Privacy Policy
This page describes what the platform actually does with personal data. The binding policy text, including the retention period, needs to be supplied and approved before launch.
What we collect
When you register we collect your name, college name, email address and a password, which is stored only as an Argon2id hash and is never recoverable in plain text. When you sit an assessment we record your answers, the times you started and submitted, and the resulting score.
When you submit an enquiry we collect your name, company, email address, phone number, the service category and what you wrote, together with the IP address and browser the submission came from.
How we use it
Registration and assessment data is used to operate the examination system and to report results to the organisation that commissioned the assessment. Enquiry data is used to respond to your request and to route it to the right consultant.
How long we keep it
Sessions expire within 24 hours, and password reset links within 30 minutes. The retention period for candidate records and enquiries is pending a business decision and will be stated here before launch.
Security
Traffic is encrypted in transit. Passwords, session tokens and reset tokens are stored hashed. Access to administrative functions is restricted and every administrative change is recorded in an audit log.
Your rights
You can view and correct your profile from your account. For access to, or deletion of, the rest of your data, contact us and we will respond within one working day.