Helder Insight Privacy Notice

Helder Insight provides consulting services and a software platform that helps organisations diagnose and assess workplace culture, psychological safety, and related employee experience factors. We use a combination of quantitative survey data and qualitative interview data, all collected voluntarily from individual participants to help identify the hidden structural and cultural factors that contribute to unwanted turnover, low productivity, low innovation and poor employee wellbeing.

Our registered office is at Prinsengracht 217B, Amsterdam 1015 DT, The Netherlands, KVK number 95688560.

You can reach our Privacy Officer at admin@helderinsight.com or by clicking this link Contact our Privacy Officer.

For ease of reference, we refer to ourselves as "we", "us", "our" or "Helder Insight" throughout this notice. "You" or "your" refers to the individual reading this.

Depending on the context in which your data is processed, we may act in one of three roles as explained below.

As a controller, we are responsible for determining how and why your personal data is processed. When we collect data to operate our platform, run our own research, generate industry benchmarks, or manage our client relationships, we are the controller. This notice governs that processing.

As a processor, we act on behalf of third-party practitioners — such as organisational psychologists, coaches, and confidential counsellors — who use our platform to conduct assessments with their own clients. In these cases, the practitioner determines the purpose of the data processing for the assessment and is the controller; Helder Insight only processes the data on their behalf under a data processing agreement. Where practitioners are using our platform, they are responsible for informing their participants about how personal data is collected and used in their engagement. Please refer to their privacy documentation if you are participating in an assessment organised by a third-party practitioner.

In limited cases we may collaborate with third-party practitioners on a specific study or research project. Under such circumstances we qualify as a joint controller, together with such third-party practitioners. Where this applies, we will let participants know and provide the relevant information separately.

Practitioners based in The Netherlands are bound by the Code of Professional Conduct and ethical standards set by The Netherlands Institute of Psychology (NIP®). Practitioners in the UK are bound by the Code of Ethics and Conduct set by The British Psychological Society. Practitioners collecting data in other countries are bound by the code of conduct and ethical standards applicable in their respective jurisdictions. 

We collect personal data in several different contexts, from different groups of people.

If you take part in one of our assessments, we collect your work or personal email address, age range, gender, tenure range, and whether you are a people leader. For larger organisations (generally those with more than 1,000 employees), and where agreed with our client (the organisation that has commissioned the research), we may also collect information about your department, geographic location, or level of seniority.

If you are a third-party practitioner or end-client with authorised access to our platform, we collect your name, email address, job title, and contact number.

For our clients, suppliers, and their representatives, we collect name and business address details, business contact information, company details, information from the Chamber of Commerce or other public registers, personal data contained in quotations, agreements and/or correspondence with our service providers, and financial (company) information necessary to manage our commercial relationship.

If you apply for a role with us, we collect your name, contact details, CV, cover letter, educational background, professional experience, and any correspondence during the recruitment process.

In all cases, personal data is collected directly from you. Platform users provide their information when registering. Survey and interview participants provide their responses directly through the platform or in person. We do not obtain personal data about individual participants from their employers or from practitioners — even where access to the platform is initiated through a client organisation.

We rely on the following legal bases under applicable data protection law.

To conclude or perform a contract with you — We process the account and contact details of platform users and clients to deliver and maintain our services, onboard new users, process applications, and fulfil our contractual obligations. Where applicants are concerned, we process your personal data for recruitment, assessment and hiring purposes.

To comply with a legal obligation — We retain certain data to meet our obligations under Dutch and EU law, including tax, accounting, statutory reporting requirements and to comply with any professional codes of conduct. We will also share data with public authorities where we are legally required to do so.

For our legitimate interests — We process data to operate, improve, and secure the platform; manage client relationships; conduct benchmarking and analytics; support practitioner-led assessments; send relevant updates to existing clients; and carry out general business operations; to aggregate and anonymize participant data for our research; to provide customer support; for quality control, internal audits and complaint handling; and to establish, exercise or defend the legal position and rights of Helder Insight. We only rely on this basis where our interests are not overridden by your rights.

With your consent, where your personal data is collected through participation to our research, we rely on your consent. Where surveys may reveal special category data (such as information touching on mental or physical health), we process this on the basis of your explicit consent. You may withdraw consent at any time, though this does not affect any processing already carried out.

We know that the topics covered in our assessments (psychological safety, leadership, wellbeing, and workplace culture) can be deeply personal. Here is how we approach this:

We use an internal AI model as part of our Three Factor Model of Psychological Safety™. This model analyses themes related to psychological safety, leadership, job satisfaction, and wellbeing. The model is pre-trained and operates in a secure, ringfenced environment. We do not use data collected through our assessments to train or improve AI models.

All automated analysis is used to support human-led interpretation only. No decisions with legal or similarly significant effects on individuals are made solely by automated means.

We will never sell your personal data to another party.

Where necessary, we enter into data processing agreements with all third parties that process personal data on our behalf, requiring them to process data only on our instructions and to maintain appropriate security measures.

We have deliberately built our infrastructure within the European Union and European Economic Area, so that all personal data remains subject to EU data protection standards throughout its lifecycle. We only keep personal data for as long as necessary.

Because all of our core infrastructure providers operate within the EEA, the vast majority of personal data processed through the Helder Insight platform does not leave the EEA at all. Where any transfer outside the EEA or UK is necessary, for example, when using certain support or communication tools, we ensure appropriate safeguards are in place. For transfers from the EEA we rely on the European Commission's Standard Contractual Clauses or another valid transfer mechanism. For transfers from the UK we rely on the UK International Data Transfer Agreement or equivalent mechanisms. You may request a copy of the relevant safeguards by contacting us.

We only keep personal data for as long as necessary.

We may retain data for longer where we are legally required to do so, where it is necessary to protect our legitimate interests in the context of a legal proceeding or for our administration, audit, dispute handling, and legal compliance.

We take technical and organisational measures to protect personal data against unauthorised access or disclosure. These include access controls, encryption in transit and at rest, multi-factor authentication, role-based permissions, and secure backup procedures. We carry out regular reviews of our security practices and have procedures in place to respond to any suspected data breach.

Where we work with third-party processors, we require them to maintain equivalent standards of security and to assist us with breach response and data subject rights requests.

Depending on your location and the legal basis for processing, you have the right to:

To exercise any of these rights, please contact us at admin@helderinsight.com or click this link Contact our Privacy Officer. We will respond within the timeframes required by applicable law.

Please note that these rights are not absolute. In some circumstances, we may not be able to comply fully with a request — for example, where doing so would conflict with a legal obligation. We will always explain if that is the case.

If we use cookies or similar tracking technologies on our website or platform, we will provide a separate cookie notice explaining what we use, why, and how you can manage your preferences. Where required by law, we will ask for your consent before setting non-essential cookies.

We may update this notice from time to time. If we make material changes, we will let you know through the platform or by email where appropriate. This notice was last updated on 7 July 2026.

If you have any questions, requests, or concerns about this notice or the way we handle personal data, please get in touch:

Helder Insight, Prinsengracht 217B, Amsterdam 1015 DT, KVK 95688560

Privacy Officer: admin@helderinsight.com, or by clicking this link Privacy Officer