Privacy Policy
1. Introduction
This Privacy Policy explains how Styperson Pope Limited, trading as The Decision Arc, (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you visit our website at www.thedecisionarc.com (the “Site”) or use our services.
We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA) and the UK, and relevant US privacy laws.
2. Information We Collect
2.1 Information You Provide Directly
We collect personal information that you voluntarily provide to us, including:
- Contact Information: Name, email address, phone number, organization name
- Assessment Requests: Team name, team size, billing address, currency preference
- Communications: Any information you provide when contacting us, scheduling calls, or requesting samples
- Assessment Responses: Anonymous responses to the Decision Posture Assessment questions
2.2 Information Collected Automatically
When you visit our Site, we may automatically collect:
- Technical Information: IP address, browser type, operating system, device information
- Usage Information: Pages visited, time spent on pages, links clicked, referring website
- Cookies and Similar Technologies: See Section 5 below
2.3 Information from Third Parties
We may receive information about you from third-party services we use, such as:
- Calendly: When you schedule a call with us
- Typeform: When you complete forms or assessments
- Payment processors: When you make a payment
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Service Delivery
- To provide the Decision Posture Assessment and deliver your Decision Posture Map and Decision Practices
- To process payments and send invoices
- To communicate with you about our services
- To schedule and conduct consultations
3.2 Business Operations
- To respond to your inquiries and provide customer support
- To improve our website and services
- To analyze usage patterns and optimize user experience
- To send administrative information and service updates
3.3 Marketing (with your consent where required)
- To send you information about our services, insights, or updates
- You may opt out of marketing communications at any time
3.4 Legal Compliance
- To comply with legal obligations
- To protect our rights, privacy, safety, or property
- To enforce our terms and conditions
Legal Basis (for GDPR compliance):
- Contract Performance: Processing necessary to fulfill our services to you
- Legitimate Interest: Improving our services, communicating with clients
- Consent: Marketing communications (where consent is required)
- Legal Obligation: Compliance with applicable laws
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
4.1 Service Providers
We share information with trusted third-party service providers who assist us in operating our business, including:
- Typeform: Form and assessment hosting
- Calendly: Appointment scheduling
- Payment processors: Secure payment processing
- Email service providers: Communication delivery
- Web hosting providers: Website infrastructure
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
4.2 Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Legal process (subpoenas, court orders)
- Governmental or regulatory requests
- Protection of our rights or property
- Investigation of fraud or security issues
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
4.4 With Your Consent
We may share your information for other purposes with your explicit consent.
5. Cookies and Tracking Technologies
5.1 What We Use
Our Site uses cookies and similar technologies to:
- Remember your preferences
- Understand how you use our Site
- Improve Site functionality
- Analyze Site traffic
5.2 Types of Cookies
- Essential Cookies: Necessary for the Site to function properly
- Analytics Cookies: Help us understand Site usage (e.g., Google Analytics)
- Functional Cookies: Remember your preferences
5.3 Your Choices
Most browsers allow you to control cookies through settings. You can:
- Block all cookies
- Accept cookies only from certain sites
- Delete cookies when you close your browser
Note that blocking cookies may affect Site functionality.
6. Data Retention
We retain your personal information for as long as necessary to:
- Fulfill the purposes described in this Privacy Policy
- Comply with legal obligations (e.g., tax and accounting requirements)
- Resolve disputes and enforce our agreements
Assessment Data: We retain assessment responses and resulting analysis for the duration of our engagement and for a reasonable period thereafter to provide ongoing support. Anonymous assessment responses may be retained longer for research and service improvement purposes.
Marketing Data: If you opt out of marketing communications, we retain minimal information to honor your preferences.
7. Your Rights
7.1 Rights for EEA and UK Individuals (GDPR)
If you are located in the EEA or UK, you have the following rights:
- Access: Request a copy of the personal information we hold about you
- Rectification: Request correction of inaccurate or incomplete information
- Erasure: Request deletion of your personal information (subject to legal obligations)
- Restriction: Request that we limit how we use your information
- Portability: Request transfer of your information to another service
- Object: Object to our processing of your information for certain purposes
- Withdraw Consent: Withdraw consent where we rely on consent for processing
To exercise these rights, contact us at: contact@thedecisionarc.com
7.2 Rights for US Residents
Depending on your state of residence, you may have additional rights, including:
- California (CCPA/CPRA): Right to know, delete, opt-out of sale (we do not sell data), and non-discrimination
- Virginia (VCDPA): Right to access, correct, delete, and opt-out
- Colorado (CPA): Right to access, correct, delete, and opt-out
- Other states: Check your state’s specific privacy laws
To exercise these rights, contact us at: contact@thedecisionarc.com
We will respond to your request within the timeframe required by applicable law (typically 30-45 days).
8. International Data Transfers
If you are located outside the country where our servers are located, your information may be transferred internationally. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by relevant authorities
- Other legally compliant transfer mechanisms
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:
- Encryption of data in transit (SSL/TLS)
- Secure storage systems
- Access controls and authentication
- Regular security assessments
However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
10. Children’s Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.
11. Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on this page
- Updating the “Last Updated” date
- Sending email notification (for significant changes)
Your continued use of our Site after changes constitutes acceptance of the updated Privacy Policy.
13. Contact Us
If you have questions, concerns, or wish to exercise your rights, please contact us:
Styperson Pope Limited trading as The Decision Arc
Email: simon@thedecisionarc.com
Address: Hillside Chapel, Chapel Bank, Mow Cop, Staffordshire, ST7 3NA
14. Supervisory Authority
If you are located in the EEA or UK and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.
15. Specific State Disclosures (US)
California Residents (CCPA/CPRA)
Categories of Personal Information Collected:
- Identifiers (name, email, IP address)
- Commercial information (payment details)
- Internet activity (browsing behavior)
- Professional information (organization, team details)
Purposes: As described in Section 3 above
Categories of Third Parties: Service providers as described in Section 4
Sale of Personal Information: We do not sell personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
Shine the Light: California residents may request information about sharing personal information with third parties for direct marketing purposes (we do not engage in this practice)
Nevada Residents
We do not sell personal information as defined under Nevada law. If you wish to opt-out of any potential future sales, contact us at contact@thedecisionarc.com.
By using our Site or services, you acknowledge that you have read and understood this Privacy Policy.
Effective Date: 21 February 2026
Last Updated: 21 February 2026
