ShapeTalk Privacy Policy

1. Who we are

ShapeTalk is run by Biz Group FZ-LLC ("Biz Group", "we", "us" or "our"), based in Dubai Production City (DPC), formerly the International Media Production Zone (IMPZ), at Unit D56, Dubai Production City, Dubai, United Arab Emirates. For the purposes of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, "PDPL"), Biz Group FZ-LLC is the data controller for the personal data described in this policy.

2. Scope

ShapeTalk is a communication style-based teambuilding activity (it is not a psychometric test) delivered in workshops, teambuilding events, and facilitated sessions approved or delivered by Biz Group. This activity and its platform are not offered as a public consumer product.

Where a session is run for your employer or an event organiser, the facilitator may share the session results with them, for example in an exported report. Please ask your facilitator who will receive the results before you take part.

3. What we collect

When you take part in a session, we collect and store:

• Your name, the first and last name you type into the details form
• Your email address, which is required to take part
• Your quiz answers, the shape you chose for each question
• Your results, the score for each shape and the time you submitted
• The session code, which links your entry to the session you joined

We also automatically receive standard technical data when you use the site, such as your IP address, browser type, device details, request logs and timestamps through our hosting and infrastructure providers consistent with normal web operation.

4. How we use this data

We use the data described in Section 3 to:

• Calculate your communication style result from your answers and present it to you
• Prevent duplicate entries within a session
• Enable facilitators to administer the session, review and export participant results
• Display participant names and results on the live session dashboard
• Maintain the security, integrity and technical operation of the platform

Results are generated using a fixed scoring algorithm based on your answers.

5. Who can see your data

Your data may be seen by:

• You, through your results page
• Session attendees, when a facilitator displays the live session dashboard, which shows participants' names and results but not their email addresses
• Biz Group facilitators and authorised personnel, who can access your name, email address, answers and results, and export them as a spreadsheet or PDF upon the request of your employer

6. Consent and legal basis

Entering your details and pressing the start button is a deliberate, voluntary act, and we treat it as your consent to process your name, email address and answers for the purposes in Section 4. Technical data is processed because it is necessary to run and secure the platform.

• Your choices, you decide what you enter. If you are not comfortable taking part, you can tell the facilitator and leave the session without submitting.
• Withdrawing consent, you can withdraw at any time by telling the facilitator during the session, or by contacting us afterwards using the details in Section 14. We will then delete your entry. Withdrawal does not affect processing that happened before it.

7. Service providers

We use the following third-party providers to run ShapeTalk. Each handles data on our behalf under its own security and data protection commitments:

We do not sell participant data to any third party, and we do not permit these providers to use session data for their own marketing or training purposes. You may contact us through details provided in Section 14 to request more information on the third-party providers. Requested details will be shared with our verified clients only, provided these details do not compromise the security, source code, or any other sensitive details of our technical infrastructure.

8. Retention

Sessions, and the participant data described in Section 3 other than technical logs, are automatically deleted 180 days after the session is created, unless a shorter period is requested by you, your event organiser, or your employer.

Technical logs are exempt from this retention period for the sole purpose of error logging and maintenance of the platform.

9. International data transfers

Our infrastructure providers, including our hosting, database and network providers, process data outside the UAE as part of their global infrastructure. Where this occurs, we rely on the contractual and technical safeguards those providers maintain, including their standard data protection agreements. Relevant details of each provider's data handling can be provided on request.

10. Your rights

Under the PDPL, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data, including your entry in a session
• Object to or request restriction of processing
• Request data portability, where technically feasible

To exercise any of these rights, contact us at teambuilding@bizgroup.ae

11. Children's privacy

ShapeTalk is intended for use by adult participants in corporate and professional event settings. It is not directed at, or knowingly used by, individuals under 18. If you believe a minor has provided personal data through this platform, please contact us using the details in Section 14 so it can be removed.

12. Security

We apply reasonable technical and organisational measures to protect participant data, including encryption in transit, authenticated access for facilitators, and access controls on our backend systems.

13. Changes to this policy

We may update this policy from time to time to reflect changes to ShapeTalk or to applicable law. When we do, the effective date at the top of this page will be updated.

14. Contact us

Biz Group FZ-LLC | Email: teambuilding@bizgroup.ae