top of page

Privacy Policy For Tomorrows Compass

Effective Date: 01 August 2025

​

We are committed to protecting the privacy of our users and ensuring transparency about how personal information is collected, stored, and used throughout your journey on our platform. This Privacy Policy outlines the types of data we collect, how we process it, and the safeguards in place to ensure your information remains secure.

​

By engaging with our assessments, tools, or services, you consent to the practices described in this policy. These practices are aligned with relevant data protection regulations and reflect the use of third-party integrations, analytics, and automation systems used to support your experience.

  • We collect personal and technical information at various stages of your interaction with our platform. This includes, but is not limited to:

    ​

    a) Information you provide directly:

    • Your name, email address, and other contact details submitted when signing up or starting an assessment.

    • Optional demographic data such as job title, role, location, or preferences you choose to share.

    • Assessment responses and survey feedback provided voluntarily.

     

    b) Information collected automatically:

    • Device type, browser type, operating system, and screen resolution.

    • IP address, location estimate, and language preferences.

    • Unique session identifiers and cookies that help us link actions across your journey.

    • Behavior data, such as pages visited, time spent, clicks, navigation flow, and drop-off points.

     

    c) Transaction and usage data:

    • If you complete a purchase, we collect limited transactional details such as amount, product selected, and success confirmation (no card data is stored).

    • We also record timestamps for when you start, continue, complete, or upgrade within an assessment flow.

    ​

    d) Interaction logs:

    • Interactions with automated systems (e.g. AI agents, email triggers, support widgets) may be logged for performance and safety monitoring.

    • This information is used to personalize your experience, improve our tools, and ensure accurate reporting and support.

  • We use the information we collect to operate, enhance, and support your experience with Tomorrow’s Compass. This includes:

    ​

    a) Service delivery and personalization:

    • Delivering assessments and generating personalized reports based on your responses.

    • Remembering your progress so you can return to unfinished assessments.

    • Tailoring content and nudges based on your skill profile, behavior, or stated goals.

    ​

    b) Communication:

    • Sending transactional emails (e.g. welcome messages, completion confirmations, report access).

    • Sending reminders or follow-ups related to your activity (e.g. incomplete assessments).

    • Offering optional updates, product tips, or invitations — only where permitted or expected.

    ​

    c) Optimization and analytics:

    • Monitoring platform usage to understand what’s working and where people drop off.

    • Improving product performance, content clarity, and user flow based on real usage insights.

    • Debugging errors or anomalies that affect user experience or data integrity.

    ​

    d) Conversion and advertising insights:

    • Tracking interactions that help us understand what marketing channels are most effective.

    • Measuring performance of paid campaigns without sharing your identity with advertisers.

    • Informing internal reporting for marketing ROI, not individual profiling.

    ​

    e) Safety and compliance:

    • Preventing misuse, duplicate accounts, or suspicious activity.

    • Fulfilling legal obligations, enforcing terms, or responding to lawful requests.

    • We do not sell your personal information or share it with third-party advertisers.

  • We process personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), Protection of Personal Information Act (POPIA), and other relevant global frameworks. The legal bases we rely on include:

    ​

    a) Consent

    • We may process your personal information where you have provided clear, informed consent — such as when you begin an assessment, opt-in to communications, or accept cookies. You may withdraw your consent at any time, subject to lawful processing requirements.

     

    b) Contractual necessity

    • We process data to fulfill our obligations under any contract with you — for example, to provide access to the assessment platform, deliver your personalized report, or facilitate payment and support services.

     

    c) Legitimate interests

    • We process information to serve our legitimate business purposes, such as improving our platform, conducting analytics, preventing misuse, or communicating relevant updates — provided that such processing does not infringe on your rights or override your interests.

     

    d) Legal obligations

    • We may process or retain personal data where required to comply with legal obligations, lawful requests, tax or audit requirements, or where otherwise permitted by law.

    • We evaluate each legal ground with care and implement appropriate safeguards to protect your rights across jurisdictions.

  • We do not sell or rent your personal information to third parties.

     

    We may share limited personal data with trusted partners or service providers who assist us in delivering our platform and services. These include vendors who help with functions such as:

    • Hosting and data infrastructure

    • Analytics and performance monitoring

    • Customer support and communication

    • Assessment processing and reporting

    • Payment facilitation

     

    All third-party providers are bound by strict confidentiality obligations and are only permitted to process your data in line with our instructions, for the intended purpose, and with appropriate security safeguards.

     

    We may also disclose personal information if required by law, regulation, legal process, or in response to a valid governmental request — or to protect the rights, safety, or integrity of our users, our platform, or

    others.

     

    Where personal data is transferred across borders (e.g., stored on servers in another country), we ensure that such transfers comply with applicable data protection laws and incorporate adequate safeguards where required.

  • We may transfer and store your personal information in countries outside of your country of residence, including countries that may not have the same level of data protection laws as your own.

     

    Whenever we transfer your data internationally, we ensure that appropriate safeguards are in place to protect your information and ensure that your rights remain protected. These measures may include:

    • Ensuring the recipient country has been deemed to provide adequate protection by relevant authorities (e.g., the European Commission)

    • Implementing standard contractual clauses or similar legal agreements approved by data protection regulators

    • Requiring our partners and service providers to uphold strong data protection standards that meet or exceed applicable legal requirements

     

    By using our services, you acknowledge and consent to the transfer, storage, and processing of your information in countries outside your own — provided these safeguards are maintained.

     

    We remain fully committed to treating your data with the same level of care and protection, regardless of where it is processed.

  • We retain your personal information only for as long as it is necessary to fulfill the purposes outlined in this Privacy Policy — including to provide our services, comply with legal obligations, resolve disputes, enforce our agreements, and support business operations.

     

    The exact duration for which we retain data depends on the type of information and the context in which it was collected. In general:

    • Data associated with your account or service usage is retained while your account remains active and for a reasonable period thereafter

    • Assessment responses, reports, and usage logs are stored for as long as necessary to provide continued access to your results and support analytics or feedback, unless you request deletion

    • Communication and support records may be retained to monitor service quality and compliance

     

    We take reasonable steps to ensure that information is securely deleted, anonymized, or archived when it is no longer required.

     

    If you request that we delete your data, we will comply unless we are legally required or permitted to retain it.

  • We are committed to giving you control over your personal information. Depending on your jurisdiction and applicable data protection laws, you may have the right to:

    • Access the personal information we hold about you

    • Correct or update inaccurate or outdated data

    • Request deletion of your personal information where there is no legal reason for us to retain it

    • Withdraw consent where processing is based on consent

    • Object to or restrict certain types of processing, such as direct marketing or profiling

    • Request data portability in a structured, commonly used, and machine-readable format (where applicable)

    ​

    To exercise any of these rights, please contact us using the details provided at the end of this policy. We will respond to valid requests within the timeframes required by law.

    ​

    You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

    ​

    Please note that some rights may be limited depending on the legal basis for processing or specific regulatory requirements.

  • We take the security of your personal information seriously. We implement appropriate technical, administrative, and physical safeguards to protect your data from unauthorized access, misuse, loss, or alteration.

     

    These measures include, but are not limited to:

    • Encrypted transmission and storage of sensitive data

    • Access controls and authentication protocols

    • Routine monitoring of our systems for vulnerabilities

    • Role-based access to ensure only authorized personnel can handle data

     

    Despite our efforts, no system is completely secure. If we become aware of a data breach that affects your personal information, we will notify you and any applicable regulators where required by law.

     

    Your role in protecting your information is equally important. We encourage you to use strong passwords, avoid sharing your login credentials, and notify us immediately of any suspected unauthorized activity.

  • Our services are not intended for children under the age of 16 (or the minimum age required by local data protection laws). We do not knowingly collect, use, or disclose personal information from anyone under this age.

    ​

    If we become aware that personal information has been collected from a child without appropriate consent or legal basis, we will take immediate steps to delete that information.

     

    If you believe that a child under the applicable age has provided us with personal information, please contact us at support@tomorrows-compass.com, and we will take appropriate action.

  • We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we do, we will revise the "Last Updated" date at the top of this page.

    ​

    If the changes are material, we will provide notice in a manner that is reasonably consistent with applicable legal requirements — for example, via email or a prominent notice on our website.

     

    We encourage you to review this Policy regularly to stay informed about how we collect, use, and protect your information.

  • If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:

     

    Email: privacy@tomorrows-compass.com
    Company Name: Tomorrows Compass (Pty) Ltd
    Registration Number: K2025350486
    Registered Address: 111 Puttick Avenue, Sundowner, Johannesburg, 2193. South Africa.

bottom of page