Privacy Policy

When you complete the FFi diagnostic, we collect the following information anonymously:

• Organisation type, career stage, responsibility, and geography
• Your responses to the diagnostic questionnaire (9-dimension assessment)
• Your calculated dimension scores and overall Future Fluency profile
• Date and time of diagnostic completion

If you choose to have your scorecard report sent to you, we additionally collect:

• Your name and email address, solely for the purpose of delivering your scorecard report
• Consent record including timestamp and IP address at the point of opt-in

We collect only the information necessary to deliver your scorecard report and to conduct aggregated research to improve the FFi framework. We will only contact you regarding your results or send follow-up content if you have expressly opted in to receive such communications.

Under the Australian Privacy Act 1988, we collect your information with your informed consent (APP 3, APP 5). If you are located in the European Economic Area or United Kingdom, our lawful basis for processing is your explicit consent under GDPR Article 6(1)(a).

You may withdraw consent at any time by contacting us at hello@futurefluencyindex.com. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

We use your personal information for the following purposes:

• To generate and deliver your FFi diagnostic results and report
• To conduct a debrief session with you, if you have requested one
• To contact you regarding your results or relevant follow-up content, if you have opted in to receive such communications
• To conduct aggregated, de-identified research to improve the FFi framework and its validity
• To maintain records of your consent

We will not use your personal information for any other purpose without your explicit consent.

Access to your personal information is strictly limited to authorised members of the FFi team. No third party will receive your identifiable personal information without your explicit consent.

Where we engage enterprise organisations to deliver FFi diagnostics to their teams, we will share only aggregated, de-identified cohort results with that organisation — never individual-level data without the explicit consent of the individual participant.

We use the following third-party services to operate FFi. Each acts as a data processor under our instruction, and we have verified that each maintains appropriate data protection agreements:

Where personal data is transferred to processors located outside Australia (Vercel, Resend, Cal.com), we ensure that appropriate safeguards are in place in accordance with APP 8 and, where applicable, GDPR Chapter V.

We retain all personal data for a period of 24 months from the date of collection, after which it is securely deleted. This applies to:

• Diagnostic responses and dimension scores
• Name, email address, and organisation information
• Consent records and timestamps

De-identified, aggregated research data may be retained indefinitely as it cannot be used to identify you.

You may request deletion of your data at any time prior to the end of the retention period — see Section 8 below.

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:

• All data stored in Supabase is encrypted at rest (AES-256) and in transit (TLS 1.2+)
• Row-level security policies restrict data access to authorised accounts only
• The diagnostic tool is hosted over HTTPS; all form submissions are encrypted in transit
• No diagnostic data is stored in browser storage, email inboxes, or shared drives

You have the following rights regarding your personal information:

To exercise any of these rights, please contact hello@futurefluencyindex.com. We will acknowledge your request within 5 business days and respond in full within 30 days.

If you believe we have not handled your personal information appropriately, we encourage you to contact us first at hello@futurefluencyindex.com. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you remain unsatisfied after contacting us, you may escalate to the relevant authority:

• Australia: Office of the Australian Information Commissioner — www.oaic.gov.au
• European Union / UK: Your local Data Protection Authority

We may update this Privacy Policy from time to time. Where changes are material, we will notify participants by email or via a prominent notice in the diagnostic tool. The version number and effective date at the top of this document will always reflect the most recent version.

The FFi website is designed to minimise data collection on your device. We do not use advertising cookies, retargeting pixels, or any third-party tracking tools such as Google Analytics, Meta Pixel, or similar.

Essential cookies: A small functional cookie or local storage entry is set to remember your response to the site notice banner. This is required for the site to function correctly and does not contain personally identifiable information.

Cookieless analytics: We use Vercel Analytics to collect anonymised, aggregate data about page views and site usage. Vercel Analytics is cookieless by design — no cookies are set on your device and no personally identifiable information is collected or stored. Visitor metrics are derived from anonymised, server-side signals that cannot be used to identify you.

What this means for you: Because we do not set analytics cookies, no cookie consent is required for analytics under GDPR or the Australian Privacy Act. We display a site notice as a matter of transparency, not legal obligation.