Privacy
Confidential by default.
Compass treats the information you share with the same discretion we require of our forums. This notice sets out, in plain language, what we hold, why, for how long, who else sees it, and the rights you can exercise.
Maintained by Compass Performance Consulting, Inc.. Version 2026-08-03. This notice describes current practice; it is not a certification and not a substitute for the formal agreement we provide when we engage.
Who is responsible
Compass Performance Consulting, Inc. is the legal entity behind this site; Compass Performance, Inc. and Compass Performance are the names it trades under. They are the same organization. Compass Performance Consulting, Inc. is the data controller for information collected through this site. Address: 500 West Silver Spring Drive, Suite K-200, Glendale, Wisconsin 53217, United States. Email skopecky@compassperformanceinc.com, telephone 224.307.0912.
We have not appointed an Article 27 representative in the European Union; European enquiries are answered directly by the address above.
Where a client organization engages us to run Compass 360° feedback or a transformation program, that organization is the controller of its participant data and Compass acts as its processor under written instruction.
What we collect and why
We collect only what you choose to give us, plus the minimum technical records needed to keep the platform secure. We do not sell, rent, or trade personal data, and we run no advertising networks on this site.
| Purpose | Data | Lawful basis |
|---|---|---|
| Answering an enquiry or arranging a first conversation | Name, work email, company, role, and what you describe | Legitimate interests (responding to a request you initiated), and contract where an engagement follows. |
| Assessments, diagnostics, and instrument outputs | Your answers, scores, and the report generated from them | Consent, given when you submit the instrument; withdrawn at any time by request. |
| Executive forum applications and fit profiles | Application answers, professional background, and any uploaded resume | Legitimate interests in assessing fit, then contract on membership. |
| Compass 360° feedback and engagement delivery | Ratings, comments, and participant records supplied by the client organization | Contract with the client organization; Compass acts as processor on the client's instruction. |
| Site measurement | Anonymous browser identifier, pages viewed, CTA clicks, scroll depth | Consent, recorded through the privacy choice on this site and refusable without losing any content. |
| Security, rate limiting, and abuse prevention | One-way hashed visitor fingerprint, gate attempt outcomes | Legitimate interests in protecting confidential client material. |
How long we keep it
Retention is enforced nightly by an automated job, not by memory. When a window closes, identifying fields are irreversibly redacted or the record is deleted.
| Data | Window | What happens |
|---|---|---|
| Assessment and diagnostic submissions (Mental Fitness, FOUNDATION, and related instruments) | 24 months from submission | Name, email, phone, and company are irreversibly redacted; anonymous scores remain for benchmarking. |
| Outreach and campaign responses | 24 months from response | Contact detail redacted; the response itself is kept anonymously. |
| Forum fit profiles and uploaded resumes | 12 months from application | Contact detail redacted and the uploaded document reference deleted. |
| Measurement events (page views, CTA clicks, scroll depth, share clicks) | 24 months from the event | Deleted outright. |
| Access and security logs (hashed visitor fingerprints, gate attempts) | 12 months from the event | Deleted outright. |
| Compass 360° feedback and client engagement records | Per the engagement agreement, then on request | Returned or destroyed at the client's instruction; individual ratings are never released by name outside Compass administration. |
Who else may see it
These providers process data on our instruction under data processing agreements. Transfers outside the European Economic Area rely on Standard Contractual Clauses or an adequacy decision, as noted.
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| HubSpot | Client relationship records, meeting scheduling, and follow-up correspondence. | United States / European Union | EU Standard Contractual Clauses under HubSpot's data processing agreement. |
| Supabase (Lovable Cloud) | Application database, authentication, and encrypted file storage for the platform. | United States | EU Standard Contractual Clauses under the provider's data processing agreement. |
| Lovable | Hosting, delivery, and transactional email for this site and its instruments. | United States / European Union | EU Standard Contractual Clauses under the provider's data processing agreement. |
| ScoreApp | Complimentary Compass Profiles completed on the provider's own scorecard platform. | United Kingdom | UK adequacy decision; the provider's own notice applies to data entered there. |
| Positive Intelligence | Licensed PQ® Mental Fitness program delivery for enrolled participants. | United States | EU Standard Contractual Clauses under the licensor's terms. |
| YouTube (Google) | Video playback, loaded only when you choose to play a video. | United States / European Union | EU Standard Contractual Clauses under Google's terms. |
| Publishing Compass articles and recording share clicks you initiate. | United States / European Union | EU Standard Contractual Clauses under LinkedIn's terms. |
Cookies and measurement
Nothing beyond strictly necessary storage runs until you decide. Measurement is first-party, carries no advertising identifiers, and can be refused or withdrawn at any time from the privacy choice in the footer. The cookie notice lists every key we set.
Text messages
Where you have opted in, Compass sends text messages about your projects, sessions and engagements. We collect only your mobile number and the record of your opt-in — the wording you agreed to, the page it was given on, and the time.
We do not share mobile numbers. No mobile information is sold, rented or shared with third parties or affiliates for marketing or promotional purposes. Numbers are disclosed only to our messaging carrier for the sole purpose of delivering the messages you requested, and otherwise only as required by law.
Message frequency varies. Message and data rates may apply. Reply STOP to cancel at any time, or HELP for help. Opt-out records are kept so that a stopped number is never texted again.
You can opt in on the text message updates page and read the SMS terms.
Your rights
If you are in the European Economic Area, the United Kingdom, or Switzerland you may ask us to:
- See what you hold about me (access)
- Send me a copy of my data (portability)
- Correct something that is wrong (rectification)
- Delete my data (erasure)
- Stop using my data for a purpose (objection)
- Pause use of my data while a question is open (restriction)
- Withdraw consent for measurement or for an assessment you submitted.
We answer within 30 days. Use the data rights request form or email skopecky@compassperformanceinc.com. You may also complain to your national data protection authority — we would rather you told us first.
Confidentiality of dialogue
We do not name clients or share specifics of engagements without permission. What is said in a Compass forum or partnership stays there. Compass 360° feedback is only ever seen by named individual inside Compass administration, and a report is released only once all feedback is in and confidentiality thresholds clear.
Automated decisions and children
We make no decisions about you by automated means alone; every assessment output is read and interpreted by a person. This site is intended for working professionals and we do not knowingly collect data from anyone under 16.
Security incidents
Access to client material is restricted by role and logged. If a breach affecting personal data occurs, we notify the relevant supervisory authority within 72 hours of becoming aware and inform affected people without undue delay where the risk to them is high. Report a suspected vulnerability or exposure to skopecky@compassperformanceinc.com.