Privacy Policy

---

JWC Privacy & Data Policy

Last updated: March 2026

WHO WE ARE

JWC is a consulting and development practice operated by Jenny Watson, based in Poland. We are subject to the General Data Protection Regulation (GDPR) as it applies within the European Union.

If you have any questions about this policy or how we handle your data, please contact us at jenny@jwconsult.pl

WHAT DATA WE COLLECT AND WHY

When you contact us via our website — If you use our contact form or email us directly, we collect your name, email address and the content of your message. We use this information solely to respond to your enquiry. The legal basis for this processing is our legitimate interest in responding to communications directed to us.

When you complete an assessment — If you complete a JWC assessment (such as The Flourishing Profile or Change Readiness Profile), we collect your name, email address and your responses to the assessment questions. We use this information to generate your personalised report and deliver it to you. The legal basis for this processing is the performance of a contract — you have requested a service and we are delivering it.

Where you have been referred to complete an assessment by your employer, and/or are working with a coach who has arranged your assessment, the legal basis for sharing your completed report (not your individual responses) with that referring party is our legitimate interest in delivering the service as commissioned, balanced against your right to be clearly informed. You will always be told before you begin the assessment if your report will be shared, with whom, and for what purpose.

Assessment responses are used only to generate your individual report. They are not shared with your employer, any third party, or used for any purpose beyond producing your report, unless you explicitly request otherwise.

When you visit our website — Our website uses cookies to analyse traffic and understand how visitors use the site. You will be asked to consent to cookies when you first visit. You may withdraw consent at any time by adjusting your browser settings. The legal basis for this processing is your consent.

HOW LONG WE KEEP YOUR DATA

Contact enquiries: we retain email correspondence for up to 2 years, after which it is deleted.

Assessment data: your assessment responses and report are retained for up to 3 years to allow us to provide follow-up support if requested. After this period, all data is permanently deleted.

Website analytics data: retained in aggregated, anonymised form only.

WHO WE SHARE YOUR DATA WITH

We do not sell your personal data. We do not share your personal data with third parties for marketing purposes.

Assessment reports — employer-referred and coached individuals

Where you have been referred to complete a JWC assessment by your employer, or are working with a coach who has arranged your assessment, your completed report will be shared with the referring organisation and/or your coach as part of the service they have commissioned. You will be informed of this clearly before you begin the assessment.

Where you are completing a JWC assessment independently — not through an employer or coach referral — your report will not be shared with any third party without your explicit request.

In all cases, your individual assessment responses are not shared with anyone. Only the completed report is shared with the referring party where applicable.

We use the following third-party services to operate our business, each of which may process your data on our behalf:

Typeform — used to deliver our online assessments. Typeform processes response data in accordance with their own privacy policy and GDPR commitments. Data is stored on EU servers.

Anthropic (Claude API) — used to generate personalised narrative content within assessment reports. Assessment response data is processed via the API to produce report text. Anthropic's data processing practices are governed by their privacy policy and API data usage terms.

GoDaddy / website platform — our website is hosted via GoDaddy. Standard website traffic data may be processed by them in accordance with their privacy policy.

All third-party processors we use are required to handle your data in accordance with GDPR.

YOUR RIGHTS

Under GDPR you have the following rights in relation to your personal data:

The right to access — you may request a copy of the personal data we hold about you.

The right to rectification — you may ask us to correct any inaccurate data we hold.

The right to erasure — you may ask us to delete your personal data, subject to any legal obligations we have to retain it.

The right to restrict processing — you may ask us to limit how we use your data in certain circumstances.

The right to data portability — you may request your data in a commonly used, machine-readable format.

The right to object — you may object to our processing of your data where we rely on legitimate interests as our legal basis.

To exercise any of these rights, please contact us at jenny@jwconsult.pl. We will respond within 30 days.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the relevant supervisory authority. In Poland this is the Urząd Ochrony Danych Osobowych (UODO): www.uodo.gov.pl

CHANGES TO THIS POLICY

We may update this policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page will always reflect the most recent version.