Who we are
Test Candidates is operated by Neuroworx Ltd, registered in England and Wales under company number 14612373, with its registered office at 22 Charterhouse Square, London, England, EC1M 6DX. For privacy questions or requests, contact support@testcandidates.com.
This notice explains how information is used when you visit our website, manage an employer account or complete an assessment. It covers personal information under the UK GDPR and the Data Protection Act 2018, and other applicable data protection law.
Employers and candidates have different relationships with us
For our website, employer account administration, billing and support, we determine the purposes of processing and act as a controller.
When an employer or recruiter invites you to an assessment, that organisation decides why you are assessed and how the results are used. It is the controller of that recruitment information. Test Candidates processes candidate details, answers and results on its instructions to provide the assessment service.
The inviting organisation’s privacy notice should explain its recruitment purposes, lawful basis, who receives results and how long it keeps them. Ask that organisation about recruitment decisions or requests concerning your assessment information. You can also contact us and we will help direct your request appropriately.
Information we collect
- Employer accounts: names, work email addresses, organisation details, account access information and settings supplied by you or an authorised colleague.
- Assessments: candidate names and contact details supplied by the organiser or candidate, invitations, selected tests, answers, scores, completion status, timing and reports.
- Assessment observations: browser-reported mouse exits and changes to full-screen mode where available. These provide context to the organiser and are not proof of misconduct. The current assessment player does not capture camera images, video or audio.
- Billing: billing contacts and addresses, currency, candidate-result usage, invoices, payment status and payment references. Stripe handles full card details. We receive limited information such as the card brand and last digits where needed to display and manage billing.
- Support and feedback: messages and information you choose to send us when asking for help.
- Technical and website use: connection and device information, including IP address and browser details, security and error information, and website measurement data according to your cookie choices.
Please do not send unnecessary health or other sensitive information to support. If you need a recruitment adjustment, contact the inviting organisation so it can explain what information it needs and how it will handle it.
Why we use information
Where we act as controller, our purposes and lawful bases are:
| Purpose | Information used | Lawful basis |
|---|---|---|
| Set up and administer an account and provide support | Account details, settings and correspondence | Contract where you are the contracting customer; otherwise our legitimate interests in serving the organisation you represent |
| Record usage, collect payments and resolve billing queries | Billing details, usage records and payment references | Contract where applicable; legitimate interests in administering business accounts; legal obligations for required financial records |
| Protect accounts, investigate faults and prevent misuse | Access, device, security and diagnostic information | Legitimate interests in operating a reliable and secure service |
| Answer enquiries and improve the service using feedback | Contact details and messages | Legitimate interests in responding and improving our service |
| Use optional analytics and advertising storage | Website identifiers and interaction data | Consent, managed through Cookie settings |
| Send marketing communications where applicable | Business contact details and communication preferences | Consent where required; otherwise legitimate interests in relevant business communications, with an opportunity to object |
For recruitment assessment information processed on an employer’s instructions, the employer determines its lawful basis. Completing an assessment does not by itself mean you consent to every use of your information by that employer.
You can object to processing based on legitimate interests. You can unsubscribe from marketing or contact us to stop it. Essential account, invitation, security and billing messages are separate from marketing.
Who receives information
Assessment details and results are made available to authorised users of the inviting organisation. It is responsible for any further sharing or use in its recruitment process.
We use service providers for hosting and storage, delivering service emails, managing support, payments and website measurement. They receive information relevant to their work. Stripe processes payments and billing information. Google services are used for website tagging and, according to the applicable settings and your choices, analytics and advertising. Microsoft Advertising (Bing) tagging is also present in our website tag configuration. Providers may have their own controller responsibilities for some processing, such as payment fraud prevention.
We may also disclose information where legally required, to professional advisers subject to appropriate confidentiality, or as necessary for a business transfer with appropriate safeguards. Contact us for details of the providers relevant to your organisation and its data processing arrangements.
International processing
Service providers may process information outside the UK. Where a restricted international transfer is involved, applicable data protection law requires an appropriate transfer mechanism, such as an adequacy decision or approved contractual safeguards, and any necessary assessment and additional measures. Contact us for details of the locations and safeguards applying to your information.
How long information is kept
We recommend that employers delete unsuccessful candidates’ recruitment data six months after the recruitment decision, unless a documented legal or recruitment need justifies a different period. Successful candidates’ information should move into the employer’s appropriate employment retention schedule. This is guidance for organisers, not an automatic deletion setting in Test Candidates.
Candidate records, answers, results and assessment observations are held to provide the organiser’s assessment service, subject to its instructions and applicable legal requirements. Stopping paid unlocking or cancelling a billing arrangement does not automatically delete assessment records. Ask the organiser about its recruitment retention period; contact us for help with a deletion or access request.
For information we control, retention depends on the purpose: administering the account, resolving support enquiries, meeting accounting and legal obligations, preventing misuse and handling disputes. We consider the type and sensitivity of the information, whether it is still needed, and any applicable legal retention requirements. Contact us for the retention period relevant to a particular record.
Cookie-choice storage and representative website technologies are described below. Browser storage lifetimes are different from the retention of information already received by a service provider.
Security
We use access controls and other technical and organisational measures to protect information. Access should be limited to authorised people who need it for their work. Protect your password and assessment invitation links, and notify support if you suspect unauthorised access. No internet service can promise that every security risk is eliminated.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of personal information, and object to certain processing. You may withdraw consent at any time without affecting processing lawfully carried out before withdrawal. Withdrawal does not automatically change the lawful basis for an unrelated purpose.
Send requests about information we control to support@testcandidates.com. We may need information to verify your identity and locate the relevant records. For employer-controlled assessment information, contact the inviting organisation; if you contact us, we will assist it with your request as appropriate.
You can complain to the Information Commissioner’s Office or your relevant local supervisory authority. You do not have to contact us first, although we welcome the opportunity to resolve a concern.
Assessment results and decisions
Tests are scored to produce assessment results for the organiser. Test Candidates does not make the employer’s hiring decision. Employers should interpret results with human review and other relevant evidence. Ask the employer how it uses scores, and whether any of its own decision-making is automated.
Cookies and similar browser storage
Cookie settings lets you accept all optional categories, reject them all, or choose analytics and advertising separately. Essential storage remains enabled for functions such as authentication, assessment access, security, payment handling and remembering your choice. Local storage is covered by these choices where used for the same optional purposes as cookies.
The website sets Google consent signals for analytics and advertising storage to denied unless you have a valid saved choice allowing them. Google Tag Manager can load independently of that choice; a denied storage setting is not a promise that no network request or cookieless measurement occurs. The exact tags and technologies used depend on the page, enabled services and your choices.
| Technology or category | Purpose and provider | Duration or control |
|---|---|---|
picked-consent local storage | Test Candidates stores your analytics and advertising choices and the time you saved them | Used for up to 12 months, after which the website asks again; clearing browser storage also removes the choice |
| Account and assessment access storage | Test Candidates remembers authentication and assessment access information needed to provide the requested service | Depends on the account or assessment session; clearing browser storage may sign you out or interrupt access |
Google Analytics cookies, such as _ga and _ga_* | Optional website audience and usage measurement | Google’s default cookie lifetime is two years, subject to configuration and browser limits; governed by the Analytics choice |
Google advertising cookies, such as _gcl_au | Optional advertising measurement and personalisation | Provider and configuration dependent; governed by the Advertising choice |
Microsoft Advertising storage, such as _uetsid, _uetvid and _uetmsclkid | Advertising measurement and attribution through Microsoft UET | Provider and configuration dependent; governed by advertising consent settings |
| Stripe payment technologies | Payment processing and fraud prevention when you use payment features | Governed by the relevant payment function and Stripe’s cookie information |
The cookies present on your device depend on the features you use, your choices and your browser. See Google’s cookie information , Microsoft’s UET information and Stripe’s cookie information for their technologies and lifetimes.
Open Cookie settings in the footer to change your choices at any time. Saving a new choice updates the website’s consent settings. It does not erase information already collected or necessarily remove every existing third-party cookie. Your browser also lets you inspect and clear cookies and local storage; blocking essential storage may prevent sign-in, assessments or payments from working.
Changes to this notice
We will update this notice when the service or our processing changes. Material changes will be communicated where required. Contact support if you need an earlier version or have a question about how the notice applies to you.