Privacy Policy

Who we are

Test Candidates is operated by Neuroworx Ltd, registered in England and Wales under company number 14612373, with its registered office at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF. For privacy questions or requests, contact support@testcandidates.com.

This notice explains how information is used when you visit our website, manage an employer account or complete an assessment. It covers personal information under the UK GDPR and the Data Protection Act 2018, and other applicable data protection law.

Employers and candidates have different relationships with us

For our website, employer account administration, billing and support, we determine the purposes of processing and act as a controller.

When an employer or recruiter invites you to an assessment, that organisation decides why you are assessed and how the results are used. It is the controller of that recruitment information. Test Candidates processes candidate details, answers and results on its instructions to provide the assessment service.

If an organiser switches on camera photos, the organiser is the controller of the photos and decides whether to use them. We process them on its instructions. We ask organisers to rely on their legitimate interest in making sure the person taking the test is the candidate and is working without help, rather than on your consent, because candidates may not feel free to refuse an employer. You can object to this processing by declining camera access before the test, or by contacting the organiser.

The inviting organisation’s privacy notice should explain its recruitment purposes, lawful basis, who receives results and how long it keeps them. Ask that organisation about recruitment decisions or requests concerning your assessment information. You can also contact us and we will help direct your request appropriately.

Information we collect

• Employer accounts: names, work email addresses, organisation details, account access information and settings supplied by you or an authorised colleague.
• Assessments: candidate names and contact details supplied by the organiser or candidate, invitations, selected tests, answers, scores, completion status, timing and reports.
• Assessment observations: while you take a test, your browser reports events that help the organiser judge whether a result was achieved independently. Depending on the organiser's settings and your device, these include: the mouse leaving the test window; the test tab being hidden; leaving full-screen mode; leaving the test window and for how long; the player being reopened; attempts to copy, cut or paste; the Print Screen key and other screenshot keys where the browser can detect them; changes of IP address; the type of device and browser; and signs that answers were given by automated software rather than a person, such as browser automation and clicks or key presses that the browser marks as not made by a person. We also check recorded IP addresses against a list of cloud and hosting networks, using a database held on our own servers. Observations are shown to the organiser as context. They are not proof of misconduct, and some events cannot be detected on every device. We do not record video or audio.
• Camera photos: only if the organiser switches this on for an assessment. Before your first test we explain what is taken and ask you to allow or decline camera access. If you allow it, we take one photo every 90 seconds while each test is running. Photos are small, still images; we do not record video or audio. If you decline, you can still take the test, no photos are taken, and the organiser sees that the camera was declined. We do not use face recognition or any automated analysis of the photos. They are only stored and shown to the organiser.
• Billing: billing contacts and addresses, currency, candidate-result usage, invoices, payment status and payment references. Stripe handles full card details. We receive limited information such as the card brand and last digits where needed to display and manage billing.
• Support and feedback: messages and information you choose to send us when asking for help.
• Technical and website use: connection and device information, including IP address and browser details, security and error information, and website measurement data according to your cookie choices.

Please do not send unnecessary health or other sensitive information to support. If you need a recruitment adjustment, contact the inviting organisation so it can explain what information it needs and how it will handle it.

Why we use information

Where we act as controller, our purposes and lawful bases are:

For recruitment assessment information processed on an employer’s instructions, the employer determines its lawful basis. Completing an assessment does not by itself mean you consent to every use of your information by that employer.

You can object to processing based on legitimate interests. You can unsubscribe from marketing or contact us to stop it. Essential account, invitation, security and billing messages are separate from marketing.

Who receives information

Assessment details and results are made available to authorised users of the inviting organisation. It is responsible for any further sharing or use in its recruitment process.

Assessment observations are shown to the same authorised users, alongside your results. We do not use observations to make any decision about you, and we do not share them with anyone else except our service providers as described below. Camera photos are stored privately with our hosting provider and can be viewed only by signed-in users of the inviting organisation, through links that expire after a few minutes. They are never made public.

We use service providers for hosting and storage, delivering service emails, managing support, payments and website measurement. They receive information relevant to their work. Stripe processes payments and billing information. Google services are used for website tagging and, according to the applicable settings and your choices, analytics and advertising. Microsoft Advertising (Bing) tagging is also present in our website tag configuration. Providers may have their own controller responsibilities for some processing, such as payment fraud prevention.

We may also disclose information where legally required, to professional advisers subject to appropriate confidentiality, or as necessary for a business transfer with appropriate safeguards. Contact us for details of the providers relevant to your organisation and its data processing arrangements.

International processing

Service providers may process information outside the UK. Where a restricted international transfer is involved, applicable data protection law requires an appropriate transfer mechanism, such as an adequacy decision or approved contractual safeguards, and any necessary assessment and additional measures. Contact us for details of the locations and safeguards applying to your information. Camera photos are stored with Amazon Web Services in the United States.

How long information is kept

We recommend that employers delete unsuccessful candidates’ recruitment data six months after the recruitment decision, unless a documented legal or recruitment need justifies a different period. Successful candidates’ information should move into the employer’s appropriate employment retention schedule. This is guidance for organisers, not an automatic deletion setting in Test Candidates.

Candidate records, answers, results and assessment observations are held to provide the organiser’s assessment service, subject to its instructions and applicable legal requirements. Observations are kept with the test result they relate to and are deleted when that result is deleted. Camera photos are deleted automatically six months after they are taken, or earlier if the organiser deletes your assessment information. Stopping paid unlocking or cancelling a billing arrangement does not automatically delete assessment records. Ask the organiser about its recruitment retention period; contact us for help with a deletion or access request.

For information we control, retention depends on the purpose: administering the account, resolving support enquiries, meeting accounting and legal obligations, preventing misuse and handling disputes. We consider the type and sensitivity of the information, whether it is still needed, and any applicable legal retention requirements. Contact us for the retention period relevant to a particular record.

Cookie-choice storage and representative website technologies are described below. Browser storage lifetimes are different from the retention of information already received by a service provider.

Security

We use access controls and other technical and organisational measures to protect information. Access should be limited to authorised people who need it for their work. Protect your password and assessment invitation links, and notify support if you suspect unauthorised access. No internet service can promise that every security risk is eliminated.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of personal information, and object to certain processing. You may withdraw consent at any time without affecting processing lawfully carried out before withdrawal. Withdrawal does not automatically change the lawful basis for an unrelated purpose.

Send requests about information we control to support@testcandidates.com. We may need information to verify your identity and locate the relevant records. For employer-controlled assessment information, contact the inviting organisation; if you contact us, we will assist it with your request as appropriate.

You can complain to the Information Commissioner’s Office or your relevant local supervisory authority. You do not have to contact us first, although we welcome the opportunity to resolve a concern.

Assessment results and decisions

Tests are scored to produce assessment results for the organiser. Test Candidates does not make the employer’s hiring decision. Employers should interpret results with human review and other relevant evidence. Ask the employer how it uses scores, and whether any of its own decision-making is automated. Observations and camera photos are context for the organiser's own review. Test Candidates does not use them to score you or to make any decision, and does not apply face recognition or other automated analysis to photos.

Cookies and similar browser storage

Cookie settings lets you accept all optional categories, reject them all, or choose analytics and advertising separately. Essential storage remains enabled for functions such as authentication, assessment access, security, payment handling and remembering your choice. Local storage is covered by these choices where used for the same optional purposes as cookies.

The website sets Google consent signals for analytics and advertising storage to denied unless you have a valid saved choice allowing them. Google Tag Manager can load independently of that choice; a denied storage setting is not a promise that no network request or cookieless measurement occurs. The exact tags and technologies used depend on the page, enabled services and your choices.

The cookies present on your device depend on the features you use, your choices and your browser. See Google’s cookie information , Microsoft’s UET information and Stripe’s cookie information for their technologies and lifetimes.

Open Cookie settings in the footer to change your choices at any time. Saving a new choice updates the website’s consent settings. It does not erase information already collected or necessarily remove every existing third-party cookie. Your browser also lets you inspect and clear cookies and local storage; blocking essential storage may prevent sign-in, assessments or payments from working.

Changes to this notice

We will update this notice when the service or our processing changes. Material changes will be communicated where required. Contact support if you need an earlier version or have a question about how the notice applies to you.