Privacy Policy

Last updated: 21 February 2025

Who We Are

This website (sixanimals.co.nz) is operated by Dr Simon McCallum. It provides an interactive quiz based on the Six-Animal Model for understanding group dynamics, a group engagement survey, and related educational resources.

Contact: sixanimals.co.nz/contact

What Data We Collect

We collect only what is necessary to provide and improve the services on this site:

Quiz Results

When you complete the animal quiz, we store your quiz answers, calculated scores, and primary/secondary animal results. If you choose to email your results, we also store the email address you provide. Your IP address is hashed (one-way, irreversible) before storage — we never store your actual IP address.

Engagement Survey

When you complete the group engagement survey, we store the participant ID you enter, the timepoint you select, and your responses to all 18 statements. We store this data so that you can request deletion of your responses in future — without a stored record, we would be unable to identify and remove your data. If you choose to email your results, we also store the email address you provide. Your IP address is hashed before storage.

Contact & Book Interest Forms

When you submit a contact form or register interest in the book, we store the name, email address, and other information you provide. This is used only to respond to your enquiry or notify you about the book.

Traffic Logs

We log basic request information (page visited, response time, browser type, referrer) for site reliability and usage analytics. IP addresses are hashed before storage. We do not use any third-party analytics services (no Google Analytics, no tracking pixels, no advertising scripts).

Cookies

We use a single session cookie for admin authentication. This cookie is httpOnly (not accessible to JavaScript), set only when an administrator logs in, and expires after 24 hours. We also store your light/dark theme preference in your browser's local storage — this never leaves your device.

We do not use tracking cookies, advertising cookies, or any third-party cookies.

How We Use Your Data

  • Quiz and survey results: To provide you with your personal results and, in aggregate, to improve the Six-Animal Model and survey instruments
  • Email addresses: Only to send you the results you requested, or to respond to your contact enquiry
  • Traffic logs: To monitor site performance, identify errors, and understand usage patterns
  • Engagement survey data: To provide you with your personal engagement profile and, in aggregate, to improve the survey instrument. Data is stored so that it can be identified and deleted at your request.

What We Will Never Do

  • We will never sell, rent, or trade your personal data to any third party
  • We will never share your data with advertisers or marketing companies
  • We will never use your data for profiling or automated decision-making that affects you
  • We will never send you unsolicited marketing emails

Lawful Basis for Processing

Under the EU General Data Protection Regulation (GDPR) and the New Zealand Privacy Act 2020, we process personal information on the following bases:

  • Consent: You actively choose to submit your data by completing a quiz, survey, or form. Email is always optional.
  • Legitimate interest: Traffic logging for site security and reliability, with IP addresses pseudonymised by hashing.

Data Storage & Security

  • All data is stored in an encrypted SQLite database on a server located in New Zealand
  • The server is protected by HTTPS (TLS encryption) for all connections
  • IP addresses are pseudonymised using one-way SHA-256 hashing before storage
  • Admin access is protected by hashed passwords and session authentication
  • Content Security Policy headers restrict what scripts and resources can load on the site
  • No data is transferred to third-party cloud services or overseas servers

Data Retention

We retain data for as long as it is needed for the purposes described above:

  • Quiz and survey results: Retained to allow you to request access or deletion, and for aggregate improvement of the model. You may request deletion at any time.
  • Contact submissions: Retained until your enquiry is resolved, then for up to 2 years for reference.
  • Traffic logs: Retained for up to 12 months, then deleted.

Your Rights

Under both the GDPR and the New Zealand Privacy Act 2020, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of any inaccurate data
  • Deletion: Request that we delete your personal data
  • Portability: Request your data in a machine-readable format (CSV)
  • Withdraw consent: You can withdraw consent at any time by contacting us
  • Complaint: Lodge a complaint with the NZ Office of the Privacy Commissioner or your local data protection authority

To exercise any of these rights, please contact us.

Third Parties

This site embeds YouTube videos. YouTube may set cookies when you play a video. No other third-party services are used on this site.

If you choose to email your results, emails are sent via Gmail's SMTP service. Your email address is transmitted to Google solely for the purpose of delivering that email.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We will not materially reduce your rights under this policy without giving notice.