Privacy Policy | Growth Mindset Institute

1. About this policy

This policy explains how we handle personal information. We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles, and, where it applies, the EU and UK GDPR (see section 13).

2. The information we collect

Contact and account details. Your name, email address, phone number, organisation and role.
Mindset Profiler responses and results. These are treated as sensitive information and are collected only with your consent.
Payment information. Payments are processed by Stripe. We never see or store your financial information.
Technical information. Your IP address, browser, device and the pages you visit, collected automatically through cookies. Analytics and advertising cookies are used only if you opt in.

3. Sensitive information and consent

You give consent on the Mindset Profiler start screen before you begin, and you can withdraw it at any time by contacting us. When companies buy Mindset Profilers directly from us and have a company administrator, they can change the consent screen.

4. How we use your information

to create and manage your account
to produce your Mindset Profiler report
to process your payment and any refund
to send you service messages about your purchase or your Profiler
to respond to your requests
to retain de-identified data so we can improve the Profiler and our research

5. Automated processing and the Mindset Profiler™

The Mindset Profiler™ uses automated processing to score your responses across the eight fixed-mindset trigger dimensions and to benchmark them against our normed dataset, producing your individual and, where applicable, team or organisational results. This output is informational and developmental — it supports human judgement and conversation and is not used to make legal or similarly significant decisions about you on a solely automated basis. You can ask how your results were generated, request a human review, or request access to or correction of your personal information by contacting us.

6. Who we share it with

Service providers. Stripe for payments, our hosting providers, and our email delivery providers.
Your employer. If your employer bought your Mindset Profiler, they can only see aggregated, de-identified results for your team.
Research partners. Only where you have opted in, and only as de-identified data.
Legal and safety. Where we are required or permitted by law.

We do not sell your personal information.

7. Overseas disclosure (APP 8)

Some of our providers are outside Australia:

Stripe — United States and Ireland (payments)
Amazon Web Services — Germany (hosting)
MailChimp — United States (newsletter)
Microsoft 365 — United States (email)
Google LLC — United States (website analytics and advertising measurement, only if you opt in)

Our current list of providers is published as our Sub-processor List.

8. How we keep it secure

Your information is encrypted in transit and at rest, and access is restricted to the people who need it to do their work.

9. Data breaches

We comply with the Notifiable Data Breaches scheme. If a breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner.

10. Your rights

You can ask for access to your personal information, ask us to correct it, or ask us to delete it. Email info@growthmindsetinstitute.org. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner.

11. Retention

We keep your information for as long as your account is open, and for one year after it closes.

12. Cookies and analytics

We use cookies to run the site. With your consent, we also use Google Analytics 4 to understand how the site is used, and the Google Ads conversion tag to measure our advertising. Both are provided by Google LLC and both are governed by Google Consent Mode, which denies analytics and advertising storage by default until you opt in. Our Cookie Policy lists the cookies involved, and you can change your choice at any time from the site footer.

13. If you are in the EU or UK (GDPR)

Where the GDPR applies, the Growth Mindset Institute is the controller of your personal data. We rely on:

your consent, for the special-category data in your Mindset Profiler answers
the performance of a contract, for your purchase and your account
our legitimate interests, for running and improving the website

Where we transfer personal data out of the EU or UK, we use Standard Contractual Clauses. You have the right to lodge a complaint with your local supervisory authority.

14. Children

The Mindset Profiler is intended for adults in a workplace setting.

15. Changes

We may update this policy. The current version is always published on this page.

16. Contact

Growth Mindset Institute, Melbourne, Australia
info@growthmindsetinstitute.org