Privacy Notice

This Privacy Notice applies to managersblueprint.com(the “Site”), an interactive companion to the book The New Manager's Blueprint by Hazim Macky. The Site is operated by Nosh Consultancy(“we”, “us”, “our”).

We are committed to protecting your personal information and handling it with care, transparency, and respect for your privacy.

We may collect the following categories of information:

• Email address — when you sign in, save results, or submit a contact or feedback form.
• Assessment responses — your answers to the Management Style Assessment and the derived results (your primary styles per dimension).
• Launch Guide progress — which tasks you have marked as complete in the 90-Day Launch Guide.
• Journal entries — content you write in the Manager's Journal, including reflections, questions, and decisions.
• Inquiry submissions — name, company, role, and message submitted via the Work With Hazim form.
• Feedback submissions — name (optional), email (optional), feedback type, and message submitted via the Feedback form.
• Usage data — pages visited, interactions, and approximate session information collected automatically by our analytics tools.
• Technical data — browser type, device type, IP address, and referral source, collected automatically.

We collect information in three ways:

Directly from you — when you create an account, complete the assessment, use the Launch Guide or Journal, or submit an inquiry or feedback form.

Automatically — when you visit and use the Site, we automatically collect usage and technical data via analytics tools (see Section 10).

From third-party tools — our service providers may collect certain data on our behalf as described below.

• To provide and operate the Site and its tools (assessment, Launch Guide, Journal).
• To save and restore your progress across sessions when you have an account.
• To respond to inquiries and feedback submitted via our contact forms.
• To improve the Site, understand how tools are used, and prioritise development.
• To maintain security and prevent abuse.
• To send transactional authentication emails (magic link sign-in).
• To comply with our legal obligations.

Where data protection law requires us to identify a legal basis, we rely on the following:

• Contract performance — where processing is necessary to provide the service you have requested (e.g. saving your assessment results to your account).
• Legitimate interests — for analytics, product improvement, and security, where our interests are not overridden by your rights.
• Consent — where you have explicitly agreed, such as optional data collection for product improvement purposes. You may withdraw consent at any time.
• Legal obligation — where we are required to process information by law.

We do not sell your personal data. We share information only with the following service providers, each bound by appropriate data processing terms:

• Supabase (supabase.com) — authentication, database, and storage. Your account data, assessment results, launch guide progress, and journal entries are stored in Supabase.
• Vercel (vercel.com) — website hosting and edge network. Vercel may process request data in the course of serving the Site.
• PostHog (posthog.com) — product analytics. We use PostHog to understand how the Site is used. Data collected is anonymised where possible and is not used for advertising.
• HubSpot (hubspot.com) — CRM and contact management. Inquiry and feedback form submissions are forwarded to HubSpot to enable us to respond.

We may disclose information where required by law, court order, or regulatory authority.

Our service providers operate infrastructure in the United States and other jurisdictions. Where personal data is transferred outside your country of residence, we take steps to ensure adequate protection is in place — including reliance on approved standard contractual clauses or equivalent mechanisms under applicable data protection law.

• Account data (email, auth tokens) — retained while your account is active. You may request deletion at any time.
• Assessment results — retained while your account is active, or for the session duration if you are not signed in.
• Launch Guide progress and Journal entries — retained while your account is active. Unsigned-in data is stored locally in your browser only.
• Contact and feedback form submissions — retained as needed to respond and for legitimate record-keeping, typically no longer than 2 years.
• Analytics data — subject to PostHog and Vercel's own retention policies.

When an account is deleted, associated data is removed from our active systems within a reasonable period, subject to legal obligations.

Depending on your location and applicable law, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — request erasure of your personal data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Restriction — ask us to limit how we process your data in certain circumstances.
• Withdrawal of consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at the address in Section 12. We will respond within the timeframe required by applicable law.

The Site uses the following types of tracking technologies:

• Authentication cookies — set by Supabase to maintain your signed-in session. These are strictly necessary.
• Analytics — PostHog collects anonymised usage data (pages visited, events triggered) to help us understand how the Site is used. We have disabled session recording and advertising features.
• Infrastructure analytics — Vercel Analytics collects basic traffic and performance data at the infrastructure level.

We do not currently use advertising cookies or share data with advertising networks. If this changes, this notice will be updated.

The Site is intended for adults. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

For privacy-related questions, requests, or complaints, please get in touch using our feedback form. Select “Privacy or data request” as the feedback type and describe your request.

We may update this Privacy Notice from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this notice periodically.

Continued use of the Site after changes are posted constitutes acceptance of the updated notice.