Privacy Policy

Global Leadership Alliance ("Company", "we", "us", or "our") operates the GLA Academy Partnering Skills Assessment (the "Service"), accessible at psa.gla.world. We are committed to protecting your privacy. This Privacy Policy describes how we collect, use, and share personal information when you use our Service.

This Policy is intended to comply with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the California Online Privacy Protection Act (CalOPPA).

By using our Service, you agree to the collection and use of your information as described in this Privacy Policy.

We collect personal information that you voluntarily provide when using the Service:

• Personal Identifiers: Your full name and email address, provided when you begin the assessment.
• Optional Identifiers: A project code, if provided, used to associate your results with a specific programme or cohort.
• Assessment Responses: Your answers to the 60-question personal skills questionnaire. These responses reflect your self-assessment of professional skills and are voluntarily submitted.
• Derived Results: Scores and reports automatically generated from your assessment responses.

We do not collect sensitive personal information such as government identifiers, financial information, health data, or precise geolocation.

We do not use cookies for tracking or advertising. Standard server logs (such as IP addresses and browser types) may be automatically recorded by our hosting provider (Vercel) for security and operational purposes.

We use the information collected for the following purposes:

• Providing the Service: To generate your personalised assessment report and development recommendations.
• Programme Administration: To allow facilitators and administrators at Global Leadership Alliance to view aggregated or individual results for the purposes of running leadership development programmes.
• Service Improvement: To analyse aggregated, de-identified skill trends and improve the assessment over time. Individual responses are not used for purposes beyond the service without your explicit consent.
• Legal Compliance: To comply with applicable legal obligations, resolve disputes, and enforce our Terms of Service.

We will not send you marketing emails without your separate and explicit consent. You may receive service-related communications (such as a copy of your results) if you request them.

We do not sell your personal information to third parties for their own use, and we do not share your personal information for cross-context behavioural advertising.

We may share your information in the following limited ways:

• Service Providers: We use trusted third-party service providers to operate the Service, including Supabase (database hosting) and Vercel (web application hosting). These providers process your data only on our behalf and under contractual obligations to protect it.
• Programme Facilitators: If you participate in a GLA Academy programme, your results may be visible to your designated programme facilitator for the purpose of delivering that programme. This is disclosed in the consent you provide at the start of the assessment.
• Legal Compliance: We may disclose information where required by law or in response to valid legal process (such as a court order or subpoena), or where necessary to protect the rights and safety of Global Leadership Alliance, its users, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified before your personal information becomes subject to a different privacy policy.

If you are a resident of California, you have the following rights regarding your personal information:

• Right to Know: You may request details about the categories and specific pieces of personal information we hold about you, the sources of that information, and how we use and disclose it.
• Right to Delete: You may request that we delete the personal information we have collected from you, subject to limited legal exceptions.
• Right to Correct: You may request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. Should this ever change, we will provide a clear opt-out mechanism and update this Policy accordingly.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights. Exercising your rights will not result in denial of service or different quality of service.

How to exercise your rights: Submit a request by emailing us at jaroslav@gla.world. Please include your full name and the email address you used for the assessment so that we can verify your identity before responding. We will acknowledge your request and respond within 45 days as required by California law (with a possible 45-day extension where reasonably necessary).

Some web browsers offer a "Do Not Track" (DNT) feature that lets you signal that you do not wish to be tracked. At this time, our Service does not respond to DNT signals. However, we do not track your activities across third-party websites or use your data for cross-site behavioural advertising.

We implement reasonable technical and organisational measures to protect your personal information, including:

• Encryption in transit: All data transmitted between your browser and our Service is encrypted via HTTPS/TLS.
• Encryption at rest: Data stored in our database (Supabase) is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised personnel only, using the principle of least privilege. Administrator access is protected by secure credentials and multi-factor authentication.
• Secure hosting: The Service is hosted on Vercel's secure infrastructure with HTTPS enforced across all routes.

Please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

We retain your personal information (name, email, project code, and assessment responses) indefinitely unless you request deletion. If you wish to have your data deleted, please contact us at jaroslav@gla.world and we will remove your information from our active database. Certain information may be retained for a limited additional period where required by law or for legitimate business purposes such as dispute resolution.

Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not use this Service or submit any personal information. If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete it. Please contact us at jaroslav@gla.world if you believe we have collected such information.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date at the top of this Policy and, where appropriate, provide a prominent notice on our website. We encourage you to review this Policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Global Leadership Alliance
Email: jaroslav@gla.world