Legal

Our Privacy Policy and Terms of Use

How we support GDPR compliance

• Who we collect data about
• The types of data we collect
• How we use your data
• Who we share your data with 
• Your rights to your data
• Your responsibilities as a ‘Data Controller’
• How we keep your data secure
• How we delete data
• Where your data is stored and processed
• How to contact us with privacy queries

About MeQ

MeQ is an online Software-as-a-Service (SAAS) solution for Multi-Person Feedback. MeQ provides tools, guidance and support to help your organization with running successful Multi-Person Feedback (MPF) processes.

MeQ is a trademark of Siete Leadership Consulting, Siete Leadership Consulting is a company registered in South Africa, registration number 2005/123690/23.

For simplicity, when we refer to MeQ we mean both MeQ, the Multi-Person Feedback tool, and Siete Leadership Consulting, the company.

Privacy policy

The privacy and protection of your data is our top priority. This policy explains how we handle your personal data — including data you collect about others using MeQ — and the steps we take to keep it secure.

• We will not share your personal data with any 3rd party for marketing purposes or for any other purpose not detailed in this policy
• You are the “data controller” for personal data you collect in your Multi-Person Feedback projects, and have responsibilities for protecting this data.
• We follow best-practices to keep your personal data secure. Our Security Statement covers this in more detail [link to security statement from here]
• Your data is stored on servers based in data centres across three geographic areas in Germany and South Africa.

Throughout this policy, we use the words “you” and “your” to refer to the organization that you’re working on behalf of. If you’re not working on behalf of an organization, then “you” and “your” refers to you personally.

1. Who we collect data about

• Administrators. Administrators are people that sign up to the MeQ site in order to administer your organization’s account and Multi-Person Feedback projects.
• Participants. Participants are people that you provide data for so that they can support the Multi-Person Feedback process — perhaps by giving or receiving feedback.
• Visitors. Visitors are visitors to our website who have not yet identified themselves as an administrator or participant.

Information Collected from Children. MeQ is not targeted at children under the age of 13. No one under the age of 13 may create an account with MeQ.

As someone reviewing these terms, it is likely that you will be an administrator. It is possible and common for an administrator to also be a participant.

2. The types of data we collect

• Individual participants or users. Name and surname, email address, organization name, year of birth, home language, formal education level, role category, industry, length of service, self feedback on the questions, actions.
• Individual respondents. Name and surname, email address, work relationship, gender, feedback on the MeQ survey questions.
• Account and contact details. This includes contact details and details about your organization and role. These details may be provided by you when you use our services, fill in a form on our website, or interact with our sales or customer support team.
• Account settings. We allow you to configure settings for your account — for example, your communication preferences.
• Project and organization data. MeQ lets you create organization spaces in which you can launch questionnaires and monitor usage.
• Participant data You provide the details of participants or respondents and we collect the responses they provide when you ask them for input.
• Billing details. When you raise an invoice or make a payment, we will store the details you provide such as name, address and VAT number. However, we do not store or process credit card details — these are processed by a secure third party.
• Support and sales conversations. When you send us a question, feedback, or any other type of message we keep a record for future reference. We also keep a record of conversations we have through other channels, such as on the phone.
• Other data you intentionally share. We may collect further data you intentionally share with us — for example, a testimonial.

• Usage data. We collect data about how you interact with MeQ services, for example the pages you visit and actions you take.
• Device data. We record information about the device you are using, including the IP address, web browser and operating system.
• Referral data. When you visit MeQ by clicking on a link outside of MeQ, we collect data about where you came from.
• Information from social media. We may collect publicly available information from social media to expand our understanding of your role and how we can support you.
• Data from other services. If you choose to use a service that integrates with MeQ, then we may collect additional data relating to that service.

3. How we use your data

• Provide our services to you. This includes providing technical support for which our site administrators may need to access your project or participant data.
• Monitor, maintain and optimize our services.
• We monitor your data to see when things are going well, when you might need help, and when we can optimize our services.
• This includes reviewing possible technical or legal issues; data that enables us to tailor our service such as your location or the response rates you are getting to feedback questionnaires; and other data that gives us insights to help us improve our services in future.
• Contact you about your usage of our service or your account.
• We use the contact details you provide to share updates that will affect your account and use of MeQ, and to support you in using your account effectively.
• Contact you for sales and marketing purposes.
• We may contact you for our own marketing purposes, such as to promote a new service we offer. We will only contact you if you have given explicit consent for this type of communication, and you can opt out at any time.
• We may use your contact details to connect on social media platforms such as Twitter and LinkedIn. You can opt out of any request to connect via the platform being used.
• Respond to legal requests. If we receive a legal request for data, we may need to review the data so that we can plan how to respond.

4. Who we share your data with

• Your data with our service providers.
• We use third party services for areas such as infrastructure, payment and support. This helps us to provide a better and more secure service to customers.
• When using third-parties, we ensure that there is an agreement in place that meets our standards and legal requirements for data protection.
• We will notify you by email — providing at least 14 days warning — if we plan to give any new service providers access to your participant data in future.
• Your email address with your organization.
• If your account uses an email address that can be associated with a specific organization, we may share your email address with others from that organization. This is to help your organization identify who in the organization currently has access to our services.
• You can choose to use an alternative email address if you are not happy with your email address being shared.
• Your email address with participants in your projects. If we are contacted directly by a participant in one of your projects, we will typically provide your email address so that they can contact you directly for support.
• Aggregated or anonymized data with third parties. We may share this data to promote or help us improve our services. We will ensure that no individual or organization can be identified from the data shared. We may share anonymized feedback results and demographics including age, gender, geographic location, education and occupation. In this case, third parties will not receive organization, participant or respondent names or e-mail addresses and will not be able to match individuals to feedback results or other data.
• A cookie with our advertising partners.
• Our websites may create a cookie that is stored by your web browser and helps our partners to deliver targeted advertisements to you about our services. This cookie will not include any data that would allow a third party to identify you or your organization.
• You can opt out of targeted advertisements at http://www.youronlinechoices.eu if you're in the European Union, or at http://preferences-mgr.truste.com/ for the rest of the world. You can also clear the cookies from your web browser at any time.
• Your organization name and logo to help us to promote our services. We will not identify any individuals without express consent. If you do not want this data to be used in this way, you can contact our support team to opt out.
• Your data if our business ownership or structure changes. If the business ownership or structure supporting MeQ changes in future, the data may be transferred to any new owner such that we can continue to provide our service.
• Your data if required to by law or legal process. If the law permits, we will only share any data after making commercially reasonable efforts to notify you in advance to give you an opportunity to challenge the requirement to disclose.
• Information you expressly consent to be shared. There are other times that we may ask for your permission to share specific data — for example, to share your contact details with our partners that provide other services such as coaching.

5. Your rights to your data

• As an individual you can view and export your blended feedback report. You can export a PDF report which contains the blended feedback received from your selected respondents. Only an individual user can view their blended feedback. They may choose to share this feedback by exporting the PDF of the blended feedback report and emailing it to a recipient of their choosing.
• As an individual. You can delete respondents from your respondents list up until the point where your report is generated. You can also request from your organization that you be deleted from the MeQ project all together before or after the blended feedback is received.
• As an organization you can export a report on the progress of participants. You can export an Excel spreadsheet containing a list of everyone receiving feedback within a project and their progress or completion status.
• As an organization you can delete participants, projects and organizations. You can delete participants, projects or entire organizations within MeQ at any time. See the section on “How we delete data” below for further information.

• Update your details and settings. You can update your account details and settings. You can update the email address used to login by contacting our support team.
• Update your communication preferences. You can opt out of promotional emails at any time.
• Delete your account. You can request that your entire account is deleted. If you are the only user associated with an organization, then the organization and all projects within it will also be deleted. See the section on “How we delete data” below for further information.

6. Your responsibilities as a “Data Controller”

As an administrator of organizations or projects within MeQ, you have responsibilities as the “Data Controller” for the personal data collected or entered by you.

You should make yourself familiar with the data protection laws that apply to the country or countries that you and your participants are operating in. For example, in Europe you are required to adhere to the General Data Protection Regulation (GDPR).

• Have clear policies that you share with participants covering:
• How their data will be used
• Who their data will be shared with
• When their data will be deleted
• How they can access, delete and rectify data.
• Ensure you have lawful grounds for collecting data about someone receiving feedback. For an employee, this is typically covered by their employment contract. If not covered by any contract, you may need to explicitly ask for the consent of the person receiving feedback.
• Ensure you have lawful grounds for collecting data from the person providing feedback. Again, this can be covered by an existing contract or by explicitly asking for consent.
• Manage your data securely. For example, you should never share your MeQ login details, and should take care with any data you export to your own device.
• Give 3 or more users administrator access to your MeQ organizations and projects. This is to ensure that another user can support your organization in the event of you leaving the organization, getting sick, going on long-term leave, or otherwise being unavailable when access is needed.

If we receive a request for data from a participant in a project you have access to (a “data subject request”), we will provide your contact details to the participant so that the participant can contact you directly. It is your responsibility as the Data Controller to then respond to that request. To support you in responding to these requests, MeQ makes it easy to export user completion progress reports.

7. How we keep your data secure

We have embedded security into every part of our business, from recruitment through to end-user support.

• We will contact you within 24 hours of identifying the breach and confirming that your data is at risk
• We will provide guidance on how to remedy or mitigate any potential damage to your organization as soon as possible, with regular status updates if the breach is ongoing
• We will provide a full written report within 2 weeks that details the root causes behind the breach, the steps we’ve taken to address it, and the steps we’ll take to prevent a similar breach from occurring.

If you would like your security team to be notified in the event of a security breach, you can provide additional email addresses to our support team.

8. How we delete data

• Individual participants will no longer have access to their individual blended feedback reports or any other data linked to their individual user profiles in the MeQ system.
• Organizations will no longer have access to the aggregated data specific to their organization.

Your PII data will initially be ‘soft-deleted’ such that it can be recovered by our system administrators if needed. Your PII data will then be permanently deleted within 30 to 60 days.

Please note that PII data will continue to exist in our backup systems for approximately 12 months after it is deleted from our database.

Individual users can request for their PII data to be deleted at any time.

MeQ may retain de-identified anonymized participant and respondent feedback data indefinitely.

9. Where your data is stored and processed

• The web hosting servers MeQ utilizes are based in data centres across three geographic areas in Germany and South Africa.
• MeQ utilizes the web hosting services provided by Hetzner (Pty) Ltd.
• MeQ and Hetzner have global teams of employees and contractors that may access and process your personal data, including team members outside of the European Economic Area. We have direct contracts and confidentiality agreements in place with all employees and contractors to provide adequate protection for your data in line with our Privacy Policy and Terms of Use.

10. How to contact us with privacy queries

You can contact the MeQ privacy team with any queries you have at support@supermeq.com

Terms of use

You indicate your agreement to these terms by explicitly opting in or by creating an account and using MeQ services.

If you will be using the Services on behalf of an organization, and that organization does not have an existing signed agreement with us, you agree to these Terms for that organization and represent to MeQ that you have the authority to do so. When acting on behalf of an organization, “You” and “Your” will refer to that organization.

If you will be using the Services on behalf of an organization, and that organization does have an existing signed agreement, then that agreement will govern your use of the Services.

2. Your Data

You retain ownership and all Intellectual Property Rights for Your Data. You grant MeQ a worldwide, royalty-free license to use and share your data in the ways detailed in the Privacy Policy.

MeQ’s Privacy Policy details how we will treat your Data, and we agree to adhere to this policy. You agree to MeQ using your data as detailed in the Privacy Policy, and to meet your responsibilities as Data Controller for personal data you collect.

MeQ will follow industry best practices including ISO27001 to secure your Data from unauthorized access. MeQ has taken — and will continue to take — appropriate technical and organizational measures, and regularly tests, assesses and evaluates the effectiveness of these.

This is further detailed in our Privacy Policy security measures are summarized in our Security Statement.

Data is stored on servers based in data centres across three geographic areas in Germany and South Africa.

MeQ has a global team of employees and contractors. Any MeQ team member accessing or processing your data will have a direct contract and/or confidentiality agreement with MeQ to protect your data in line with these Terms.

MeQ may use third-party service providers, including providers outside of the European Economic Area. All service providers have been reviewed to ensure they will also protect your data in line with these Terms, and will be subsequently reviewed on a regular basis to ensure they continue to meet our requirements.

By agreeing to these Terms you agree that we can transfer Personal Data outside of the European Economic Area in this way, without additional advance notification.

MeQ will regularly and frequently back up your Data to one or more geographically-dispersed locations. These backups typically ensure that no more than an hour of Data can be lost even in the event of a disaster.

MeQ will regularly test backups and disaster recovery procedures to ensure that access to systems and Data can be restored in a timely manner.

MeQ will assist you in performing a data protection impact assessment where required to by data protection legislation such as GDPR. This can typically be achieved by reviewing these Terms in our Privacy Policy.

MeQ will notify you immediately if we become aware that You are asking us to perform any activity that would infringe GDPR or other data protection laws.

3. MeQ IP

MeQ retains ownership and all Intellectual Property Rights in the Service, Website and all associated content except Your Data. You may only use MeQ trademarks and brand materials with separate written consent.

4. Your responsibilities and acceptable use

You must use the Services in compliance with, and only as permitted by, applicable law. You are responsible for Your conduct, Data and communications while using the Service. MeQ is not responsible for any actions you take with your Data, including sharing it publicly.

You are responsible for Data associated with MeQ Organizations and Projects you have access to, to the extent that your access to those MeQ Organizations and Projects permits. Please refer to Your responsibilities as a Data Controller within our Privacy Policy

You may grant full or limited access to other users to access your MeQ Organizations and Projects, and may be granted access to MeQ Organizations and Projects by other users. You accept joint responsibility for any MeQ Organization and Project that you share access to with others users, unless you have written agreements with the other parties that clarify who is responsible.

Your access may revoked by other users with sufficient privileges to your MeQ Organization or Project at any time. You can also revoke your own access to a MeQ Organization or Project. After your access is revoked, you remain responsible for any actions taken or Data collected during the period that you had access to, and for any actions or Data collected by users who you have granted access, unless you have written agreements with the other parties to transfer this responsibility.

• Only using unique, strong passwords that are not shared with any other party
• Creating unique accounts for each user that has access
• Removing the access of other users who may pose a security risk. For example, this could include a colleague who is leaving your organization.

You must immediately notify MeQ of any unauthorized use of your password or any other breach of security you become aware of.

5. Your Free Trial

MeQ may offer a Free Trial that grants you limited usage of the Service at no cost.

MeQ offers the Free Trial in good faith and limits the Free Trial offer to one user per organization. You may contact our support team to discuss extending the Free Trial if you have legitimate reasons to do so.

MeQ reserves the right to retract or suspend a Free Trial at any time.

6. Fees and payment

You agree to pay MeQ any Access Fees for any services you purchase or use in accordance with the pricing and payments terms presented to you for that service. Fees paid are non-refundable except where provided in these Terms or required by law.

If you purchase a Subscription for a service, the Subscription will automatically renew at the end of the Subscription Period. We will attempt to notify you ahead of the renewal date to avoid surprises. You can cancel the automatic renewal at any time, in which case the Subscription will continue until the end of the Subscription Period and then terminate.

You are responsible for payment of all taxes and duties relevant to your country. Where MeQ is required by law to collect or pay taxes, these will be invoiced to you. If you are required by law to withhold any taxes, you must provide MeQ with tax receipts or other documentation that clearly supports such payments.

MeQ may change the pricing for its services at any time. Any pricing change will only affect a Subscription at the time of renewal. MeQ will notify you in advance of any price changes, providing reasonable opportunity to cancel a Subscription.

MeQ may offer discounts or preferential pricing to partner organizations, charities, academic institutions and any other customer. MeQ reserves the right to retract any discount or preferential pricing for invoices that have passed their due date without payment, and from future fees that have not yet been invoiced.

7. Termination of service

You can choose to terminate your use of the service at any time. This is achieved by opting out of the Subscription auto-renewal (if applicable) and optionally contacting our support team to request for your account to be deleted.

We will make commercially reasonable efforts to contact you and remedy the situation in advance of suspending or terminating your account.

You will not be entitled to a refund unless we are in breach of these Terms and have failed to remedy it for 30 days after you notified us in writing; or where a refund is required by law. Any refund will be calculated on a pro rata basis.

You will remain liable for any outstanding payments due before or after the termination for services that have already been used.

MeQ may terminate and delete your account — including any associated Data — if no payment or activity has been seen for over 12 months. MeQ will attempt to contact you before deleting any account so that you may login and in doing so prevent the deletion.

Sections 1, 2, 3, 6, 7, 8, 9 and 11 will survive the termination of these Terms.

8. Disclaimers and Limitations of Liability

We do our best to provide an outstanding service to customers, and we work very hard to implement and test that are solutions are of a high quality. However, we know errors can be made, and anyone who uses our Service or information provided by this Website or the MeQ team should do so bearing this in mind. Except as expressly provided in these terms and to the extent permitted by law, the services are provided “as is” and MeQ does not make warranties of any kind, express, implied, or statutory, including those of merchantability, fitness for a particular purpose, and non-infringement or any representations regarding availability, reliability, or accuracy of the services.

To the extent permitted by law, MeQ will not be liable for damages caused by the services or website, unless due solely to our intentional wrongdoing. In no event shall we be liable for lost profits, lost data, interruptions of business, or any special, incidental or consequential damages arising out of the use of or inability to use this website or the services, regardless of whether we have notice of the potential for such loss or damage.

To the extent permitted by law, the aggregate liability of each of MeQ, its affiliates, officers, directors, employees, agents, suppliers, and licensors for any claim or damage arising out of or related to the services or website is limited to your direct damages and shall not exceed the fees you have paid us in the 12 month period immediately preceding the event giving rise to the liability.

To the extent permitted by law, you indemnify MeQ and — if applicable — its subsidiaries, affiliates, officers, directors, employees, agents and suppliers against any and all claims, costs, damage and loss arising from your use of the Service. This indemnification includes your responsibility for any and all liability arising from the violation or infringement of copyrights, trademarks or other proprietary rights and from the use of any libellous or unlawful material contained within your Data.

You warrant and represent that You are acquiring the right to access and use the Services for the purposes of a business and that, to the maximum extent permitted by law, any statutory consumer guarantees or legislation intended to protect non-business consumers in any jurisdiction does not apply to the supply of the Services, the Website or these Terms.

9. Contracting entity

You are contracting with Siete Leadership Consulting. Siete Leadership Consulting is a Siete Leadership Consulting is a company registered in South Africa, registration number 2005/123690/23. MeQ is a trademark of Siete Leadership Consulting.

These Terms shall be governed by and construed in accordance with the law of England and Wales.

Unless any alternative dispute resolution procedure is agreed between the parties, each party agrees to submit to the exclusive jurisdiction of the Courts of South Africa in respect of any dispute which arises out of or under this Terms.

10. Changes and updates

MeQ may update these Terms at any time and will publish any changes to the legal page on the Website. If the change is considered material, at MeQ’s discretion, MeQ will notify you by email or when you next login to your account.

Changes to the Terms will become effective when published on the Website. By continuing to use the Service after the Terms have been become effective, you agree to be bound to the updated terms.

MeQ frequently updates and improves the Services — often multiple times per day or week — and may do so without providing notification. MeQ may also choose to stop providing a Service or a part of it, or to remove content from the Service, at any time.

We will attempt to notify you before any changes that will materially impact you, if practical under the circumstances. You can choose to terminate your use of the Service if unhappy with any change.

11. Other terms

These Terms, together with the MeQ Privacy Policy, constitute the entire agreement and understanding between You and MeQ, and supersede all prior agreements. Any other terms, conditions, or policies from any other agreements, such as purchase orders, written communications, or oral communications, are null and void.

If either party waives any breach of these Terms, this will not constitute a waiver of any other breach. No waiver will be effective unless made in writing.

You may not assign or transfer any rights to any other person without MeQ's prior written consent.

If any provision of these Terms is determined to be invalid, unenforceable or in conflict with the law, that provision will be replaced with a provision which, as far as possible, accomplishes the original purpose of that provision, or else severed if this is not possible. The remainder of these Terms will remain in full effect.

These Terms create no rights for third party beneficiaries.

Any notice given under these Terms by either party to the other must be in writing by email and will be deemed to have been given on transmission. Notices to MeQ must be sent to support@MeQ.com or to any other email address notified by email to You by MeQ. Notices to You will be sent to the email address associated with your MeQ account.