Privacy Policy
Personal Blueprint Ltd Last updated: 16 October 2026
You are about to answer 100 honest questions about yourself. You should know exactly what happens to those answers. This page says so in plain English, with no hedging.
The short version
- Nobody reads your answers. Your documents are generated by software, automatically. No human at Personal Blueprint opens them as a matter of routine.
- Nothing you write goes public unless you say it can. We ask once, with a plain yes and no, and we only ever publish a first name alongside it.
- We never sell your data. We never share it for advertising. We never use it to train anything.
- We set no tracking cookies and run no advertising pixels. That is why this site has no cookie banner. There is nothing to consent to.
- Four companies help us run the product and each one handles a part of your data. They are all named below, every one is contractually bound to process it only on our instructions, and none may use it for anything of their own.
- You can have everything deleted by sending one email.
The rest of this page is the detail.
1. Who is responsible
Personal Blueprint Ltd is the data controller.
| Company number | 17016008 |
| Registered office | 6-9 Bridgewater Square, London, EC2Y 8AG, United Kingdom |
| Contact for anything on this page | contact@personalblueprint.net |
2. What we hold
From your purchase
- your email address, given to Stripe at checkout and passed to us
- the amount you paid, the currency, and Stripe's reference for the payment
- the date and time you agreed to immediate delivery
- a creator code, if you arrived through someone's referral link
From the assessment
- your first and last name, as you type them
- your 100 answers
- the ten trait scores calculated from them, and the levels derived from those scores
- the two documents and the printable pack produced for you
From using the site
- your IP address, briefly, to stop abuse of the questionnaire and the report pages. We hold it in memory only, for a matter of minutes, and never write it to our database. Our hosting provider keeps its own short-term server logs, as every host does.
If you choose to give it
- your ratings and written comment in the feedback email we send a day after your documents
- your answer to whether we may quote you on the website, and the moment you gave it.
What we never hold: your card number. That goes to Stripe and never touches our systems. We do not ask for an address, a phone number or a date of birth. There is no account and no password.
3. Why we hold it, and our legal basis
| What for | Legal basis |
| Producing and delivering your documents | Performance of our contract with you |
| Sending your receipt, your results and your access link | Performance of our contract with you |
| Keeping records of the sale for tax and accounting | Legal obligation |
| Rate-limiting and basic fraud prevention | Legitimate interests: keeping the service working for paying customers |
| Asking what you thought, once, 24 hours after delivery | Legitimate interests: improving a product you have bought |
| Publishing your comment on our website | Consent, and only if you gave it |
| Attributing a sale to the creator who referred you | Legitimate interests: paying people what they are owed |
We do not send marketing email. There is no newsletter and nothing to unsubscribe from.
4. If you let us quote you
The feedback page asks one extra question: whether we may put your comment on the website.
- It is a straight question with a yes and a no. Neither is ticked for you, and leaving the page without answering is not a yes.
- If you say yes, we may publish your comment and your first name. Nothing else. Never your surname, your email address, your scores or anything from your report.
- If you say no, or say nothing, your comment stays with us and is used only to improve the product.
- We record which you chose and when, so that if anyone ever asks why a quote is on our site, there is an answer.
- You can change your mind at any time by emailing us, and we will take it down. Withdrawing does not affect anything we published before you asked.
5. How your report is produced
Your documents are generated automatically. Your answers are scored by a fixed set of rules, the same rules for everyone, and the resulting scores select passages from a written library. There is no profiling of you against other customers, no machine learning model trained on your answers, and no human judgement applied to your case.
This is not automated decision-making that produces a legal or similarly significant effect on you, in the sense of Article 22 of the UK GDPR. It produces a document you asked us to write for you. Nothing about it decides anything about your life. That part is yours.
6. Who else touches your data
Four companies. That is the whole list.
| Company | What it handles | Where |
| Render | Hosts the application and the database. Your name, email, answers, scores and documents are stored here. | Frankfurt, Germany (EU) |
| Stripe | Takes the payment and gives us your email, the amount and the payment reference. Holds your card details. We never do. | EU and United States |
| Resend | Sends your three emails. Sees your email address and the contents of those emails. | United States |
| Airtable | Holds a copy of your order so we can run the business: your email, your name, your ten scores, order status and, if you gave it, your feedback. | United States |
Each is a processor acting on our written instructions. None of them may use your data for their own purposes.
We will also disclose data if the law requires it (a court order, a tax authority, a regulator), and we will tell you if we are allowed to.
If the business is ever sold, your data may transfer to the buyer. They would be bound by this policy, and we would tell you before it happened.
7. Data leaving the UK and EU
Render stores your data in Frankfurt. Stripe, Resend and Airtable process some data in the United States, and so does Google, which receives the anonymous page-view signals described in our Cookie Policy.
Those transfers are covered by the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, which are the mechanisms UK and EU law provide for exactly this. You can ask us for details.
8. How long we keep it
Until you ask us to delete it.
That is deliberate and we want to be straight about why. Your access link does not expire, and the Strategy Blueprint asks you to come back at 30 days, at 90 days and at a year to re-read it and mark what changed. A document that deletes itself at 12 months would delete itself at the exact moment it asks you to return. So we keep it, and you decide when it goes.
Records of the sale itself (the amount, the date, the payment reference) are kept for six years after the transaction, because UK tax law requires it. That is a legal obligation we cannot waive, and it does not include your answers or your documents.
9. Your rights
Under UK and EU data protection law you can ask us to:
- give you a copy of everything we hold about you
- correct anything wrong
- delete everything (subject only to the tax records above)
- send it to you, or to someone else, in a portable format
- stop or restrict a particular use
- object to anything we do on the basis of legitimate interests
- withdraw your consent to us quoting you, at any time, without giving a reason
Email contact@personalblueprint.net. We reply within 30 days and it costs nothing. We may ask you to confirm the email address you purchased with, so that we do not hand your report to someone pretending to be you.
Deleting your data deletes your documents. They cannot be recovered afterwards, and the link in your email will stop working. Download your PDFs first.
If you think we have handled your data badly, tell us and give us a chance to fix it. You can also complain to the Information Commissioner's Office in the UK (ico.org.uk), or to the data protection authority in your own EU country.
10. Security
- Everything travels over HTTPS.
- Your access link is 256 bits of randomness. It is not guessable, it is never shown in a search engine, and the pages it opens are marked not to be indexed.
- Your report pages are private and never cached by anything in between.
- Access to the production database is limited to the company's sole director.
No system is perfect. If we ever suffer a breach that puts you at risk, we will tell you and the ICO, within the deadlines the law sets.
11. Cookies
We set no advertising, analytics or tracking cookies, and we run no third-party pixels. The few cookies we do use are the ones the product cannot work without. They are listed on our Cookie Policy.
12. If you are under 18
This product is for people aged 16 and over. We do not knowingly collect data from anyone younger, and if we learn that we have, we will delete everything and refund the purchase.
Sixteen and seventeen year olds are still children in UK data protection law, and we take that seriously rather than treating sixteen as an adult. In practice that means the same things we already do for everybody: we collect the least we can, we set no tracking cookies, we never sell or share your data, we use no design tricks to push you into giving more than you meant to, and this page is written to be understood rather than to be survived. If any of it is unclear, email us and we will explain it properly.
13. Changes
If we change this policy we will update the date at the top. If the change is significant and we hold your email, we will tell you.
Personal Blueprint Ltd · Company No. 17016008 · Registered in England and Wales
Cookie Policy
Personal Blueprint Ltd Last updated: 16 October 2026
Why there is no cookie banner on this site
Because there is nothing to ask you about.
We run no advertising cookies, no analytics cookies and no third-party tracking pixels. No Meta pixel, no TikTok pixel, no session recording, no ad networks. Nothing follows you off this site, and nothing about you is sold or shared with an advertiser.
The law requires consent for cookies that are not strictly necessary. We do not set any, so there is no banner standing between you and the page. We do use Google Analytics, but only in its cookie-free mode (consent mode, with all storage turned off): it stores nothing on your device and cannot recognise you from one visit to the next. Google receives only anonymous signals that a page was viewed: which page, when, the type of browser and device, and an approximate country. Google Analytics does not store IP addresses.
The cookies we do set
Three, all of them doing a job the product cannot work without.
| Cookie | What it does | How long |
| pb_session | Holds your private access key after you open your assessment link, so the site knows which questionnaire is yours without putting that key in the address bar. Without it the questionnaire cannot save your answers. | 7 days |
| pb_ref | Remembers which creator's link brought you here, so that if you buy, they get credited for the referral. It holds a short code and nothing else. No identity, no behaviour, no tracking across other websites. | 30 days |
| Stripe's own cookies | Set by Stripe on the checkout page, not on this site, to process your payment and prevent fraud. Governed by Stripe's privacy policy. | Stripe's own periods |
pb_session and pb_ref are set by us, readable only by us, and marked HttpOnly, Secure and SameSite=Lax. That means scripts cannot read them, they travel only over an encrypted connection, and other sites cannot make your browser send them.
Other storage
We store nothing in your browser's local storage or session storage. Your answers are not kept on your device. They are saved to our server the moment you give them, which is why a flat battery at question 80 costs you nothing.
Turning them off
Any browser lets you block or delete cookies. If you block ours:
- blocking pb_session will stop the questionnaire working at all
- blocking pb_ref changes nothing for you, except that a creator will not be credited
Changes
If we ever add a cookie that is not strictly necessary, we will ask you first, properly, with a real choice, and this page will say so before it happens.
Personal Blueprint Ltd · Company No. 17016008 · Registered in England and Wales Questions: contact@personalblueprint.net