Privacy Policy

Last updated: 20 June 2026

Who We Are

The Structural Capability Index™ platform is operated by BPR Consultancy Ltd ("we", "us", "our"), a company registered in England and Wales. We are committed to protecting the privacy and security of your personal information.

What Data We Collect

When you use our platform, we may collect the following information:

Name, email address, and job title (provided during registration or invitation)
Organisation name and role within the assessment
Responses to the SCI diagnostic questionnaire
Login activity and session information for security purposes

How We Use Your Data

We use your data exclusively for the following purposes:

To deliver the Structural Capability Index diagnostic assessment
To generate AI-assisted analysis and scoring of responses
To produce executive reports for your organisation's Client Sponsor
To maintain the security and integrity of your account
To communicate with you about your assessment (e.g. invitations, password resets)

We Will Never Sell Your Data

Your data will never be sold, rented, leased, or otherwise shared with third parties for marketing or commercial purposes. Your responses and organisational data are confidential and are used solely to deliver the SCI assessment service to your organisation.

Data Storage and Security

All data is stored on secure servers hosted by Amazon Web Services (AWS) in the London (eu-west-2) region. Our infrastructure benefits from:

Encryption at rest and in transit (TLS 1.2+)
Firewalled server access restricted to essential services only
Regular automated backups
Password hashing using bcrypt with high cost factors
Session timeouts after 30 minutes of inactivity
Rate limiting on login attempts to prevent brute-force attacks.

Third-Party Services

We use the following third-party services in the operation of this platform:

Amazon Web Services (AWS) — server hosting and infrastructure (London region)
OpenAI — AI-assisted analysis of questionnaire responses. Data sent to OpenAI is processed in accordance with their enterprise data usage policy and is not used to train their models.

Your Rights

You have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (subject to legitimate business needs)
Withdraw consent for processing at any time
Lodge a complaint with the Information Commissioner's Office (ICO)

Cookies

This platform uses essential session cookies only, required for login and security. We do not use advertising, tracking, or analytics cookies.

Contact

For any privacy-related queries, please contact us at:

BPR Consultancy Ltd
Email: privacy@thetransformationexchange.com