Last Updated: January 3, 2026
1. Introduction
SMIndicator LLC ("we," "us," "our," or "SMIndicator") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://smindicator.com, use our Sustainability Mindset Indicator (SMI) assessment tool, participate in our training programs, or otherwise interact with our services.
Please read this Privacy Policy carefully. By using our Website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.
3. How We Use Your Information
To Provide and Improve Our Services
- Deliver the SMI assessment and generate personalized reports
- Process your registration and manage your account
- Provide access to training programs and resources
- Respond to your inquiries and provide customer support
- Send administrative information, updates, and confirmations
- Improve and optimize our Website and services
For Research and Development
- Conduct research on sustainability mindsets and behavior change
- Aggregate and anonymize data for academic publications and presentations
- Improve the SMI assessment methodology and algorithms
- Develop new features and services
For Marketing and Communications
- Send you newsletters, updates, and promotional materials (with your consent)
- Provide information about our training programs and events
- Share relevant resources and educational content
- Conduct surveys and request feedback
Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal basis for collecting and using your personal information depends on the specific context:
- Consent: When you provide explicit consent (e.g., for marketing communications)
- Contract: When processing is necessary to fulfill our contract with you (e.g., delivering the SMI assessment)
- Legitimate Interests: When we have legitimate business interests (e.g., improving our services, research)
- Legal Obligation: When required by law (e.g., tax reporting)
4. How We Share Your Information
We do not sell your personal information.
We may share your information in the following circumstances:
With Service Providers
We engage trusted third-party companies to perform functions on our behalf:
- Payment processors (e.g., Stripe, PayPal)
- Email service providers (for newsletters and communications)
- Cloud hosting providers (for data storage)
- Analytics providers (e.g., Google Analytics)
- Customer relationship management (CRM) systems
These service providers have access to personal information only as needed to perform their functions and are obligated to protect your information.
With Educational Institutions and Organizations
If you access the SMI through an educational institution or organization:
- We may share your assessment results and reports with designated administrators
- Aggregate, anonymized data may be provided for institutional analysis
- Individual data is only shared with explicit permission or as agreed in institutional contracts
With Certified Coaches and Educators
If you work with a certified SMI coach or educator:
- Your assessment results may be shared with your designated coach/educator
- This sharing only occurs with your explicit consent
- Coaches and educators are bound by confidentiality agreements
For Research and Academic Purposes
- We may share aggregated, anonymized data with research partners
- Individual data may be used for academic research only with explicit consent
- Research use complies with ethical review board requirements
For Legal Reasons
We may disclose your information if required to do so by law or in response to:
- Valid requests by public authorities (e.g., court orders, subpoenas)
- Situations involving potential threats to safety
- Protection of our rights, property, or safety
- Investigation of fraud or security issues
5. International Data Transfers
SMIndicator operates in the United States and Europe. If you are located outside these regions, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.
For EEA, UK, and Swiss users:
- We ensure appropriate safeguards are in place for international transfers
- We rely on mechanisms such as Standard Contractual Clauses (SCCs)
- We comply with GDPR requirements for cross-border data transfers
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention Periods:
- Account Information: Retained while your account is active and for 3 years after account closure
- Assessment Results: Retained for 7 years for research and validation purposes
- Transaction Records: Retained for 7 years for tax and accounting purposes
- Marketing Communications: Retained until you unsubscribe or request deletion
- Website Analytics: Typically retained for 26 months
When information is no longer needed, we securely delete or anonymize it.
7. Your Rights and Choices
Rights Under GDPR (EEA, UK, Switzerland)
- Right to Access: Request copies of your personal information
- Right to Rectification: Request correction of inaccurate or incomplete information
- Right to Erasure: Request deletion of your personal information ("right to be forgotten")
- Right to Restriction: Request limitation on processing of your information
- Right to Data Portability: Request transfer of your data to another service
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
- Right to Lodge a Complaint: File a complaint with your local data protection authority
Rights Under US Privacy Laws
Depending on your state of residence, you may have rights including:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
Exercising Your Rights
To exercise any of these rights:
We will respond to your request within 30 days (or as required by applicable law).
Marketing Communications
You can opt out of marketing communications at any time by:
- Clicking the "unsubscribe" link in any marketing email
- Contacting us at info@smindicator.com
- Updating your communication preferences in your account settings
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Security Measures Include:
- Encryption of data in transit and at rest (SSL/TLS)
- Regular security assessments and updates
- Access controls and authentication requirements
- Employee training on data protection
- Secure backup systems
- Incident response procedures
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
9. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.
Educational Programs
Some of our educational programs may involve students under 18. In such cases:
- We work directly with educational institutions
- Parental consent is obtained as required
- We collect minimal information necessary for the educational purpose
- Special protections are applied to student data
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:
- We will update the "Last Updated" date at the top of this policy
- For material changes, we will provide prominent notice (e.g., email notification, website banner)
- Continued use of our services after changes constitutes acceptance of the updated policy
We encourage you to review this Privacy Policy periodically.
Supervisory Authority
If you are located in the EEA, UK, or Switzerland and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
California Privacy Rights
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information
- Right to opt out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination
- Right to correct inaccurate personal information
- Right to limit use of sensitive personal information
To exercise these rights, contact us at info@smindicator.com.