Privacy Policy

Last updated: 5 June 2026

EnneagramTest ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our website at enneagramtest.co.uk and our assessment platform at app.enneagramtest.co.uk.

We are registered with the Information Commissioner's Office (ICO) under registration number ZC148551.

1. Who We Are

EnneagramTest is operated by Eugenio Leijten, trading as EnneagramTest.

Address: TA3 7EQ, Taunton, England
Email: legal@enneagramtest.co.uk

2. What Data We Collect

Clients (assessment participants)

• Your name and email address — provided by you at the start of your assessment
• Your assessment responses — gathered during the guided conversation
• Your Enneagram report — generated after your assessment and made available to you via a secure link for 30 days
• Your consent record — the date and time you agreed to participate in the assessment
• Session metadata — duration, date, and Enneagram type result

Practitioners (coaches and therapists)

• Your name and email address — provided during registration
• Your branding preferences — colours, logo, profile photo, and font choices
• Purchase history — token pack purchases and invoice records
• Client assignment records — which tokens have been assigned to which clients

Website visitors

• Standard web analytics data — pages visited, browser type, approximate location
• Cookie data — see our Cookie Policy

3. How We Use Your Data

• To deliver the Enneagram assessment service to clients
• To make your personalised report available to you via a secure link
• To allow practitioners to manage their account and assign assessments to clients
• To process payments for token purchases (via Stripe)
• To send invoices and account notifications to practitioners
• To improve our service and ensure it works correctly
• To comply with our legal obligations

4. Legal Basis for Processing

• Contract: processing necessary to deliver the service you have requested
• Legitimate interests: improving our platform, preventing fraud, maintaining security
• Legal obligation: retaining records for tax and accounting purposes
• Consent: where you have explicitly agreed, for example to receive marketing communications

5. Who We Share Your Data With

We share your data only where necessary to deliver our service:

• Anthropic — our AI provider, which processes assessment conversation data to generate your report. Data is processed under Anthropic's privacy policy.
• Stripe — payment processing for token purchases
• Fastmail — email delivery
• Cloudflare — platform hosting and security
• Wix — data storage for practitioner and session records
• Your practitioner — your report is shared with your practitioner as part of the service, as agreed when you accepted the assessment invitation

We do not sell your personal data to third parties.

6. Data Retention

• Your assessment conversation transcript and report are deleted 30 days after your assessment is completed.
• Client name and email are retained for as long as the associated token record exists.
• Practitioner account data is retained for the duration of the account and for 7 years thereafter for accounting purposes.
• Invoice records are retained for 7 years in line with HMRC requirements.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict how we process your data
• Object to processing based on legitimate interests
• Data portability — receive your data in a structured, machine-readable format

To exercise any of these rights, please contact us at legal@enneagramtest.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the ICO at ico.org.uk.

8. Security

We take appropriate technical and organisational measures to protect your personal data, including encrypted data transmission (HTTPS), access controls, and secure third-party processors. However, no internet transmission is completely secure and we cannot guarantee absolute security.

9. Cookies

We use cookies to operate our website and platform. Please see our Cookie Policy for full details.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify practitioners of significant changes by email. The current version is always available at this URL.

11. Contact Us

For any privacy-related questions or requests, please contact:
Email: legal@enneagramtest.co.uk
Address: TA3 7EQ, Taunton, England