DISCIPLINEBY DESIGN™

1. Who we are

This policy explains how personal information is handled when you visit disciplinebydesign.co or disciplinebydesign.ca, take an assessment, apply for or buy a Discipline By Design™ service, use the client portal, join a DBD community, or otherwise communicate with us. These services are provided by Discipline by Design Inc., which operates the Discipline By Design™ brand from Ontario, Canada. In this policy, “DBD,” “we,” “us,” and “our” refer to Discipline by Design Inc.

2. Our privacy commitment

We collect only the personal information reasonably needed for clear purposes, use it only as described here or as otherwise permitted by law, protect it with safeguards appropriate to its sensitivity, and retain it only as long as reasonably necessary. Discipline by Design Inc. is responsible for the personal information under its control. Segun Makinde acts as its Privacy Officer.

3. Information you provide

Depending on how you use DBD, you may provide:

  • Contact details: your name, email address, and communication preferences.
  • Assessment information: the goal context, answers, scores, primary execution gap, and result connected to your assessment entry.
  • Interest and application information: your goal, role, current challenges, readiness, preferred timing, support needs, investment readiness, and other answers you choose to submit.
  • Purchase and membership information: your chosen plan, transaction status, age confirmation, and record of accepting applicable terms. Payment-card details are entered directly with the payment processor, not stored in the DBD website database.
  • Portal and program information: the email and optional name associated with your ChatGPT sign-in, membership status, saved Gold Medal Blueprint™ answers, progress, and content you choose to share during a program or in a community.
  • Communications: messages, requests, feedback, support questions, and records needed to respond.

4. Information collected automatically

Our hosting, security, and authentication providers may automatically process technical information such as your IP address, browser and device type, requested pages, timestamps, referring page, and security events. This information is used to deliver the site, keep it reliable, prevent abuse, and diagnose problems. We do not currently use third-party behavioural advertising pixels or sell browsing data.

5. Local storage and essential technologies

The assessment uses your browser's local storage to keep an unfinished draft on your device. The draft is removed when you submit or reset the assessment, and you can also remove it by clearing site data in your browser. The site and its service providers may use cookies or similar technologies that are necessary for security, authentication, payment, or portal functionality. If we later add non-essential analytics or advertising technologies, we will update this policy and provide any consent choices required by law.

6. How we use personal information

We use personal information to:

  • deliver and save your assessment and result;
  • review interest forms and Proximity applications;
  • provide memberships, live support, community access, curriculum, resources, and the client portal;
  • start and administer checkout, billing, and refunds;
  • authenticate users, approve portal access, and save Blueprint progress;
  • send service messages and, where you have consented, useful DBD marketing emails;
  • protect DBD, users, and the public; prevent fraud or misuse; and enforce our terms;
  • understand and improve our services using aggregated or de-identified information; and
  • meet legal, accounting, tax, and regulatory obligations.

7. Consent and email communications

We seek meaningful consent where required. Consent for optional marketing may be withdrawn at any time by using the unsubscribe link in an email or contacting us. We will process an unsubscribe request within the period required by Canada's anti-spam law. We may keep a minimal suppression record so we do not add an unsubscribed address back to a marketing list. Even if you opt out of marketing, we may still send necessary service, account, transaction, security, or legal messages.

8. Automated decisions

The assessment calculates a result from the answers you submit, but that result does not automatically accept or reject you for a paid service. Segun reviews Proximity applications. An on-screen receipt only confirms that an application was received; it is not an acceptance or guarantee of a place.

9. When we disclose information

We may disclose personal information:

  • to providers that support hosting, databases, authentication, payment processing, email, communications, security, and professional services, only as needed for their work;
  • to legal, accounting, insurance, or other professional advisers under appropriate duties of confidentiality;
  • where reasonably necessary to comply with law, a lawful process, protect rights or safety, investigate misuse, or enforce an agreement;
  • as part of a proposed or completed business reorganization, financing, sale, or transfer, subject to appropriate safeguards; or
  • with your direction or consent.

We do not sell or rent personal information. When you choose to post in a private community or share information during a group session, other participants may be able to see what you share. Please use care and do not share another person's private information without permission.

10. Service providers and cross-border processing

The site currently relies on providers including OpenAI and ChatGPT Sites for site and sign-in functionality, Cloudflare for infrastructure and database services, and Stripe for secure payment processing. Additional email, communications, and professional-service providers may be used as DBD develops. Providers may process information in Canada, the United States, or other countries where they operate. Information in another country may be subject to that country's laws and lawful access by its authorities. DBD remains responsible for personal information transferred to a provider for processing and uses contractual or other safeguards appropriate to the service.

11. Retention

We keep personal information only for as long as reasonably needed for the purpose for which it was collected, to maintain a client relationship or account, resolve a dispute, enforce an agreement, or satisfy legal, tax, accounting, and security obligations. Retention varies by record. When information is no longer required, we delete, destroy, or de-identify it using reasonable measures. Backup copies may remain for a limited period before being overwritten.

12. Safeguards

We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information, including access controls, authenticated portal access, limited administrative access, and reputable infrastructure and payment providers. No internet service or storage system can be guaranteed completely secure. If a breach creates a real risk of significant harm, we will investigate and provide notices required by applicable law.

13. Your privacy choices and rights

Subject to applicable law, you may ask whether we hold personal information about you; request access to it; ask us to correct inaccurate or incomplete information; withdraw consent for a use that depends on consent; request deletion where retention is no longer required; or challenge our compliance. We may need to verify your identity and may retain or withhold information where law permits or requires it. Withdrawing consent may limit a feature or service that needs the information to operate.

14. Adults only

DBD services, applications, and portal access are intended for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted personal information, contact us so we can review and remove it where appropriate.

15. Third-party sites

Links may take you to third-party websites or services. Their privacy practices are governed by their own policies. DBD is not responsible for how an independent third party handles information you provide directly to it.

16. Changes to this policy

We may update this policy when our services, providers, or legal obligations change. The effective date identifies the current version. If a change is material, we will provide additional notice or seek consent where required by law.

17. Contact and complaints

Direct a privacy request, question, or complaint to Segun Makinde, Privacy Officer, Discipline by Design Inc., Toronto, Ontario, Canada, at disciplinebydesign.co@gmail.com. Please describe your request and use the email address linked to your DBD record when possible. We will investigate and respond within the period required by applicable law. If we do not resolve a privacy concern, you may contact the Office of the Privacy Commissioner of Canada.

Use of the site and services is also subject to our Terms of Service.