Privacy Policy

Information we collect

The information we collect depends on how you interact with us and the purpose of the work.

Website, inquiry, and scheduling information

When you contact or schedule time with us, we may receive information such as:

• Your name, email address, and telephone number;
• Your organization, professional role, or job title;
• Scheduling information and time-zone information;
• Information you include in an email, scheduling form, or other communication; and
• The reason you are contacting us.

Website-use information

Our website platform may automatically collect information about visits to the Website, including:

• IP address;
• Browser, network, and device information;
• Pages visited and actions taken on the Website;
• Referring pages or websites; and
• Dates, times, and general usage patterns.

We use this information to operate the Website, understand general site activity, identify technical problems, and improve the visitor experience.

Client and engagement information

Organizations and their representatives may provide information needed to define and deliver an engagement. This may include:

• Business contact information;
• Organizational and reporting relationships;
• Position descriptions and success requirements;
• Leadership, succession, selection, or development questions;
• Information about the business context; and
• Administrative, contractual, billing, and payment records.

Participant and assessment information

When you participate in assessment, feedback, or advisory work, we may collect or receive information such as:

• Contact and professional information;
• Employment history, experience, and role responsibilities;
• Information shared during interviews or advisory conversations;
• Assessment responses, scores, reports, and related results;
• Feedback from colleagues, stakeholders, or other respondents;
• Notes and working analyses;
• Interpreted findings, themes, and recommendations; and
• Reports, debrief materials, or development plans prepared for the engagement.

Some of this information may be sensitive professional or employment-related information. We limit its use to the purpose of the engagement, related administration, and other uses disclosed or authorized in connection with the work.

Where information comes from

We may receive information:

• Directly from you;
• From the client organization or engagement sponsor;
• From people asked to provide feedback;
• From assessment and technology providers;
• From professional references or other sources authorized for the work; and
• From relevant public or professional sources when appropriate to the engagement.

Information from different sources may be considered together when that is part of the stated purpose of the work.

How we use information

We may use personal information to:

• Respond to inquiries and schedule conversations;
• Define, administer, and deliver an engagement;
• Select and administer appropriate assessment or feedback methods;
• Interpret evidence in relation to the stated purpose of the work;
• Prepare and conduct interviews, reports, debriefs, and advisory discussions;
• Communicate with participants, clients, sponsors, and authorized stakeholders;
• Manage contracts, invoices, records, and business operations;
• Maintain and improve our Website and services;
• Protect the security and integrity of our systems and work;
• Establish, exercise, or defend legal rights; and
• Meet contractual, professional, or legal obligations.

Assessment and feedback boundaries

Assessment information does not operate under one universal sharing rule. The appropriate boundary depends on why the work is being conducted.

Before participation begins, we explain the purpose of the work and, as applicable:

• What information will be gathered;
• Who may receive findings or other information;
• What the participant will receive;
• Whether the work is development-focused or supports an organizational decision; and
• How feedback or comments may be presented.

In development-focused work, we explain what remains private and whether a manager, sponsor, or other person will be involved.

When the work supports selection, succession, readiness, or another organizational decision, relevant interpreted findings may be shared with the people authorized to consider them. The scope of that sharing is explained before participation.

Feedback-provider identities and comments are handled according to the method and expectations communicated in advance. When verbatim comments are used, they may be presented without attribution and in connection with a broader theme.

Additional information about these practices appears on our Ethics & Confidentiality and What to Expect pages.

When we share information

Within the engagement

We may share information with the client, executive sponsor, hiring manager, participant, or other authorized stakeholders when that sharing is part of the disclosed purpose and scope of the engagement.

The information shared may differ depending on whether the work is for development, selection, succession, leadership readiness, feedback, or another advisory purpose.

With service providers

We use service providers to operate our business and deliver engagements. These may include providers supporting:

• Website hosting and analytics;
• Scheduling and communications;
• Email and file storage;
• Assessment administration and scoring;
• Feedback collection;
• Document preparation;
• Accounting and business administration; and
• Information security and technical support.

These providers may process information only as needed to provide their services, subject to their contracts, terms, and privacy practices.

When you complete an assessment through a third-party platform, that provider may collect and process information under its own privacy notice. We may provide or link to the relevant notice as part of the engagement.

For legal or protective reasons

We may disclose information when reasonably necessary to:

• Comply with applicable law, legal process, or a valid governmental request;
• Enforce an agreement or protect our legal rights;
• Investigate fraud, misuse, or a security incident; or
• Protect the rights, safety, or property of Think Hard Solutions or another person.

In connection with a business change

If Think Hard Solutions is involved in a merger, acquisition, restructuring, sale, or transfer of business assets, information may be transferred as part of that transaction, subject to appropriate confidentiality and legal requirements.

We do not sell personal information

Cookies, analytics, and scheduling

The Website is hosted by Squarespace . Squarespace uses necessary technologies to operate the Website and may use analytics and performance technologies to provide information about site activity.

You can manage or delete cookies through your browser settings. Restricting cookies may affect how some website features operate.

Our scheduling page uses Calendly . If you schedule a conversation, Calendly may collect information such as your name, contact information, time zone, meeting details, and information you provide during scheduling. Calendly processes that information on our behalf and under its own privacy practices.

Links to third-party websites and platforms are provided for convenience. Their privacy practices are governed by their own notices, not this Privacy Policy.

Data retention

We retain personal information for as long as reasonably necessary to:

• Deliver and administer the engagement;
• Meet the purposes described when the information was collected;
• Maintain appropriate business and professional records;
• Comply with contractual or legal obligations;
• Resolve disputes; and
• Establish, exercise, or defend legal rights.

Different records may have different retention periods. Retention may also depend on the client agreement, the type of engagement, the assessment provider, and applicable law.

When information is no longer reasonably needed, we take appropriate steps to delete it, deidentify it, or securely dispose of it.

Information security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, use, alteration, disclosure, or loss.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we take the sensitivity and purpose of the information into account when selecting systems and handling data.

If you believe information you provided to us may have been compromised, contact us promptly.

Your choices and privacy requests

Depending on applicable law and the nature of the information, you may ask us to:

• Confirm whether we hold personal information about you;
• Provide access to certain information;
• Correct inaccurate information;
• Delete certain information; or
• Explain how information has been used or shared.

Some requests may be limited by contractual responsibilities, legal obligations, professional recordkeeping needs, the rights of other people, or exceptions provided by law. We may need to verify your identity before completing a request.

When we process information on behalf of a client organization, that organization may control the information and the request may need to be directed to it. We will explain that when applicable.

You may opt out of nonessential promotional email by using the unsubscribe instructions in the message or contacting us. Transactional, scheduling, participant, and engagement-related communications are not promotional messages.

Children’s information

The Website and our services are intended for organizations and adult professionals. They are not directed to children under 18, and we do not knowingly collect personal information directly from children through the Website.

If you believe a child has provided personal information to us, contact us so we can review and address the situation.

International visitors and participants

Think Hard Solutions is based in the United States. Personal information may be processed and stored in the United States or in other locations where our service providers operate.

If an engagement involves participants or organizations outside the United States, additional contractual terms, notices, or safeguards may apply.

Changes to this policy

We may update this Privacy Policy when our services, systems, or legal obligations change. The effective date at the top of the policy identifies the most recent revision.

We encourage you to review the policy periodically. Material changes will be described on this page or communicated through another appropriate method when required.

Contact us

Questions, concerns, or requests concerning this Privacy Policy may be directed to: