Privacy policy

Effective date: February 2026 Last updated: May 3, 2026

1. What we collect

Designate collects information to deliver our services and improve your experience. Here's what we gather:

From the Revenue Assessment Suite

  • Assessment responses (your answers to dimension questions)
  • Dimension scores computed from your responses
  • Company metadata you provide (industry, company size)
  • Behavioral signals (assessment completion time, page interactions)

From contact forms and meeting bookings

  • Name and email address
  • Company information
  • Message content (when you reach out to us)

From website interactions (Cloudflare Web Analytics)

  • Page views and referring source (how you found us)
  • Country-level location (no IP addresses stored)
  • Browser and device type (anonymized, no fingerprinting)

No cookies, no tracking pixels. We use Cloudflare Web Analytics, which collects aggregate data without cookies, without personal data, and without tracking you across sites.

What we don't collect: We don't intentionally collect sensitive personal information like social security numbers, payment card data, or health information. Never enter such data on our site.

2. How we use it

We use your information to provide services, communicate with you, and improve Designate:

Personalized recommendations

  • Deliver your assessment results with dimension scores and tier ratings
  • Generate workspace recommendations based on your assessment profile
  • Follow up with relevant insights about revenue operations and system design

Aggregated benchmark computation

  • Compute peer benchmarks so participants can see how their scores compare to others in their segment
  • Identify industry-level trends and patterns across revenue operations maturity
  • Improve assessment instruments based on aggregate response patterns

Industry research publications

  • Publish anonymized, aggregated findings about revenue operations maturity
  • Produce benchmark reports segmented by industry, company size, or engagement type

Communications & relationship management

  • Store your information in our CRM to manage communications
  • Send you information related to your assessment results
  • Share occasional insights and updates relevant to revenue operations
  • Respond to your messages and inquiries

We do not: Sell individual data. Share your email with third parties (except as described in this policy). Disclose any individual or company-identifiable information in any aggregated output.

3. Commercial use of aggregated data

Anonymized, aggregated assessment data may be included in benchmark reports, industry research, and commercial data products. No individual response, company name, or personally identifiable information is disclosed in any aggregated output.

What this means

  • Your individual answers are never shared, sold, or distributed
  • Aggregated data (e.g., "the median score across 200 software companies in the 50-200 employee range") may appear in published reports or data products
  • No company name, individual name, or email address is ever included in aggregated outputs
  • Segments with fewer than 10 respondents are excluded from published benchmarks to prevent inference

Opt out

You can request that your individual data be excluded from benchmark computation at any time by contacting privacy@designatesolutions.com. Your assessment results and personalized recommendations remain unaffected.

4. Anonymization standard

Data is anonymized such that no reasonably available means can re-identify individual respondents or companies within aggregated outputs. Specifically:

  • Individual responses are never included in any external-facing dataset
  • Aggregated outputs use statistical measures (medians, percentiles) computed across segments, not individual records
  • Minimum segment sizes (currently 10 respondents) are enforced before any segment-level data is published or distributed
  • Company metadata (industry, size range) is used only for segmentation, never for identification

5. Third-party services

We use trusted third-party platforms to deliver our services. These partners process data on our behalf under confidential agreements:

HubSpot

Our Customer Relationship Management (CRM) system. Stores your contact information, manages email communications, supports meeting scheduling, and provides analytics on website behavior.

Cloudflare (Hosting, Analytics & Data Storage)

Hosts and serves designatesolutions.com via Cloudflare Workers. Assessment data is stored in Cloudflare D1 databases. Cloudflare Web Analytics provides privacy-first site metrics: no cookies, no personal data, no cross-site tracking. Cloudflare may process minimal technical data (request logs) as part of standard hosting operations.

LinkedIn (Content Analytics)

We use the LinkedIn API to retrieve performance analytics for content published by Designate Solutions on LinkedIn. This includes metrics such as impressions, engagement counts, and aggregated audience demographics for our own posts.

  • We access only our own member post analytics. We do not access, store, or process any other LinkedIn member's personal data.
  • Aggregated audience demographics (seniority distribution, industry percentages) are stored as statistical summaries, not individual viewer records.
  • OAuth tokens used to authenticate with the LinkedIn API are encrypted at rest via Cloudflare Secrets and are never exposed to client-side code.
  • LinkedIn analytics data is retained for longitudinal content performance analysis and is not shared with third parties.
  • We comply with LinkedIn's API Terms of Use, including data retention and usage restrictions.

LinkedIn (Outbound Sales Prospecting)

Designate Solutions processes publicly available LinkedIn profile data (name and profile URL) as part of our B2B outbound sales workflow. This processing enables us to send personalized connection requests to professionals who match our ideal customer profile.

  • Legal basis: Legitimate interests (GDPR Article 6(1)(f)). B2B sales outreach to professionals who have published their profile publicly on LinkedIn is a recognized legitimate interest under GDPR Recital 47. We have conducted a Legitimate Interests Assessment (DPIA-2026-05-03-001) confirming this basis.
  • Data processed: Full name and public LinkedIn profile URL only. No private contact information, inbox messages, or data not publicly displayed on LinkedIn is collected.
  • Volume: Small-scale (fewer than 500 profiles at any time). Processed only by our internal systems and the operator — no third-party enrichment services.
  • Retention: Active prospects are retained up to 90 days from initial contact. Aggregate response patterns (no identifiers) are retained for ongoing ICP refinement.
  • Right to object: If you are a LinkedIn member who has received outreach from us and would like to be removed from our outreach workflow, email privacy@designatesolutions.com. We will remove you within 7 days and not contact you again.

Each of these providers has its own privacy policy. We recommend reviewing them if you want more detail on how they handle data.

6. Email communications

When you share your email with us through an assessment, contact form, or meeting booking, you may receive emails related to:

  • Your assessment results and personalized recommendations
  • Occasional insights on revenue operations, system design, and GTM alignment
  • Relevant updates from Designate

Unsubscribe

Every email we send includes an unsubscribe link. You can opt out of communications at any time. We'll respect your preference immediately.

Email sharing

We do not sell, trade, or share your email address with third parties. Your email is used only for the purposes outlined above and to manage your relationship with Designate.

7. Cookies

Our analytics (Cloudflare Web Analytics) do not use cookies. No cookie banner is required for our analytics.

HubSpot cookies

HubSpot may set cookies for form submissions, meeting bookings, and chat functionality. These are functional cookies tied to services you initiate (submitting a form, booking a meeting). HubSpot's tracking code loads on all pages to support these features.

Managing cookies

You control cookie settings in your browser. Disabling HubSpot cookies will not affect site navigation or content, though form and meeting booking features may be limited.

8. Data security

Your data is stored on Cloudflare infrastructure. All data is encrypted in transit via TLS. Access to assessment data, benchmark databases, and user records is restricted to authorized systems only.

We do not store passwords. Authentication uses secure token-based sessions. Database access is limited to application-level service accounts with scoped permissions.

9. Data retention

How long we keep your data: We retain your information as long as our business relationship is active or as needed to provide services. This typically means:

  • Contact information is retained for as long as you're a customer or prospective customer
  • Assessment results are kept for historical reference, personalized recommendations, and aggregated benchmark computation
  • Engagement records are maintained for follow-up and service delivery

Deletion requests

You can request deletion of your data at any time by contacting privacy@designatesolutions.com. We will honor reasonable deletion requests, though we may retain minimal information to comply with legal obligations or prevent accidental re-contact.

10. Your rights

You have control over your information:

Access

You can request a copy of the data we have on file for you.

Correction

If your information is inaccurate, you can request we correct it.

Deletion

You can request deletion of your individual data at any time. This includes removal from assessment records and benchmark computation.

Opt out of commercial aggregation

You can request that your individual data be excluded from benchmark computation and commercial data products. Your assessment results and personalized recommendations remain available to you.

Unsubscribe

You can opt out of email communications using the unsubscribe link in any message, or by contacting us directly.

How to exercise your rights

To make any of these requests, contact privacy@designatesolutions.com with clear details of what you're requesting. We'll respond within 10 business days.

11. Policy updates

We may update this privacy policy as our services evolve or regulations change. When we make material changes, we'll post the updated policy on this page with a new "Last Updated" date.

Material changes will be communicated to you via email if they affect how we handle your data. Continued use of our site after updates means you accept the changes.

12. Contact us

If you have questions about this privacy policy or how we handle your data, reach out:

We take data privacy seriously and will address your concerns promptly.

This privacy policy reflects our commitment to transparency. Designate operates under the principle that when systems reflect reality, people perform better without trying harder. That principle extends to how we handle and respect your information.