Privacy Policy

Who this applies to

This policy applies to respondents who complete assessments at assessments.rethinkscience.org — including the Human Systems Scorecard (HSS) and Brand Vital Signs (BVS) instruments — as part of a Rethink Science engagement.

If you are completing an assessment, you were referred here by a Rethink Science consultant. This platform is not open to the public.

What we collect

When you complete an assessment, we collect:

• Contact information — your name, email address, organisation, and role.
• Assessment responses — your answers to the instrument questions.
• Consent record — the date and time you agreed to this policy.
• Technical data — your IP address and browser type, collected automatically at submission.

We do not collect payment information, social media identifiers, or any data beyond what is necessary to administer and score your assessment.

How we use your data

Your data is used exclusively to:

• Score your assessment and generate your clinical report.
• Provide your consultant with the findings for use in your engagement.
• Maintain an accurate record of your assessment history across sessions.

We do not use your data for marketing, advertising, or any purpose outside your engagement with Rethink Science. We do not sell your data. We do not share it with third parties except as required to operate the platform (see below).

Who can access your data

Access to assessment data is restricted by design:

• Your clinician — has full access to your responses and report as the clinician of record.
• Operations staff — has access to scheduling and administrative data only. Assessment responses and clinical reports are not accessible to operations staff.
• You — your consultant will share your report with you directly as part of your engagement. You do not have a login to this platform.

No other parties have access to your assessment data.

Infrastructure and storage

This platform is built on Cloudflare infrastructure. Your data is stored in a Cloudflare D1 database and processed by Cloudflare Workers. Cloudflare operates under standard data processing agreements and does not access your data for its own purposes.

All data is stored and processed within Cloudflare's network. No data is transmitted to or stored by third-party analytics, advertising, or tracking services.

Retention

Your assessment data is retained for the duration of your engagement with Rethink Science and for a reasonable period after to support ongoing clinical reference.

You may request deletion of your data at any time by contacting Rethink Science directly. We will delete your identifiable data within 30 days of a verified request.

De-identified retention. Following deletion of your identifiable information, or after your engagement with Rethink Science concludes, your response data may be retained in a de-identified form for clinical research and instrument validation purposes. De-identified data contains no name, email, organisation, or any other information that could reasonably identify you. This de-identified data is governed by the Organizational Psychogenetics research framework and is never sold, licensed, or shared with third parties.

Cookies and tracking

This platform does not use cookies for tracking or advertising. We do not use Google Analytics, Meta Pixel, or any third-party tracking scripts. The only data stored in your browser is a session token used to resume an in-progress assessment. This token expires automatically.

Your rights

You have the right to:

• Request a copy of the data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw consent at any time (this does not affect the lawfulness of processing prior to withdrawal).

To exercise any of these rights, contact your consultant directly using the details below.

Changes to this policy

If we make material changes to this policy, we will update the effective date above and notify active respondents by email where feasible. Continued use of the platform following a policy update constitutes acceptance of the revised terms.