Last Updated: October 13, 2026
Behavioral Essentials (“Behavioral Essentials,” “we,” “our,” or “us”) respects your privacy and is committed to protecting it through this Privacy Policy and Notice (“Policy”). This Policy applies to the processing of Personal Data under applicable U.S. federal and state privacy laws (collectively, “U.S. Privacy Law”) and under the UK General Data Protection Regulation, the EU General Data Protection Regulation (Regulation (EU) 2016/679), and other data protection laws of the United Kingdom, and the European Economic Area (collectively, “European Data Protection Law,” and together with U.S. Privacy Law, “Privacy Laws”). For purposes of European Data Protection Law, Behavioral Essentials is the controller responsible for your Personal Data unless we tell you otherwise. This Policy is intended to inform Clients, Participants, coaching recipients, consumers, and users of our Services, websites: behavioralessentials.com and blindspotting.com (the “Websites”), and applications (“you” or “your”) about the types of Personal Data we may collect from you or you may provide to us, the purposes and legal bases on which we rely to use that Personal Data, and how we may use, disclose, maintain, and protect Personal Data, and the choices and rights you have regarding your Personal Data. “Personal Data” means any Data that is reasonably linkable to a particular individual or household, or that relates to an identified or identifiable natural person, such as name, email address, mailing address, telephone number, and other data as more specifically detailed below. This Policy applies to data collected through our Websites, mobile applications, account creation, assessments, communications with us in person, by telephone, or online, or through other means when providing our Services.
The following categories of data are not Personal Data:
By using or accessing the Services, or providing us with Personal Data in any way, you agree to this Policy and the practices described herein. If you do not agree with our policies and practices, do not use our Websites, mobile applications, or Services, and do not provide us with your Personal Data. This policy may change from time to time, and any updates will be posted on our Websites: behavioralessentials.com and blindspotting.com. Your continued interaction with us or use of the Services, Websites, or mobile applications after any policy changes is deemed to be acceptance of those changes.
We are a workplace development company that helps organizations hire better and grow leaders and teams. Behavioral Essentials provides assessment tools to businesses and other organizations (“Client(s)”) to support their workforce and development strategies. Through our Blindspotting™ products and platform, we provide coaching services to assessment participants (“Participant(s)”). As part of providing the foregoing services (collectively, the “Services”) to Clients and Participants, we may collect Personal Data as detailed below.
This Policy provides the following information to U.S. residents:
The below outlines the categories of data we collect, how we may use the specific data in each category, and whether it is shared with third parties. Additional ways we may use the data we collect are provided in the section titled: Additional Purposes For Which We Use Personal Data.
Non-Sensitive Personal Data: Identifiers
Non-Sensitive Personal Data- Personal Characteristics
Non-Sensitive Personal Data- Other
Sensitive Personal Data: Financial Data
You have the right to limit some uses of sensitive Personal Data. In general, you may direct companies not to use your sensitive Personal Data except as necessary to provide goods or services you have requested or to further certain other exempt purposes. We do not sell or share sensitive Personal Data for monetary gain or cross-context behavioral advertising. We use sensitive Personal Data for exempt purposes, such as to provide you with goods or services you have requested.
Form, Field, and Authentication Event Data. We may collect the content of information you type into our online forms, and authentication events such as usernames or emails entered and login attempt timestamps, and error or debug information that may include user-entered text.
In addition to the purposes listed above, we may use data that we collect about you or that you provide to us, including any Personal Data:
Our E3 and Blindspotting™ assessment tools analyze responses and other Personal Data to generate scored reports, behavioral profiles, and coaching recommendations. Clients may use these outputs, together with other information, to inform decisions about hiring, work allocation, compensation, promotion, demotion, or termination of Participants who are prospective, current, or former employees or contractors of a Client.
Each Client is solely responsible for its own use of assessment outputs. Before administering an assessment or using its outputs, the Client must provide all notices and disclosures, and obtain all consents, authorizations, and opt-in or opt-out elections, that are required under applicable law. Where a Client uses assessment outputs to make or support a decision described above, the Client is solely responsible for establishing a lawful basis for that decision, ensuring meaningful human involvement in it, and complying with any applicable notice, bias-audit, impact-assessment, consent, opt-out, appeal, or accommodation obligations under U.S. federal, state, or local law, under Article 22 of the EU General Data Protection Regulation, or under the automated decision-making provisions of the UK General Data Protection Regulation. We act on the Client's instructions in providing the assessment and do not make employment decisions about Participants. We provide Clients with information about how our assessment tools function to support these obligations, but we do not undertake to satisfy them on a Client's behalf.
If you are a Participant, the Client that engaged us is responsible for notifying you about its use of our assessment tools, and requests relating to that use should be directed to the Client in the first instance. We will assist Clients in responding to such requests as required by our agreements with them.
Beginning January 1, 2027, California residents may have the right to receive notice of, and to opt out of or access information about, the use of automated decision-making technology for certain significant decisions, subject to exceptions under California law. Where we act as a service provider to a Client, the Client is responsible for providing that notice and for honoring any opt-out or access request. If you are located in the United Kingdom or the European Economic Area, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, except in limited circumstances, and where such a decision is made you have the right to obtain human intervention, to express your point of view, and to contest the decision. Where the Client is the controller of the relevant processing, these rights should be exercised against the Client. To contact us about this notice, please use the information in the "Contact Information" section below.
Specific instances of how we may collect data include:
If you delete your User Contributions from our Websites or social media platforms, copies of your User Contributions may remain viewable in cached and archived pages or might have been copied or stored by other Website users.
Clients are the primary source of Participant data we receive from sources other than Participants. We may also receive data about you from affiliated and related entities, service providers such as customer relationship management and email marketing platforms, event partners, sponsors, and exhibitors. As described in “Client Data Sharing,” Clients may provide Participant data so that we can administer assessments, provide coaching, and deliver our Services. We may combine Personal Data collected through our Websites with information obtained through business interactions such as conferences, meetings, referrals, phone calls, email communications, and Client-provided Participant information, for the purposes of providing our Services, managing our relationships with Clients, and communicating with Participants and other users. Any data we receive from third parties is governed by the privacy settings, policies, and/or procedures of the relevant organizations, such as LinkedIn® or other social media, and we encourage you to review their privacy policies when interacting with us on these platforms.
As you navigate through and interact with our Websites, hardware or software, we may use automatic data collection technologies to collect certain data about your equipment, browsing actions, and patterns, including:
The data we collect automatically is statistical data, and we do not collect Personal Data automatically, but we may tie this data to Personal Data, or maintain it or associate it with Personal Data we collect in other ways or receive from third parties. This helps us to improve our Websites and to deliver a better and more personalized service, including by enabling us to:
The technologies we use for this automatic data collection may include:
When a Client engages Behavioral Essentials to administer an assessment, provide coaching, or otherwise deliver Services, the Client typically provides Participant data to us. This may include the Participant’s real name, email address, phone number, job title, organization, team structure, development needs, and other information necessary to conduct assessments and coaching and to deliver the Services.
We use the Participant data provided by the Client to administer assessments, provide coaching, and deliver the Services. We may return to or make available to the Client assessment results, scored reports, behavioral profiles, coaching recommendations, and related development resources, consistent with the Client’s engagement and our agreement with the Client.
The Client is responsible for having a lawful basis to share Participant data with Behavioral Essentials and for providing appropriate notice to the Participant before sharing it. Participants should consult the Client’s own privacy notice for information about how the Client uses and further shares assessment outputs.
We may disclose aggregated data and data that does not identify any individual without restriction.
We may disclose Personal Data that we collect or you provide as described in this privacy policy:
We may also disclose your Personal Data:
Do Not Track. We do not currently employ a process for automatically responding to “Do Not Track” (DNT) signals sent by web browsers, mobile devices, or other mechanisms. Per industry standards, third parties may be able to collect information, including personal information, about your online activities over time and across different websites or online services when you use the Site.
Global Privacy Control. You can use the Global Privacy Control (“GPC”) through a supported browser to signal certain of your opt-out preferences. You may opt-out of the processing of your Personal Information for purposes of targeted advertising or certain sales of your personal information by broadcasting the Global Privacy Control Signal through a supported browser. If you use the GPC, we will process your request for your browser, but it will not apply outside of that browser to your device. You will need to use the GPC for each browser you use to access the website If you clear your cookies in your browser after using the GPC, you will need to use the GPC again for us to process your opt out for that browser.
Our Services, Websites, or mobile applications may contain links to other Websites, products, or services that we do not own or operate. We are not responsible for the content provided by, or the privacy practices of, these third parties. Please be aware that this Privacy Policy does not apply to your activities regarding these third-party services or any data you disclose to these third parties. We encourage you to read their privacy policies before providing any data to them.
We make reasonable efforts to protect your data by using administrative, technological, and physical safeguards designed to improve the security of the data we maintain and protect it from accidental loss, unauthorized access or use, or any other inappropriate or unlawful processing. However, because no data system can be 100% secure, we cannot guarantee the absolute security of your data.
We retain Personal Data to provide Services to you, for our business and marketing purposes, and for any other legal or security reasons we may need the Personal Data. Personal Data retention periods may vary depending on how long the Personal Data is needed to fulfill a business purpose for which it was collected. Our recently implemented data retention practice is to review our database biannually to determine if an individual has not utilized our Services or interacted with us in over two years. Personal Data of the identified individuals will be analyzed for if it still meets a business purpose and will be de-identified if the Personal Data no longer serves a business purpose. We will delete the specific pieces of Personal Data that do not meet a business purpose from our database.
Some examples of instances where we may retain Personal Data for longer than the period indicated above include:
Marketing: We may retain real name and email addresses for the business purpose of providing marketing emails to you, including information on new products or events you may be interested in. You may unsubscribe from our marketing emails at any time by utilizing the “Unsubscribe” link within our marketing emails. We may still use your email address to communicate with you to provide Services or fulfill orders even if you unsubscribe from marketing emails.
Job Applications: Job applications may be retained to comply with any state or federal laws regarding employment practices.
To carry out our obligations and enforce our rights arising from any contracts, agreements, or other legal documents entered into between you and us, including for billing and collection: We may retain your name, signature, emails, or other writings to prove the existence of or enforce contracts, as proof of consent, and for other legal purposes involving the Services.
For compliance purposes: Personal Data may be retained to enforce our Terms, Conditions and Disclaimer policies or other legal rights, or as may be required by applicable laws and regulations or if requested by any judicial process or governmental agency, including but not limited to, litigation holds, court, regulatory, or governmental orders or policies.
If you would like your Personal Data retained for longer than the timeframe indicated in this Policy, you may submit a request in writing to support@blindspotting.com or support@behavioralessentials.com for our review.
We may indefinitely retain de-identified portions of data for longitudinal research studies, market studies, analytics, and technological research and development. We reserve the right to sell or share de-identified or aggregated data now or at any point in the future.
You may send us an email at info@behavioralessentials.com, info@blindspotting.com or call us toll free at 866-379-4549 to request access to, correct or delete any Personal Data that you have provided to us. We cannot delete your Personal Data in its entirety without also ending any Services you may have already paid for or subscribed to. We may also be contacted through the above means to appeal any decision about your request. We may not accommodate a request to change data if we believe the change would violate any law or legal requirement or cause the data to be incorrect.
Our Services are not intended for, and we do not knowingly collect any Personal Data from, children under the age of 13. If we learn we have collected or received Personal Data from a child under 13 years old, we will delete that Personal Data. If you are under 13, do not attempt to use our Services, make any purchases through our Websites or use any interactive or public comment feature that may exist or may become available on the Websites or provide any data about yourself to us, including your name, address, telephone number, email address, or any other data. If you believe we might have any data from a child 13 years of age or under please contact us at info@behavioralessentials.com, info@blindspotting.com or call us toll-free at 866-379-4549 so we may investigate.
Our Blindspotting™ assessment and coaching services are not intended for use by minors under the age of 18. If you are under 18, do not attempt to use our Blindspotting™ services, make any purchases through Blindspotting™, use any interactive or public comment feature that may exist or may become available on the Websites or provide any data about yourself to us, including your name, address, telephone number, email address, or any other data.
Our Behavioral Essentials assessment tools are not directed at minors, however, unemancipated minors aged 15 years and older may use our assessment tools and Behavioral Essential Services when a Client refers them as part of an employment or potential employment relationship. We do not sell or share Personal Data of minors with third parties, and we use Personal Data for minors in the same manner as described within this Policy, including as described above under “Automated Decision-Making, Profiling, and Employment-Related Assessments.” Any Client, Participant or other individual who would like to delete their Personal Data may contact us as described below.
Depending on where you live and the laws that apply, you may have certain statutory data protection rights regarding your personal information. These rights may be subject to exceptions and limitations under applicable law.
You may have the right to:
Sale/Sharing for targeted advertising: Behavioral Essentials does not sell personal information. Behavioral Essentials does not share personal information for cross-context behavioral advertising (also called targeted advertising) as those terms may be defined under certain U.S. state privacy laws.
Sensitive personal information: Behavioral Essentials uses sensitive personal information only for purposes such as providing services, credentialing, security, fraud prevention, and compliance with law, as described above, and not to infer characteristics about you for targeted advertising.
Non-discrimination: Behavioral Essentials will not discriminate against you for exercising your privacy rights.
We may need to verify your identity before processing certain requests. We will respond within the time required by applicable law.
Authorized agents (where applicable): In some U.S. states, you may designate an authorized agent to submit a request on your behalf. If you use an authorized agent, we may ask for proof that the agent is authorized, and we may also require you to verify your identity directly with us.
Appeals (where applicable): If we deny your request, you may have the right to appeal our decision. To appeal, please email info@behavioralessentials.com or info@blindspotting.com with the subject line “Privacy Request Appeal” and include your original request and our response. We will review and respond within the time required by applicable law.
Shine the Light. Pursuant to California Civil Code Section 1798.83, if you are a California resident, you have the right to obtain: (a) a list of all third parties to whom we may have disclosed your personal information within the past year for direct marketing purposes, and (b) a description of the categories of personal information disclosed, by contacting us per the “Contact Us” Section below.
You can submit a request regarding your privacy rights by emailing info@behavioralessentials.com, info@blindspotting.com or calling us toll-free at 866-379-4549. To protect your privacy, we may need to authenticate your identity before we respond to your rights request. We may ask you for additional data as part of this process, (i.e. the last 4 digits of a phone number or for other data contained in our records, or by sending a link in an email, etc.). If you do not complete the verification process, we may be unable to process your request. Any data you provide to authenticate your identity will only be used to process your rights request and not for any other purpose.
We will respond to your rights request within 45 days (or within 15 days when required by applicable state law), and in certain cases, we may inform you that we will need an additional 45 days to act on your request. If we suspect fraudulent or malicious activity on or from your account, we will delay acting on your request until we can appropriately verify your identity and the request as authentic. Also note that each of your rights are subject to certain exceptions that may permit or require us not to process your request.
We reserve the right to decline to process, or charge a reasonable fee for, requests that are manifestly unfounded, excessive, or repetitive.
U.S. Privacy Law gives U.S. residents the right to direct a business that sells their Personal Data or shares it for targeted advertising purposes to stop selling and/or sharing their Personal Data at any time. As used here, “selling” means exchanging Personal Data with a third party for money or anything of value, and “sharing for targeted advertising” is the practice of displaying advertisements to a person that are selected based on that person’s activities over time and across non-affiliated Websites or applications. We do not currently sell Personal Data or share Personal Data with third parties as described above.
Our Services are operated and hosted in the United States. If you are accessing the Services from another country, including the United Kingdom or a country in the European Economic Area, your Personal Data will be transferred to, and processed in, the United States and may be transferred to other countries where we or our service providers operate. Where we transfer Personal Data subject to European Data Protection Law outside of the United Kingdom or the European Economic Area, we rely on appropriate safeguards recognized under European Data Protection Law, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum to the Standard Contractual Clauses, or another lawful transfer mechanism. By using the Services, you acknowledge that your Personal Data will be processed as described in this Policy.
If European Data Protection Law applies to our processing of your Personal Data, we rely on the following legal bases, as applicable: your consent, which you may withdraw at any time; the necessity of processing to perform a contract with you or a Client, or to take steps prior to entering into a contract; our compliance with a legal obligation; our legitimate interests, or those of a Client, in operating and improving our Services, provided those interests are not overridden by your data protection interests or fundamental rights and freedoms; and, where applicable, the establishment, exercise, or defense of legal claims.
Subject to applicable exceptions, if European Data Protection Law applies to you, you have the right to: request access to your Personal Data; request correction of inaccurate Personal Data; request erasure of your Personal Data; request restriction of our processing of your Personal Data; object to our processing of your Personal Data, including processing based on legitimate interests or for direct marketing; request portability of Personal Data you have provided to us; and withdraw consent at any time where we rely on consent as our legal basis.
You may exercise these rights using the contact information in the “Contact Information” section below. You also have the right to lodge a complaint with the UK Information Commissioner’s Office or with your local data protection supervisory authority in the European Economic Area.
We retain Personal Data subject to European Data Protection Law only for as long as necessary for the purposes described in this Policy, consistent with the retention practices described under “Retention” above.
It is our policy to post any changes we make to our privacy policy on our Websites with the date of the change displayed on the first page of the updated policy. You are responsible for periodically visiting our Websites and this Privacy Policy to check for any changes. By continuing to use our Services or providing us with Personal Data after any such updates, you are deemed to accept any changes.
To ask questions or comment about this Privacy Policy and our privacy practices, contact us at: info@behavioralessentials.com, info@blindspotting.com or call us toll-free at 866-379-4549.
