Skip to content
Privacy notice

What we hold about you, and what you can ask us to do about it

Written to be read. If you want the mechanism behind it rather than the legal statement of it, Privacy and trust shows you how the wall between an individual and their employer is built.

Last updated 30 August 2026

01 Who we are

Zenshin Kaishi is a product of AIConcepts.Studio, a trading name of Plakboom B.V., registered in the Netherlands under Chamber of Commerce number 34130965, at Lanckhorstlaan 115, 2101 BC Heemstede, the Netherlands.

We are the controller for the personal data described in this notice. For anything to do with your data, including the requests in clause 12, write to privacy@zenshinkaishi.com.

02 What this notice covers

This notice covers the Zenshin Kaishi website, the innovation assessments you can take on it, and the assessments an organization runs with us. It explains what we hold about you, why, for how long, and what you can ask us to do about it.

The page called Privacy and trustexplains the mechanism that keeps an employer from seeing an individual's answers. This notice is the legal counterpart to it.

03 Before you register

You can start an assessment without an account. While you are answering, your answers are held against a resume code that you keep. There is no name, no email address and no account attached to them, and we have no way to work out who you are from them.

An unfinished draft is deleted 48 hours after you last touch it, by a job that runs on a schedule. If you email the resume code to yourself, we hold that email address so we can send it, and we tell you so at the moment you ask for it.

04 When you register

Registering is how you see your results. From that point we hold:

  • your email address and, if your sign-in provides one, your name;
  • the assessments you have taken and when;
  • every answer you gave, including anything you typed in your own words;
  • your results and any report we generated for you.

Your results are issued to you. Registering is what links your answers to you, and before that they are not linked to anyone.

05 If your organization runs an assessment

An organization that runs an assessment invites people by email address. We hold that address, the group you were invited as, and whether the invitation was accepted, so that the invitation works and so the organization can see how many people have finished.

The organization sees distributions, not people. It does not receive your individual answers, and where a group has fewer than five respondents the result for that group is withheld rather than shown, so that no individual or small group is singled out.

One exception exists and it is yours to grant: if you take the Leadership Diagnostic and agree to it on the record, your own words can be quoted in the organization's report. Employee, partner and customer answers are not eligible for that in any assessment.

06 If you send us an enquiry

The enquiry forms ask for your name, email address, organization and message. Your message is emailed to us and read by a person. It is not stored in the product and it is not joined to any assessment data. We keep it for as long as we need it to answer you.

07 Cookies

We set two cookies, both strictly necessary for signing in: one that keeps you signed in, and one that protects the sign-in exchange itself. We set no analytics cookies, no advertising cookies, and we load no third-party scripts or trackers. That is why this site shows you no cookie banner: there is no choice to offer you.

08 Why we process it, and on what basis

WhatWhyBasis
Your answers and resultsTo produce the assessment you asked forPerformance of a contract with you
Your email addressTo sign you in and reach you about your resultsPerformance of a contract with you
Invitation email addressesSo an organization's assessment reaches the right peopleLegitimate interest of the organization running it
Quoting your own wordsOnly where you agreed to it, on the recordYour consent, which you can withdraw
BenchmarkingSee clause 10Agreement recorded before the assessment opens
Records of legal declarationsTo show the works council step was takenOur legitimate interest in keeping evidence of it
EnquiriesTo answer youSteps taken at your request

09 Who can see what, and where it is stored

Your individual answers are visible to you. They are not shown to your employer, and the organizational report is built from group distributions rather than from rows that can be traced back to a person. Within Zenshin Kaishi, access is limited to what is needed to run and support the service.

We use Cloudflare to host the service, store its data and send its email. We do not sell your data and we do not share it for advertising.

Our database is constrained to the European Union: it is created under a jurisdiction setting that keeps it stored and run within the EU, and copying it to other regions is switched off. Because the service runs at the edge, the request that carries your answers is handled at the Cloudflare location nearest you, which may be outside the EU if you are travelling. What is stored, stays in the EU.

10 Benchmarking

Where it has been agreed, aggregated and anonymized results from an assessment may be included in cross-organization benchmarks. No individual answers and no identifying organizational detail are shared. Benchmarks are what let one organization's results be read against comparable ones.

11 How long we keep it

Unfinished drafts. Deleted 48 hours after you last touch them.

Your account and your assessments. After 24 months without activity we write to you and ask whether to keep the account or close it. If you ask us to close it, or you do not reply, we delete your personal details and keep your answers only in a form that is no longer linked to you, for benchmarking and for improving the instrument. You can ask us to delete everything instead, at any point, and we will.

Assessments run by an organization. The same 24 month clock applies from the last activity on the account. Where the organization administers the account, the reminder goes to the administrator.

Records of legal declarations.The record of who signed an organization's declarations, and when, is kept as evidence that the step was taken, even after that person's other data is deleted. That applies whether or not the organization agreed to benchmarking; the two are separate choices.

Answers kept for benchmarking. If the organization declined benchmarking, those answers are deleted along with your personal details. Otherwise we keep them in the unlinked form described above.

Results already issued. A report that has already been produced is a record of what was true when it was produced. Deleting your data removes you from everything calculated afterwards; it does not rewrite reports already issued.

12 Your rights

You can ask us to:

  • give you a copy of what we hold about you;
  • correct anything that is wrong;
  • delete what we hold, subject to the records named in clause 11;
  • give you your answers in a portable form;
  • stop processing that relies on your agreement, by withdrawing it.

Write to privacy@zenshinkaishi.com. We answer within one month. Withdrawing agreement to benchmarking or to being quoted stops it for everything calculated afterwards.

13 Complaints

If you think we have handled your data badly, tell us first and we will try to put it right. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

14 Changes to this notice

This notice carries the date it was last changed. When something changes that affects what we do with your data, we change this notice before the change takes effect, not after.