← ecoglogy.com

Privacy & data protection

Behavioural data is
personal data.

eCogLogy reads how people work. That makes almost everything it holds personal data, and it is why access is designed around the person the data is about rather than around whoever happens to be logged in.

Last reviewed 25 August 2026

GDPR compliantPersonal Data Protection Commission Singapore

The platform is built to the EU General Data Protection Regulationand to Singapore’s Personal Data Protection Act (PDPA), overseen by the Personal Data Protection Commission.

What the platform collects

Only what a module needs to do its job. There is no advertising network, no third-party analytics profile and no sale of personal data to anyone, ever.

From an organisation

  • An organisation code and password, and the people it puts on its roster — name, work email, department and job title.

From a person

  • Assessment responses— Core & Force, Big Five and habit answers in Logix-FX, and the reflections and appraisal entries in Logix-PX.
  • Derived profiles — the Career DNA synthesis, its archetype, strengths, development areas and role suggestions.
  • Operational records — audit submissions in Logix-QX and shift, service and property records in Logix-HX.

Who can see it

This is what the software enforces, not an aspiration. It is worth reading before you take an assessment.

DataThe person it is aboutTheir organisation’s admin
Individual assessment answersYes — their ownNo
Career DNA profile and resultsYes — their ownYes, for their own team
Whether an assessment is finishedYesYes
Team-level patterns and aggregatesNoYes
Anything belonging to another organisationNoNo

Access to every console is granted to an organisation, and a person signs in under the organisation that issued their account. Nobody can create their own way in, and no console shows one organisation’s data to another.

Data protection officers

Two named people are accountable for how this platform handles personal data — one for the European regime, one for Singapore’s. Write to whichever fits your question; if you are not sure, either will route it.

EU GDPR

Erfan

GDPR Compliance Officer

erfan@laykerleesbourne.com

Singapore PDPA

Dexter Wang

Data Protection Officer

dexter@laykerleesbourne.com

Singapore’s PDPA requires an organisation to appoint a Data Protection Officer and to make their contact details available; the GDPR expects a reachable point of contact for data-subject requests. Both are named above rather than hidden behind a form.

Your rights

Under the GDPR and the PDPA you can ask for a copy of the personal data held about you, ask for it to be corrected, ask for it to be deleted, withdraw a consent you previously gave, and object to a particular use of it. Logix-FX also lets you download your own Career DNA and assessment reports as PDFs from inside the app at any time, without asking anyone.

Automated decisions

BIG GEORGE proposes; a person decides. Career DNA profiles, role suggestions, risk flags and rate recommendations are produced by the platform with their reasoning attached, and are reviewed by a human before anything that affects a person’s employment or a published price is acted on. No hiring, appraisal or disciplinary outcome is decided by the system alone.

Security and storage

Credentials are organisation-issued and meet a minimum strength rule. Each console is served from its own origin, so a session in one is not a session in another.

Current build. The consoles presently run against browser-local storage: assessment data stays in the browser it was entered in and is not transmitted to a server. This is a pilot arrangement — when the hosted backend replaces it, this notice will be updated to name the processor, the hosting region and the transfer mechanism before any personal data leaves the device.

Asking us about your data

Write to discover@ecoglogy.com and we will answer. That address reaches the people responsible for data protection at eCogLogy, and it is the right first stop for a request about your own records, a question about anything on this page, or a concern about how a module has handled something. For a formal data-protection request, the two officers named above are the direct route.

If your organisation issued your account, it is the data controller for the records it holds about you. Where a request is properly theirs to answer we will say so and point you to them rather than leave it sitting with us.

Help & support lists the same contacts alongside the practical routes into each console.

Questions about this notice — discover@ecoglogy.com
eCogLogy · a brand of the Layker & Leesbourne Collective