Privacy policy
Last updated: 14 October 2026
1. Who we are
IPB Partners OÜ (registry code 11118213, VAT EE100964910), Mayeri Business Centre, Paldiski mnt 29, 10612 Tallinn, Estonia (“IPB Partners”, “we”). We are an authorised partner of John Wiley & Sons, Inc. (“Wiley”) for Everything DiSC®, The Five Behaviors® and ProfileXT®. We sell assessments, run DiSC® certification and help organisations use these tools.
Contact for anything related to personal data: info@ipbpartners.eu, +372 525 7939.
This policy explains what personal data we process, why, on what legal basis, who receives it and what rights you have. It applies to our websites ipbpartners.eu and its language versions, our emails, events and services.
2. Our two roles
We are the controller for the data we collect for our own purposes: enquiries, quotes, orders, certification participants, newsletter and email course subscribers, free test and scorecard users, invoicing and website analytics.
We are a processor when an organisation (our client) orders assessments for its employees or candidates. The client decides who takes an assessment and who sees the reports. We process that data only on the client’s written instructions under a Data Processing Agreement (DPA), which we sign with every client organisation. If you took an assessment through your employer, your employer is the controller and your first point of contact.
3. What data we process and why
| Situation | Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|---|
| You send an enquiry or order form | name, work email, company, interest, message, page and language of the form | answer you, send a quote, set up an order | steps before a contract (6(1)(b)); our legitimate interest in answering enquiries (6(1)(f)) |
| You or your organisation buy assessments, kits or certification | contact and billing details, order and payment history, participant names and emails | deliver the service, invoice, support | contract (6(1)(b)); legal obligation for accounting (6(1)(c)) |
| You take an Everything DiSC®, Five Behaviors® or ProfileXT® assessment | name, email, answers and the report | create your report and deliver it to you or the person the client has agreed on | as processor: the client’s instructions under the DPA; as controller (individual orders): contract |
| DiSC or ProfileXT certification | name, contact details, employer, attendance, exam result, certificate | run the programme, issue and verify the certificate | contract (6(1)(b)) |
| Free DiSC test or certification scorecard | first name, email, answers, result | show and email your result, send related DiSC tips | consent you give in the form (6(1)(a)); you can unsubscribe at any time |
| Newsletter and free email course | name, email, opens and clicks | send the emails you asked for | consent (6(1)(a)) |
| Emails to existing clients about similar services | name, work email | keep clients informed | legitimate interest (6(1)(f)); unsubscribe link in every email |
| Website statistics and advertising measurement | cookie IDs, pages visited, device and browser data, approximate location | understand how the site is used and measure campaigns | consent through the cookie banner (6(1)(a)) |
| Feedback and testimonials | name, role, company, quote | publish client feedback | consent (6(1)(a)) |
| Legal claims and records | correspondence, contracts | defend legal claims, keep accounting records | legal obligation, legitimate interest |
We do not use DiSC or any other assessment for automated decisions about you. Everything DiSC® is a development tool and we do not support its use in hiring decisions.
We do not sell personal data.
4. Who receives the data
We use carefully chosen service providers who process data on our behalf under written agreements:
- Wiley (USA): hosts the assessments and reports on its EPIC and Catalyst™ platforms. Wiley and its subsidiary Inscape Publishing take part in the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.
- Hostinger (Lithuania): website hosting, form handling and our email.
- Brevo (France): newsletter, email course and transactional emails.
- Google (Google Tag Manager, Google Analytics 4), Meta and LinkedIn: website statistics and campaign measurement, only if you accept these cookies.
- Accountants, banks and payment providers: invoicing and payments.
- Certified DiSC trainers in our network: only when you ask us to connect you with a trainer, and only the details needed for that.
- Authorities: when the law requires it.
5. Transfers outside the EU
Some providers (Wiley, Google, Meta, LinkedIn) are based in the United States. Transfers rely on the EU-U.S. Data Privacy Framework where the recipient is certified, and otherwise on the European Commission’s standard contractual clauses.
6. How long we keep data
| Data | Retention |
|---|---|
| Enquiries that did not lead to an order | 3 years from the last contact |
| Contracts, invoices and accounting records | 7 years (Estonian Accounting Act) |
| Certification records and certificate verification | as long as the certificate is valid, which is indefinitely, unless you ask us to delete them |
| Assessment reports | as agreed with the client in the DPA; by default while the client account is active, then deleted on request |
| Newsletter, email course, free test and scorecard | until you unsubscribe, then the address is kept on a suppression list so we do not email you again |
| Cookie data | as shown in the cookie banner, up to 13 months for analytics |
7. Cookies
Necessary cookies keep the site working and remember your cookie choice. Analytics and marketing cookies (Google Analytics, Meta, LinkedIn) are only set after you accept them in the cookie banner. We use Google Consent Mode, so without consent these tools receive no identifiers. You can change your choice at any time through the cookie settings link in the footer.
8. Your rights
You can ask us to:
- tell you what data we hold about you and give you a copy;
- correct inaccurate data;
- delete your data, unless we must keep it by law;
- restrict or object to processing, including at any time to direct marketing;
- give you the data you provided in a machine-readable format;
- withdraw your consent, without affecting earlier processing.
Write to info@ipbpartners.eu. We reply within one month, usually much sooner, and may first confirm your identity. If your request concerns an assessment ordered by your employer, we forward it to your employer and help them respond.
You can also complain to the Estonian Data Protection Inspectorate (www.aki.ee) or the authority in your country.
9. Security
Access to personal data is limited to people who need it. Assessment data stays on Wiley’s platform. Our site uses encrypted connections, and forms are protected against spam. If you notice a possible data breach, please tell us at info@ipbpartners.eu.
10. Children
Our services are for adults. We do not knowingly collect data from children under 16.
11. Changes
We update this policy when our services or the law change. The current version is always on this page, with its date.
Terms of use for products and services
1. Scope
These terms apply to orders of assessments, reports, facilitation kits, certification programmes and workshops from IPB Partners OÜ, unless a signed contract says otherwise.
2. Orders and prices
- Prices are in euros and exclude VAT. VAT is added where the law requires it. VAT-registered companies in other EU countries and payers outside the EU are invoiced without VAT (reverse charge).
- New clients get 10% off their first order of profiles.
- An order is binding when we confirm it in writing (email is enough).
- Payment is by invoice or card. Invoices are due within 14 days.
3. Assessments
- We usually set up assessment links on the working day you order.
- Unused assessment credits do not expire and are not refundable once the assessment links have been sent.
- Reports are delivered through Wiley’s platforms. The client decides who sees which reports and should tell participants before they take the assessment.
- Everything DiSC® is designed for development. It must not be used as the basis for hiring, promotion or dismissal decisions. For selection, use an assessment built for it, such as ProfileXT®.
4. Certification and training
- The certificate is issued when the participant has completed the pre-work, both live sessions and the exam. It does not expire.
- Cancellation: free up to 14 days before the start. After that, the participant may move to a later group once at no cost. Someone else from the same organisation may take the place at any time.
- If we cancel or move a group, you choose between a later date and a full refund.
- Group discounts apply when 3 or more people from the same organisation join the same group.
5. Intellectual property
Everything DiSC®, The Five Behaviors®, ProfileXT® and Catalyst™ are trademarks of John Wiley & Sons, Inc. Profiles, reports, facilitation kits, slides, videos and other materials are protected by copyright.
- You may use the materials you have bought for the purpose they were sold for: your own sessions, with your own teams or clients.
- You may not copy, translate, modify, upload or resell the materials, or put them on a website or in marketing materials, without our written permission.
- Certified practitioners may say they are certified and may use the materials from the DiSC Knowledge Hub in their own sessions. They may not present themselves as Wiley or as IPB Partners.
Misuse can lead to legal action and to the end of access to the materials.
6. Ethics
Use the assessments with respect for the people who take them: explain the purpose, keep reports confidential and share results only as agreed. Never use a style to label people.
7. Liability
We provide our services with care. We are not liable for indirect damage or lost profit. Our total liability for one order is limited to the amount paid for that order, except where the law does not allow such a limit.
8. Law and disputes
Estonian law applies. We aim to solve disagreements by talking first. If that fails, disputes go to Harju County Court, unless the law gives a consumer the right to another court.