Privacy Policy

Last updated: May 2026

This Privacy Policy applies globally and is designed to meet the requirements of the Australian Privacy Act 1988, UK & EU GDPR, applicable US state privacy laws (including CCPA/CPRA), Canada’s PIPEDA and Quebec Law 25, Singapore’s PDPA, New Zealand Privacy Act 2020, and South Africa’s POPIA. Jurisdiction-specific rights are set out in Section 9.

1. Who we are

This Privacy Policy applies to the DISC Profile Assessment tool operated by Parallel Global Pty Ltd (Australian Business Number (ABN): 42 608 080 735) (“we”, “us”, “our”) through the GrowMyTeam.ai platform.

For the purposes of UK/EU GDPR, Parallel Global Pty Ltd is the data controller. For Canadian residents, our Privacy Officer is the contact listed in Section 11.

2. What personal information we collect

When you complete the DISC Profile Assessment we collect:

Category	Data	Purpose
Identifiers	Full name, email address	Deliver personalised report; CRM record
Assessment data	Responses across 24 question groups; DISC scores and profile	Generate report; internal people analytics
Inferred data	Behavioural style profile (D, I, S, C)	Report generation; CRM tagging

We do not collect special category data (health, biometric, financial, government identifiers), and we do not engage in automated decision-making that produces legal or similarly significant effects.

3. Lawful basis for processing (UK/EU GDPR)

We rely on the following lawful bases under UK/EU GDPR:

Consent — by voluntarily completing and submitting this assessment you consent to the processing of your personal information as described in this policy. You may withdraw consent at any time by contacting us (see Section 11); this does not affect the lawfulness of processing before withdrawal.
Legitimate interests — we have a legitimate interest in maintaining internal records of assessment outcomes for people development purposes within Parallel Global Pty Ltd, where those interests are not overridden by your rights.

4. How we use your information

We use your information solely to:

Generate your personalised DISC profile report
Deliver that report to your nominated email address
Store your profile in our internal CRM for follow-up by authorised Parallel Global Pty Ltd staff

We will not use your information for marketing, profiling for third-party purposes, or automated decision-making without your separate consent.

5. Third-party processors and international transfers

We use the following sub-processors. Both are based in the United States. International transfers from the UK/EU are made under Standard Contractual Clauses (SCCs) approved by the European Commission. Australian residents should note that APP 8 applies to these disclosures. Canadian residents consent to cross-border transfer by completing the assessment. Singapore residents are advised that transfers are made to countries that may not have equivalent data protection laws; by completing the assessment you consent to this transfer under the PDPA. South African data subjects are advised that cross-border transfers under POPIA are made on the basis of consent given by completing the assessment.

Anthropic, PBC — Report generation

Your DISC scores (not your name or email) are transmitted to Anthropic’s API to generate your written report using artificial intelligence. No personally identifying information is sent to Anthropic. Data is not used to train Anthropic’s models under our API agreement. See Anthropic’s Privacy Policy.

HighLevel Inc. (GoHighLevel) — CRM storage

Your name, email, DISC scores, and generated report are stored in our GoHighLevel CRM, hosted in the United States. See HighLevel’s Privacy Policy.

6. Who can access your results

Your assessment results are accessible only to authorised personnel within Parallel Global Pty Ltd. We do not sell, rent, share, or disclose your results to any external individual, employer, recruiter, or third party. We have not sold personal information in the preceding 12 months and do not sell personal information (relevant to CCPA/CPRA).

7. Retention

We retain your personal information for as long as necessary for the purposes described in this policy, or as required by law. If you request deletion we will remove your data from our active systems within 30 days, subject to legal retention obligations.

8. Security

We take reasonable technical and organisational measures to protect your personal information, including TLS encryption in transit and access controls limiting CRM access to authorised staff.

9. Your rights by jurisdiction

Depending on where you are located, you may have the following rights:

Australia — Privacy Act 1988 (APPs)

Access the personal information we hold about you
Request correction of inaccurate or out-of-date information
Request deletion (subject to legal retention requirements)
Complain to the Office of the Australian Information Commissioner (OAIC)

UK & EU — GDPR / UK GDPR

Access, rectification, and erasure (“right to be forgotten”)
Restriction of processing and right to object
Data portability — receive your data in a structured, machine-readable format
Withdraw consent at any time without affecting prior lawful processing
Lodge a complaint with your national supervisory authority — ICO (UK) or your relevant EU data protection authority

United States — State privacy laws

There is no single federal privacy law in the US. Approximately 20 states have enacted their own privacy laws, including California (CCPA/CPRA), Virginia (CDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon, Montana, New Jersey, Minnesota, and others. We extend the following rights to all US residents as a baseline, regardless of state:

Know what categories of personal information we collect and the purposes for collection
Access and delete your personal information
Correct inaccurate personal information
Opt-out of the sale or sharing of personal information — we do not sell or share personal information
Non-discrimination — exercising your rights will not result in any adverse treatment
Data portability — receive a copy of your personal information in a usable format

Residents of states with enacted privacy laws may have additional rights under their specific state law. Contact us to make any request and we will respond in accordance with applicable law.

Canada — PIPEDA / Quebec Law 25

Access and correct the personal information we hold about you
Withdraw consent to collection or processing at any time
Be informed of any cross-border transfer of your information (see Section 5)
Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC)

Singapore — Personal Data Protection Act (PDPA)

Access the personal data we hold about you and be informed of how it has been used in the past year
Correct inaccurate personal data
Data portability — request your data in a commonly used machine-readable format
Withdraw consent at any time (with reasonable notice); withdrawal will not affect prior processing
Lodge a complaint with the Personal Data Protection Commission (PDPC)

New Zealand — Privacy Act 2020

Access and request correction of personal information we hold about you
Be informed of the collection and intended use of your information
Have your information kept secure and not retained longer than necessary
Lodge a complaint with the Office of the Privacy Commissioner (OPC)

South Africa — Protection of Personal Information Act (POPIA)

Access and correct personal information we hold about you
Request deletion or destruction of your personal information
Object to the processing of your personal information
Withdraw consent at any time
Not be subject to decisions based solely on automated processing
Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us using the details in Section 11. We will respond within 30 days.

10. Cookies

This application does not use tracking or advertising cookies. Functional session data may be stored temporarily in your browser to support the assessment flow and is not shared with third parties.

11. Contact & complaints

For privacy enquiries, to exercise your rights, or to raise a complaint, please contact our Privacy Officer:

Parallel Global Pty Ltd

Email: privacy@parallelsoftware.com.au

If you are not satisfied with our response you may escalate to the relevant authority for your jurisdiction as listed in Section 9.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of the assessment after changes constitutes acceptance of the updated policy.

This policy is provided in good faith and should be reviewed by qualified legal counsel before relying on it for compliance purposes.