Rhysis Supply Chain Value Leakage Scorecard Privacy Notice

1. Scope of This Notice

This Privacy Notice applies to information collected through the Supply Chain Value Leakage Scorecard and its related contact forms, results pages, email communications, and administrative systems.

The Scorecard is intended for business professionals and organizations. It is not intended for personal, household, medical, employment, credit, insurance, or consumer financial decision-making.

2. Information We Collect

Business and Contact Information

We may collect:

• First and last name
• Business email address
• Company name
• Job title
• Industry
• Company size
• Business telephone number
• Information included in a contact request or message

Scorecard Information

We collect the answers you provide to the Scorecard, including:

• Your Yes and No responses
• Category scores
• Overall score
• Exposure classification
• Potential leakage indicators
• Date of completion
• Scorecard version
• Results generated from your responses

Please do not submit trade secrets, confidential financial records, personal information about employees or customers, health information, account credentials, payment information, Social Security numbers, or other regulated or highly sensitive information.

Technical and Usage Information

We may automatically collect limited technical information, including:

• Internet Protocol address
• Browser and device type
• Operating system
• Referring page
• Pages viewed
• Date and time of access
• Application errors
• General usage and performance information
• UTM source, medium, and campaign information

Communications

If you start a conversation with Rhysis, request assistance, or reply to an email, we may collect the content of that communication and any information you choose to provide.

3. How We Collect Information

We collect information:

• Directly from you when you complete the Scorecard or contact form
• Automatically through the application and necessary technologies
• Through website analytics, if enabled
• From service providers supporting the application
• From Rhysis’s customer relationship management and email systems

4. How We Use Information

We may use collected information to:

• Operate and maintain the Scorecard
• Calculate and display your results
• Email your results to you
• Generate a downloadable results document
• Respond to questions and conversation requests
• Contact you regarding your Scorecard results
• Schedule or conduct a Value Leakage Review
• Create or update a business contact or lead in Pipedrive
• Maintain records of business communications
• Export authorized business records to Excel
• Understand how visitors find and use the application
• Improve the application and user experience
• Diagnose technical problems
• Prevent fraud, spam, misuse, and security incidents
• Comply with legal obligations
• Protect the rights, property, and safety of Rhysis, its users, and others

We will not use Scorecard responses to make employment, credit, insurance, housing, healthcare, or other decisions that produce legal or similarly significant effects concerning an individual.

5. Automated Scorecard Results

The application uses predetermined scoring rules to calculate your Scorecard results. Each Yes response receives one point, and each No response receives zero points.

The resulting score and exposure classification:

• Are based solely on the answers submitted
• Identify potential areas for further investigation
• Do not calculate actual financial losses
• Do not establish how much value is available
• Do not constitute an audit, valuation, guarantee, or professional opinion
• Do not compare your organization with an empirical industry benchmark
• Do not make a legally significant decision about you or your organization

6. How We Disclose Information

We may disclose information to service providers that help us operate the application and respond to requests, including:

• Our application hosting and backend provider
• Pipedrive, our customer relationship management provider
• Our email-delivery provider
• Website analytics providers, if enabled
• Spam-prevention and security providers
• Integration providers such as Make or Zapier, if used
• Technology, hosting, maintenance, and professional service providers

These providers may process information only as necessary to perform services for Rhysis and subject to their applicable agreements and privacy obligations.

We may also disclose information:

• When required by law, subpoena, court order, or legal process
• To investigate fraud, misuse, or security threats
• To protect the rights, property, or safety of Rhysis or others
• In connection with a merger, acquisition, financing, reorganization, or sale of business assets
• With your direction or consent

7. Sale and Targeted Advertising

Rhysis does not sell personal information.

Rhysis does not disclose personal information for cross-context behavioral advertising or targeted advertising through this application.

If these practices change, we will update this Privacy Notice and provide any legally required choices before using information for those purposes.

8. Pipedrive, Email and Administrative Exports

When you submit the Scorecard or a conversation request:

• Your information may be saved in the application’s backend.
• A business contact, organization, lead, note, or follow-up activity may be created in Pipedrive.
• A notification may be sent to info@rhysislogic.com.
• A results email may be sent to the business email address you provide.
• Authorized Rhysis personnel may view or export information into an Excel workbook for business follow-up, reporting, and analysis.

Access to administrative records and exports is limited to authorized personnel and service providers with a legitimate business need.

9. Cookies and Similar Technologies

The application may use necessary cookies or local browser storage to:

• Maintain application functionality
• Preserve Scorecard answers during a session
• Prevent duplicate submissions
• Remember privacy preferences
• Support security and fraud prevention

If analytics cookies are enabled, they may be used to understand application traffic and engagement. Where required, nonessential analytics will be activated only after consent.

The application does not currently use advertising cookies.

You can adjust browser settings to reject or delete cookies, but doing so may prevent certain application features from working properly.

10. Data Retention

We retain information only for as long as reasonably necessary to:

• Provide Scorecard results
• Respond to conversation requests
• Manage prospective and existing business relationships
• Maintain accurate business records
• Resolve disputes
• Enforce agreements
• Meet legal, tax, security, and regulatory requirements

Completed Scorecard submissions and associated lead records will generally be retained for [24 OR 36 MONTHS] following the most recent interaction unless a longer period is legally required or reasonably necessary.

We may retain deidentified or aggregated information that can no longer reasonably be connected to an identifiable person.

11. Your Privacy Choices and Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Confirm whether we process your personal information
• Request access to your personal information
• Correct inaccurate information
• Request deletion of information
• Obtain a portable copy of information
• Withdraw consent where processing is based on consent
• Opt out of marketing communications
• Opt out of targeted advertising, sale, or certain profiling
• Appeal a decision concerning a privacy request
• File a complaint with an appropriate privacy regulator

To submit a request, email:

info@rhysislogic.com

Use the subject line: Privacy Request

Please include your name, business email address, company, and the nature of your request. We may need to verify your identity before completing the request.

You may unsubscribe from promotional emails by using the unsubscribe link included in the message. Unsubscribing from marketing will not prevent us from sending requested Scorecard results or responding to a direct inquiry.

We will not discriminate against you for exercising an applicable privacy right.

12. Information Security

Rhysis uses reasonable administrative, technical, and organizational safeguards designed to protect collected information against unauthorized access, disclosure, alteration, loss, or misuse.

However, no website, application, transmission method, or storage system is completely secure. We cannot guarantee absolute security.

13. Children’s Privacy

The Scorecard is intended for business professionals and is not directed to children under 18.

We do not knowingly collect personal information from children. If we learn that information has been submitted by a child, we will take reasonable steps to delete it.

14. International Visitors

Rhysis and its service providers may process and store information in the United States and other jurisdictions where they operate.

If you access the application from outside the United States, your information may be transferred to a country with privacy laws different from those in your location. Where required, we will use appropriate safeguards for international transfers.

15. Third-Party Websites

The application may contain links to third-party websites, scheduling services, or other resources. Rhysis does not control the privacy practices of those third parties. Review their privacy notices before providing information.

16. Changes to This Privacy Notice

We may update this Privacy Notice to reflect changes in the application, our service providers, our information practices, or applicable law.

The revised notice will be posted with a new effective date. Material changes will be communicated where required by law.

17. Contact Rhysis

Questions, concerns, or privacy requests may be directed to:

Rhysis Logic Solutions

Email: info@rhysislogic.com

Website: https://rhysislogic.com