Privacy notice

1. Who is responsible

Ignite Labs is operated by Ignite The Human Spark SEZC, Cayman Islands. We are the data controller for personal information used to run the website, assess applications and organise labs. Nerissa J. Persaud is your privacy contact: labs@ignitethehumanspark.com.

This notice covers visitors, applicants, coordinators and proposed participants, including people whose details are supplied by a coordinator.

2. Information we collect

• Accounts: email address, account identifier and authentication records.
• Applications: organisation and coordinator names, work contact details, country, industry, organisation size, preferred programme and format.
• Questionnaires: the challenge, its impact, previous attempts to address it, team context, timing, constraints and desired outcome.
• Participants: names and roles, optional work emails and optional PTS information supplied at the facilitator’s request.
• Communications: application status, review history, messages, replies, permissions and correspondence.
• Technical information: IP address, browser and device information, request logs and essential session data processed by our hosting, authentication and email services.

Information comes from you, your coordinator and the technical services used when you visit or sign in. Required fields are marked. Without information needed for assessment, we may be unable to progress your application.

Describe workplace patterns without identifying people unnecessarily. Do not submit medical or psychological records, disciplinary allegations, identity documents, passwords or other sensitive personal information. PTS is optional: leave it blank unless Nerissa has explained what is needed. The portal does not calculate a PTS score.

3. Why we use it

We use information to administer accounts, assess applications, request clarification, communicate decisions, plan and deliver sessions, respond to enquiries and protect the service.

For ordinary business contact details, application administration and security, we rely on our legitimate interests in responding to organisational enquiries, arranging suitable sessions and operating a secure service. We limit processing to what is necessary and consider the rights and interests of the people concerned. Where an individual personally enters an agreement with us, processing necessary for that agreement or steps they request before it may also apply. A company’s contract does not automatically provide this basis for every employee’s information.

Nerissa reviews applications personally and makes selection decisions. At her request, a reviewer workspace can use OpenAI through Netlify AI Gateway to help analyse a minimised copy of organisational questionnaire responses, applicant follow-up replies and reviewer observations. It suggests questions, provisional programme fit and draft lab or engagement plans. It does not automatically approve or reject applications, diagnose people or calculate personality or PTS scores. Nerissa must review the evidence and may disagree with its suggestions. You may ask us to correct information or request a review without AI assistance by contacting labs@ignitethehumanspark.com.

Applying does not subscribe you to marketing. An expression of interest in a testimonial only permits us to discuss it. Publishing an identifiable testimonial or case study requires separate, specific approval. Where consent is the processing basis, you can withdraw it by contacting us; withdrawal does not undo earlier lawful processing.

4. Access and service providers

The signed-in coordinator manages their organisation’s application and roster. Participants do not receive separate accounts. Authorised reviewers can access submitted applications. Necessary technical administration may involve authorised service-provider personnel.

We use Netlify for website hosting and application processing, Supabase for authentication and database storage, and Google Workspace for sign-in emails, application confirmations, reviewer notifications and correspondence. For optional reviewer analysis, OpenAI processes the reviewer-approved input via Netlify AI Gateway. Names, contact fields and PTS entries are excluded from the prepared input where recognised; free text can still contain identifying information, so the reviewer checks and minimises it before sending. Assessment drafts and reviewer notes are stored in Supabase with reviewer-only access. Their relevant subprocessors support these services. Google Fonts supplies typefaces and receives technical connection information when fonts load.

We do not sell applicant or participant information. Limited disclosure may also be necessary to meet a legal obligation, respond to a valid legal request, obtain professional advice or establish, exercise or defend legal claims.

5. Processing outside Cayman

The application database is hosted in Supabase’s US East region in the United States. Netlify, OpenAI and Google operate international infrastructure. Support and subprocessors may process information in other countries, including the United States. Information is not stored exclusively in Cayman.

International transfers must satisfy the Cayman Data Protection Act, including an applicable transfer condition or adequate safeguards. Provider documentation describes contractual protections and subprocessors; it is not a blanket certification of every transfer. Contact us for information about the arrangements applicable to your data.

Provider information: Supabase processing terms, Netlify processing terms and Google processing terms.

6. Retention and deletion

Our retention policy is:

• Unsubmitted drafts: 90 days after the last saved change.
• Unsuccessful, withdrawn or otherwise closed applications: 12 months after closure.
• Completed labs: questionnaires, rosters and related application history for 12 months after the session.
• Applications still being assessed or arranged: for the active process. We review stalled enquiries for closure rather than retaining them indefinitely.

These periods support assessment, preparation and reasonable follow-up. Removal or irreversible anonymisation is handled through a manual retention review; it is not an automatic portal feature. Related working copies, AI assessment versions, reviewer notes and correspondence are included. Deleting an application from the active database also deletes its saved AI assessments. Account information is reviewed when the associated application is removed and retained only where necessary for an ongoing account, security or another documented lawful purpose.

A limited record may be kept longer for a legal obligation, unresolved complaint or legal claim. This does not justify keeping a whole questionnaire unnecessarily. Separate paid-engagement and financial records have their own justified retention requirements. Provider backup and security copies may persist for the provider’s applicable lifecycle after removal from active systems.

7. Cookies and security

Essential authentication cookies maintain your signed-in session. As you type, the portal also keeps an account-specific recovery copy of unfinished application and participant entries in this browser’s local storage. This helps restore progress after an interruption or failed connection. This tab’s recovery copy is removed after successful account saving (once no unfinished participant entry remains), submission or successful sign-out; copies older than 90 days are discarded when the portal next checks this browser. Clearing browser storage removes this recovery copy. Use your own trusted device for sensitive work. You can clear or block them in your browser, but sign-in may stop working. No advertising pixels or separate visitor-analytics service have been added to the application.

Account checks and database access controls restrict application access. Keep your mailbox secure and never share sign-in codes. No online service guarantees complete security. Report suspected disclosure or misuse to labs@ignitethehumanspark.com.

8. Your rights and choices

Contact us to request access, correction of inaccurate information or deletion when information is no longer needed. You may object to processing or ask for it to stop where applicable law gives you that right. Direct-marketing objections will be honoured. Rights, exemptions and additional rights under other applicable laws depend on the circumstances.

We may request proportionate information to verify identity. Cayman access requests are normally answered within 30 days, subject to statutory rules and permitted extensions. We will explain any lawful limitation or extension. A request does not automatically entitle you to another person’s information.

Coordinators must give participants access to this notice before submitting their details and have authority to share them. Participants may contact us directly to exercise their own rights.

You can complain to the Cayman Islands Ombudsman at info@ombudsman.ky, without contacting us first. Where another jurisdiction’s law applies, you may also have a right to complain to its competent supervisory authority.

9. Changes and international applicants

Cayman law applies to this Cayman-based operation. Additional requirements may apply depending on where and how we offer services. We will provide supplementary information where required; this notice does not claim universal compliance with every country’s laws.

This notice was updated on 28 October 2026 to describe optional AI-assisted reviewer analysis. The date above identifies this version. We will provide appropriate notice before materially changing how personal information is used.