Your Privacy is Our Priority
At BridgePoint, we understand that burnout assessment involves sensitive workplace experiences. This policy explains how we collect, use, protect, and respect your data.
Effective Date: 12 May 2026 · Last Updated: 12 May 2026
Our Privacy Principles
Anonymity First
Individual responses are never identifiable. We aggregate data to protect privacy.
Purpose Limitation
We only collect data necessary for burnout assessment and organisational insights.
Transparency
You'll always know what data we collect and why.
Security
Industry-standard encryption and security practices protect your information.
Your Control
You decide what information to share and can request deletion at any time.
Information We Collect
From Assessment Participants
What we never collect:
From Administrators
How We Use Information
For Respondents
For Administrators
What We Never Do
How We Protect Anonymity
Minimum Group Size Enforcement
Results are only displayed for groups with at least the configured minimum number of respondents. Small groups could allow identification of individuals through process of elimination.
Data Aggregation
Individual responses are immediately aggregated. Raw response data is never presented to administrators — only averages, distributions, and counts.
No Identifying Metadata
Timestamps are rounded, session identifiers are randomised and regularly purged, and IP addresses are hashed for security only.
Access Controls
Role-based permissions limit who can view which results. Audit logs track all data access by administrators.
How We Secure Your Data
Encryption
Infrastructure
Access Controls
Data Retention
Your Privacy Rights
For Assessment Participants
Right to Know
Request information about how your responses are used.
Right to Deletion
Request deletion of your data via your organisation's administrator or by emailing us directly.
Right to Opt-Out
Participation is voluntary. You may close the assessment at any time without penalty.
Right to Complain
Lodge complaints with your local data protection authority if you believe your rights have been violated.
How to Exercise Your Rights
International Data Transfers
EU/EEA Users: Data is stored in EU data centres and processed under GDPR.
UK Users: Data is processed in accordance with UK GDPR and Data Protection Act 2018.
Other Regions: Standard contractual clauses and appropriate safeguards are used for any international transfers.