Welcome to Business Analysis DNA ("we," "our," or "the Platform"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding data collection and your rights as a user.
By accessing or using our Platform, you agree to the terms outlined in this Privacy Policy. If you do not agree with these terms, please do not use our services.
We may collect information that you voluntarily provide when you:
When you visit our Platform, we may automatically collect:
We use cookies and similar technologies to enhance your experience. See our Cookies section below for details.
When you subscribe to our newsletter we collect your email address, the site you signed up from and, at the moment you request, confirm or withdraw consent, your IP address, browser type and the version of the consent wording you saw. We process this on the basis of your consent (UK GDPR Article 6(1)(a) and PECR Regulation 22): you give it by clicking the confirmation link we email you (double opt-in) and can withdraw it at any time using the unsubscribe link in every newsletter email.
Two processors act on our behalf: Cloudflare, which hosts the signup service (Workers and D1) and runs Cloudflare Turnstile in invisible mode to check that a request comes from a person rather than a bot — its processing is described in Cloudflare's Turnstile Privacy Addendum; and Resend, which delivers the confirmation, welcome and newsletter emails.
Unconfirmed signups are deleted after 30 days. A confirmed subscription is kept until you unsubscribe or ask us to delete it; the record of when you consented and when you withdrew is kept for 24 months so that we can evidence it, and an irreversibly hashed form of your address stays on our do-not-mail list so you are not re-added by mistake. You can ask us to erase your newsletter data at any time using the contact details in section 12.
We use collected information for the following purposes:
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your experience.
We may use third-party services that set their own cookies:
You can control cookies through your browser settings. Note that disabling certain cookies may limit Platform functionality. Visit AllAboutCookies.org for guidance on managing cookies in different browsers.
We do not sell, rent, or trade your personal information. We may share data in the following limited circumstances:
We work with trusted third-party service providers who assist with:
These providers are contractually obligated to protect your data and use it only for specified purposes.
We may disclose information when required by law or to:
In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity, subject to the same privacy protections.
We may share anonymized, aggregated data (e.g., "80% of users access the Platform on mobile devices") for research, marketing, or partnership purposes. This data cannot identify individual users.
Depending on your location, you may have the following rights regarding your personal information:
You can withdraw consent for data processing at any time by:
To exercise any of these rights, please contact us using the information provided in the Contact Us section. We will respond to your request within 30 days.
We implement industry-standard security measures to protect your information:
While we take reasonable precautions, no system is 100% secure. We cannot guarantee absolute security of transmitted or stored data.
We retain personal information for different periods depending on its purpose:
After retention periods expire, we securely delete or anonymize data. You can request early deletion at any time.
Our Platform is hosted globally via content delivery networks (CDNs). Your information may be transferred to and processed in countries outside your jurisdiction, including the United States and European Union.
When transferring data internationally, we ensure adequate protections through:
Our Platform is intended for adults and professionals. We do not knowingly collect personal information from children under 16 (or the applicable age of consent in your jurisdiction).
If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete it promptly.
Our Platform may contain links to external websites, resources, or services (e.g., IIBA, PMI, certification providers, tool vendors). We are not responsible for the privacy practices of these third parties.
We encourage you to review the privacy policies of any external sites you visit.
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or Platform features. Significant changes will be communicated via:
Continued use of the Platform after changes constitute acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Business Analysis DNA
Email: [email protected]
General Contact: Contact Form
We aim to respond to all privacy inquiries within 5 business days.
If you are located in the European Economic Area (EEA) and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority.
Find your supervisory authority: EDPB Member List
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
To exercise these rights, contact us using the information in the Contact Us section.
We're committed to transparency and protecting your data. If you have any questions or concerns, we're here to help.