Welcome to Business Analysis DNA ("we," "our," or "the Platform"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding data collection and your rights as a user.
By accessing or using our Platform, you agree to the terms outlined in this Privacy Policy. If you do not agree with these terms, please do not use our services.
We may collect information that you voluntarily provide when you:
When you visit our Platform, we may automatically collect:
We use cookies and similar technologies to enhance your experience. See our Cookies section below for details.
When you subscribe to our newsletter we collect your email address, the site you signed up from and, at the moment you request, confirm or withdraw consent, your IP address, browser type and the version of the consent wording you saw. We process this on the basis of your consent (UK GDPR Article 6(1)(a) and PECR Regulation 22): you give it by clicking the confirmation link we email you (double opt-in) and can withdraw it at any time using the unsubscribe link in every newsletter email.
Two processors act on our behalf: Cloudflare, which hosts the signup service (Workers and D1) and runs Cloudflare Turnstile in invisible mode to check that a request comes from a person rather than a bot — its processing is described in Cloudflare's Turnstile Privacy Addendum; and Resend, which delivers the confirmation, welcome and newsletter emails.
Unconfirmed signups are deleted after 30 days. A confirmed subscription is kept until you unsubscribe or ask us to delete it; the record of when you consented and when you withdrew is kept for 24 months so that we can evidence it, and an irreversibly hashed form of your address stays on our do-not-mail list so you are not re-added by mistake. You can ask us to erase your newsletter data at any time using the contact details in section 12.
Each newsletter issue's article links are routed through our own newsletter service so that we can count which articles you opened, per subscriber. This uses no tracking pixel and no remote image: nothing loads when the message is merely displayed, and a link is only counted when you follow it.
The topics you choose to receive are stored against your subscription, you may pause your subscription at any time, and if you have not opened any article for a long period we may send you a single re-engagement message asking whether you wish to continue; if you do not respond, or if you ask us to, you will be removed. This processing extends the same basis as the rest of this section — your consent under UK GDPR Article 6(1)(a) and PECR Regulation 22 — and withdrawing that consent is simply unsubscribing, using the link in every message. Engagement data for an issue (which links you opened) is kept for 12 months after that issue was sent; the record that an issue was sent to you is kept for 24 months; your consent records remain at 24 months, as already stated above.
We use collected information for the following purposes:
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your experience.
We may use third-party services that set their own cookies:
You can control cookies through your browser settings. Note that disabling certain cookies may limit Platform functionality. Visit AllAboutCookies.org for guidance on managing cookies in different browsers.
We do not sell, rent, or trade your personal information. We may share data in the following limited circumstances:
We work with trusted third-party service providers who assist with:
These providers are contractually obligated to protect your data and use it only for specified purposes.
We may disclose information when required by law or to:
In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity, subject to the same privacy protections.
We may share anonymized, aggregated data (e.g., "80% of users access the Platform on mobile devices") for research, marketing, or partnership purposes. This data cannot identify individual users.
Depending on your location, you may have the following rights regarding your personal information:
You can withdraw consent for data processing at any time by:
To exercise any of these rights, please contact us using the information provided in the Contact Us section. We will respond to your request within 30 days.
We implement industry-standard security measures to protect your information:
While we take reasonable precautions, no system is 100% secure. We cannot guarantee absolute security of transmitted or stored data.
We retain personal information for different periods depending on its purpose:
After retention periods expire, we securely delete or anonymize data. You can request early deletion at any time.
Our Platform is hosted globally via content delivery networks (CDNs). Your information may be transferred to and processed in countries outside your jurisdiction, including the United States and European Union.
When transferring data internationally, we ensure adequate protections through:
Our Platform is intended for adults and professionals. We do not knowingly collect personal information from children under 16 (or the applicable age of consent in your jurisdiction).
If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete it promptly.
Our Platform may contain links to external websites, resources, or services (e.g., IIBA, PMI, certification providers, tool vendors). We are not responsible for the privacy practices of these third parties.
We encourage you to review the privacy policies of any external sites you visit.
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or Platform features. Significant changes will be communicated via:
Continued use of the Platform after changes constitute acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Business Analysis DNA
Email: [email protected]
General Contact: Contact Form
We aim to respond to all privacy inquiries within 5 business days.
If you are located in the European Economic Area (EEA) and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority.
Find your supervisory authority: EDPB Member List
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
To exercise these rights, contact us using the information in the Contact Us section.
We're committed to transparency and protecting your data. If you have any questions or concerns, we're here to help.