by a person, describes relative strengths and development areas, and does not produce a single composite ranking, a numeric suitability score, or a pass or fail result. It does not tell New Chapter Talent who to hire. Every hiring decision is made by New Chapter Talent’s clients, on evidence far wider than this diagnostic.

What New Chapter Talent receives. If you consent, New Chapter Talent receives:

• A copy of your full scorecard report, identical to the one sent to you. Nothing is added, adjusted, or separately interpreted for them.
• Your first name, last name and email address, held in their FFi dashboard alongside your composite score, fluency tier, completion date, and the role reference the link related to.
• The profile categories you gave us: business model, career stage, sector, function and gender.
• Aggregated, de-identified analytics across all candidates who have completed the diagnostic through their links, including score and tier distributions, dimension averages, and breakdowns by category.
• Where requested, written commentary comparing your profile against a specific role’s stated requirements, which may reference how your dimension scores compare with other candidates who completed the diagnostic for that same role.

Lawful basis. The disclosure to New Chapter Talent rests on your separate, explicit, granular consent, recorded with a timestamp, IP address, consent version, and the exact wording you agreed to (GDPR Article 6(1)(a); Australian Privacy Principles APP 6.1(a)).

Your right to decline. You may decline to share your results with New Chapter Talent. Your scorecard is still delivered to you, and nothing is shared with anyone. The decline option is clearly marked at the final step.

Withdrawal. After submission you may withdraw your consent by contacting us at hello@futurefluencyindex.com. We will remove your record from the New Chapter Talent dashboard and they will lose access to your profile through FFi. We cannot retract a copy of your scorecard that they downloaded or otherwise saved before you notified us. Anything New Chapter Talent already holds is subject to their own privacy policy, and you can ask them directly to delete it.

Who controls your data. FFi remains the data controller for your personal information. We determine the purpose and means of the diagnostic, hold the direct relationship with you, and continue to communicate with you afterwards. New Chapter Talent is a separate, independent data controller for the copy of the results they receive. They decide what they do with that report and are responsible for handling it consistently with their own privacy obligations. This is a controller-to-controller disclosure, not a processor arrangement, which is why New Chapter Talent does not appear in the Section 6 processor table.

Marketing. Your choice about FFi follow-up communications (field notes, updates) is entirely separate from your consent to share results with New Chapter Talent. They do not see your marketing preference and receive no information about it.

Retention. FFi retains your New Chapter Talent consent record and role reference for 24 months from collection, in line with Section 7. Their retention of their own copy is governed by their privacy policy and practices.

We use the following third-party services to operate FFi. Each acts as a data processor under our instruction, and we have a data protection agreement in place with each.

New Chapter Talent is not a processor and does not appear in this table. They receive your results as an independent controller, only where you have consented, as described in Section 5a.

Some of these processors are located outside Australia: in the United States (Vercel, Resend, Cal.com, Anthropic) and South Korea (Supabase). Where personal data is transferred overseas, we take reasonable steps to ensure each recipient handles it consistently with the Australian Privacy Principles (APP 8). For users in the EEA or UK, such transfers are protected by an appropriate safeguard under GDPR: an adequacy decision (which both the EU and UK recognise for South Korea) or Standard Contractual Clauses (for the United States). See Section 10.

We retain all personal data for a period of 24 months from the date of collection, after which it is securely deleted. This applies to:

• Diagnostic responses, free-text notes, and dimension scores
• Name, email address, and organisation information
• Consent records, timestamps, and IP addresses
• Where you arrived via a New Chapter Talent link: the role reference linking your profile to a specific vacancy, and the consent record for that disclosure (including timestamp, IP address, consent version, and the verbatim wording you agreed to)

Where you have consented to share results with New Chapter Talent, your record remains visible in their FFi dashboard for the same 24 month period, unless you withdraw consent earlier.

De-identified, aggregated research data may be retained indefinitely as it cannot be used to identify you.

Where New Chapter Talent has received a copy of your scorecard, that copy is held by them and subject to their own privacy policy and retention practices. FFi cannot control or enforce deletion of that copy.

You may request deletion of your data at any time prior to the end of the retention period. See Section 9 below.

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:

• All data stored in Supabase is encrypted at rest (AES-256) and in transit (TLS 1.2+)
• Data sent to our processors, including for AI interpretation, is transmitted over encrypted connections
• Row-level security policies restrict data access to authorised accounts only
• The New Chapter Talent dashboard is password protected, and shows only the candidates who completed the diagnostic through their own links
• The diagnostic tool is hosted over HTTPS; all form submissions are encrypted in transit
• No diagnostic data is stored in browser storage, email inboxes, or shared drives

If a data breach occurs. We maintain an incident-response process. If a breach is likely to result in serious harm, we will notify the individuals affected and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme, together with any equivalent obligations to EEA or UK authorities, as soon as reasonably practicable.

You have the following rights regarding your personal information:

These rights apply to the information FFi holds. Where New Chapter Talent holds a copy of your results as an independent controller (Section 5a), you can exercise the same rights against them directly, under their privacy policy. We will help you make contact if you ask us to.

To exercise any of these rights, please contact hello@futurefluencyindex.com. We will acknowledge your request within 5 business days and respond in full within 30 days.

If you are located in the European Economic Area or the United Kingdom, the following additional information applies to you under the EU and UK GDPR.

Lawful basis: We process your personal data on the basis of your explicit consent (Article 6(1)(a)), and, where we deliver the results you requested, because processing is necessary to provide that service.

International transfers: As set out in Section 6, some processing occurs outside the EEA/UK. These transfers are protected by an appropriate safeguard: an adequacy decision (which both the EU and UK recognise for South Korea) or Standard Contractual Clauses (for transfers to the United States).

Automated decision-making: Your results are produced with the assistance of AI, but we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects (Article 22). The interpretation is developmental and is reviewed within the context of FFi’s coaching and debrief practice. Where you complete the diagnostic through a New Chapter Talent link, any commentary FFi produces comparing your profile against a role’s requirements is prepared by a person, not generated solely by automated processing, and does not itself decide or recommend a hiring outcome. Hiring decisions are made by people at New Chapter Talent and their clients, on evidence wider than this diagnostic.

Right to complain: You have the right to lodge a complaint with your local data protection supervisory authority.

Separately from diagnostic participants, we hold limited personal information about people we communicate with in the course of running FFi: prospective clients, partners, executive coaches, suppliers, and other business contacts.

What we collect: name, job title, organisation, work email address and other professional contact details, and a record of our correspondence with you. We collect this directly from you, from your professional or public profiles, or from your organisation’s website.

Why we use it, and our lawful basis: to contact you about FFi, respond to enquiries, and develop business relationships. Under the Australian Privacy Act this is collected for the purpose of our business relationship. For contacts in the EEA or UK, our lawful basis is our legitimate interests in business-to-business communication (GDPR Article 6(1)(f)), balanced against your rights and limited to professional contact details used in a business context.

Your choices: you can ask us to stop contacting you at any time, and we will. Marketing emails always include an unsubscribe option, and you can opt out of any outreach by replying to us or contacting hello@futurefluencyindex.com. You have the same rights of access, correction, and deletion set out in Section 9.

Retention: we keep business contact information only for as long as the relationship or prospect is active, and remove it on request or when it is no longer needed.

If you believe we have not handled your personal information appropriately, we encourage you to contact us first at hello@futurefluencyindex.com. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you remain unsatisfied after contacting us, you may escalate to the relevant authority:

• Australia: Office of the Australian Information Commissioner, www.oaic.gov.au
• European Union / UK: Your local Data Protection Authority

We may update this Privacy Policy from time to time. Where changes are material, we will notify participants by email or via a prominent notice in the diagnostic tool. The version number and effective date at the top of this document will always reflect the most recent version.

The FFi website is designed to minimise data collection on your device. We do not use advertising cookies, retargeting pixels, or any third-party tracking tools such as Google Analytics, Meta Pixel, or similar.

Essential cookies: A small functional cookie or local storage entry is set to remember your response to the site notice banner. This is required for the site to function correctly and does not contain personally identifiable information.

Cookieless analytics: We use Vercel Analytics to collect anonymised, aggregate data about page views and site usage. Vercel Analytics is cookieless by design. No cookies are set on your device and no personally identifiable information is collected or stored. Visitor metrics are derived from anonymised, server-side signals that cannot be used to identify you.

New Chapter Talent link cookie. If you arrive at FFi via a New Chapter Talent link (see Section 5a), we set an additional cookie named ffi_partner_ref. It stores the vacancy reference code from the link you followed. It is httpOnly (not accessible to browser scripts), lasts 7 days, and is cleared once you complete and submit the diagnostic. We use it only to attribute your completed profile to the correct vacancy. It is not used for advertising, for tracking across other sites, or for any purpose beyond that attribution. If you do not complete the diagnostic within 7 days, or you close the link without completing, the cookie expires and no attribution occurs.

What this means for you: Because we do not set analytics cookies, no cookie consent is required for analytics under the GDPR or the Australian Privacy Act. We display a site notice as a matter of transparency, not legal obligation.