How we handle your data.
What you write here is personal. We keep this notice short and honest: what we hold, where it lives, who touches it, and how you get rid of it.
Understand Your Shadow is operated by People Work Life Ltd, a company registered in England, based in Ascot, United Kingdom — the data controller for everything described here. You can reach us at rob@peopleworklife.com or hello@understandyourshadow.com. The Information Commissioner’s Office (ICO) is our supervisory authority. This notice is drafted under UK GDPR.
If you make an account: your name, email address, and any certification details or notes you give us at signup. If you take an assessment while signed in: your answers, your scored results, and the optional free-text context you attach. If you use the member portal: journal entries, blueprints, check-ins, and your reminder settings (including your timezone — and reminder emails may name the archetype you are working with). If you write to us through the contact form: your name, email, and message. If you buy something: payment is handled by Stripe — we see what you bought and the email it was bought with, never your full card details.
Assessment answers, results, and journal entries are sensitive psychological data, and we treat them with the special care UK GDPR expects for data of this kind. We process them for one reason only: because you asked us to — to score your assessment, show you your own results, and keep your private reflections available to you. They are never sold, never used for advertising, never used to profile you for any other purpose, and never shared except as this notice describes.
Your data is stored in Supabase (our database and sign-in provider), with row-level security so each account can only read its own rows. Alongside Supabase, three processors handle data on our behalf under contract: Resend sends our emails, Vercel hosts the site, and Stripe processes payments. That is the whole list.
If you take the assessment through a group invitation link, your individual answers and results are visible to the person running that group — that is the point of group mode, and the join page says so before you begin. Giving your name there is optional.
If you take the assessment without an account, your answers and results stay in your own browser’s local storage. They are not sent to us and we cannot see them. Clearing your browser data deletes them.
Assessments, journal entries, and account data are kept until you delete them or ask us to. You can delete individual assessments from your profile history and individual journal entries from the journal. To delete your whole account and everything in it, email rob@peopleworklife.com — we do this by hand at the moment, and we complete it within 30 days.
You can ask us at any time to confirm what we hold about you, to correct anything that is wrong, to erase your data, to restrict or object to a particular use, or to receive a copy of it. Email rob@peopleworklife.com and we aim to respond within 30 days. If you are unhappy with how we handle any of this, you can complain to the ICO at ico.org.uk.
We use strictly necessary cookies to keep you signed in. There are no advertising cookies and no cross-site tracking.
This site is for adults. You must be 18 or over to create an account or take an assessment, and we do not knowingly hold data about anyone younger. If you believe we do, tell us and we will delete it.
This notice is reviewed annually. The current version was published in July 2026.