Handling your data
Privacy, care and integrity is part of how we work, not an afterthought
Wellbeing data is personal and we treat it that way. GLWS applies strict data-protection practices, including de-identification, encryption and secure storage, all designed to meet the requirements of applicable privacy regulations and to keep your information confidential at every step.
Who can see individual results
As a highly important question for participating leaders, we are transparent and explicit about it. When someone completes a GLWS survey, their personal results belong to them. Individual reports are confidential to the individual and their GLWS Accredited Coach – they are never shared with an employer at a personal, identifiable level.
Organisations only ever see results in an aggregated, de-identified form through Group reports, and only where a group is large enough to protect individual anonymity. This is deliberate: people share honestly when they trust their answers are private, and that confidentiality is fundamental to how the GLWS works.
Trusted platforms
GLWS data is hosted and managed via Qualtrics and Microsoft 365 — enterprise platforms that hold internationally recognised security certifications, including ISO 27001 and SOC 2.
Secure by design
We enforce multi-factor authentication, device-security policies and restricted, role-based access across our systems. Data is stored in the region of your choice.
Privacy first
Personal and health-related data is encrypted both in transit and at rest, governed by clear data-retention and de-identification policies.
How long we keep your data
We retain personal data only as long as needed to provide the GLWS service and meet legal and contractual obligations. Specific retention periods are set out in our service agreement and Privacy Policy, after which data is de-identified.
Who we share data with
We do not sell or share your data with third parties for marketing. GLWS data is processed only through the trusted platforms named above (Qualtrics and Microsoft 365) as our sub-processors, strictly to deliver the service. Where a program is delivered with an accredited practitioner or partner, data is handled under the same confidentiality standards.
Local accountability
Our team and IT support are based in Australia, operating to robust internal security standards. We may be boutique but we take security seriously.
For all the detail
You can see our full Privacy Policy and Terms & Conditions for the complete detail.