Privacy Policy — PDA Platform

1. Who We Are

PDA Platform ("we", "us", "our") is a product of BD SELECT, a company registered in Dubai, UAE. PDA Platform operates the website pdaplatform.com and the associated team performance diagnostic platform. Our data controller contact is: support@pdaplatform.com.

2. What Data We Collect

We collect only the minimum data necessary to provide our services:

Contact form submissions: name, business email address, company name, country, and the message you submit. This data is used solely to respond to your enquiry.
Diagnostic participant data: responses to the PDA questionnaire. All participant responses are collected anonymously. Individual responses are never visible to anyone — not to your employer, your coach, or PDA Platform. Only aggregated team-level data is processed and reported.
Partner account data: name, email address, company name, and billing information for registered partner accounts.
Usage data: standard server logs (IP address, browser type, pages visited, time on site) collected automatically by our hosting infrastructure for security and performance monitoring.

We do not use third-party advertising cookies. We do not sell your data to third parties. We do not use your data for purposes other than those described in this policy.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, our legal basis for processing personal data is:

Contractual necessity: processing required to deliver the services you have requested (partner accounts, diagnostic administration).
Legitimate interests: responding to contact form enquiries; server security monitoring; improving platform performance.
Consent: where we ask for and you provide explicit consent, for example for marketing communications (which you may withdraw at any time).

4. How We Store and Protect Your Data

All data is stored on servers hosted within the European Union, compliant with GDPR data residency requirements. We apply industry-standard security measures including:

TLS encryption for all data in transit
Encrypted storage for all personally identifiable data at rest
Access controls limiting data access to authorised personnel only
Regular security audits and vulnerability assessments

Diagnostic participant response data is anonymised at the point of collection and cannot be re-identified. Aggregated team reports do not contain any data that can be traced back to individual participants.

5. Data Retention

Contact form submissions: retained for 24 months from the date of submission, then permanently deleted.
Diagnostic data (anonymised aggregates): retained for the duration of the partner engagement plus 36 months, to enable DELTA Phase 2 comparison reporting.
Partner account data: retained for the duration of the partnership agreement plus 7 years (legal compliance requirement).
Server logs: retained for 90 days, then deleted.

6. Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights regarding your personal data:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: request correction of inaccurate personal data.
Right to erasure: request deletion of your personal data ("right to be forgotten") where no legal basis exists for continued retention.
Right to restrict processing: request that we limit how we use your data.
Right to data portability: request your data in a structured, machine-readable format.
Right to object: object to processing based on legitimate interests.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@pdaplatform.com. We will respond within 30 days.

7. Diagnostic Participant Anonymity

Important: PDA diagnostic questionnaires are designed with strict anonymity by architecture. Individual participant responses are never transmitted to, stored by, or accessible by PDA Platform staff, partner coaches, or employer organisations. The platform processes only anonymised, aggregated team-level data. No mechanism exists to de-anonymise individual responses.

8. Third-Party Services

We use a limited number of third-party services to operate the platform. All third parties are bound by data processing agreements consistent with GDPR requirements:

Email delivery: for transactional emails (account confirmations, report delivery). No marketing data is shared.
Cloud hosting: EU-based infrastructure provider for platform hosting and data storage.

We do not use Google Analytics, Facebook Pixel, or any third-party advertising or behavioural tracking tools.

9. Cookies

This website uses only essential cookies required for basic functionality (session management, language preference). We do not use tracking cookies, advertising cookies, or analytics cookies that report to third parties. Your language preference is stored locally in your browser's localStorage and is not transmitted to our servers.

10. International Data Transfers

PDA Platform is operated from Dubai, UAE, with data stored in the European Union. Where data is accessed from the UAE, this is done under appropriate legal safeguards consistent with GDPR Article 46 standard contractual clauses.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The date of the most recent revision appears at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Contact & Complaints

For privacy-related questions or to exercise your rights: support@pdaplatform.com

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (for EEA residents, your national supervisory authority; for UK residents, the Information Commissioner's Office at ico.org.uk).