Saville Assessment Ltd or any of its affiliates (“Saville Assessment,” “we,” “us“) are committed to privacy and to transparency in our information practices. In this privacy notice, we describe our collection, use, disclosure and processing of personal information that we collect online via our website and by email, as well in connection with our products and services. The sale and provision of such Services are also governed by our Standard Terms and Conditions. We are data controllers with respect to personal information about you that we receive from you and/or from our clients. We may also act as a data processor of your personal information in certain circumstances, in which case we will process personal information only under the instructions of our clients. This privacy notice describes our practices when we are acting as a data controller.
Please be sure to review the Additional Information for Residents in Certain Jurisdictions section below for important information about the categories of personal information we collect and disclose and your rights under specific privacy laws that may apply to you.
The controller of your personal information collected pursuant to this privacy notice is Saville Assessment Ltd, CI Tower, 1st Floor, St George’s Square, New Malden, KT3 4HG, United Kingdom.
Due to the international nature of internet-based Assessment and training services, we may from time to time appoint third parties to process data containing information about you on our behalf as a data processor, or store such information in, or transfer it to persons located in, countries outside of the European Economic Area (“EEA“). These countries may not have data protection laws equivalent to those which are in force in the EEA to protect your information. Where we transfer your information to such third-party data processors and/or third parties outside of the EEA and/or process your information outside the EEA, we shall ensure that they provide sufficient guarantees in respect of the technical and organisational security measures, and take reasonable steps to ensure their compliance with those measures in order to ensure your information is adequately protected in accordance with applicable data protection laws. For more information on the appropriate safeguards in place, please contact us using the details below.
We collect information you provide us via the Website and/or in connection with our Services, such as when you register or complete an Assessment on our website, by corresponding with us by phone, email or otherwise, or through our online psychometric Assessment platform (“Oasys“).
You may provide personal information to us when you register to use our Website, begin or complete an Assessment, subscribe to our information services, place an order on our Website, post in discussion boards, enter a competition, promotion or survey, or otherwise interact or communicate with us via our Website and/or in connection with our Services. The actual personal information we collect and process about you will vary depending upon the circumstances. In general, we may collect personal information directly from you, automatically related to your use of our Website and other Services and from third parties, as described below.
The personal information we collect through our Website may include your name, occupation, company for which you work, business address, home address, email address and phone number, financial and credit card information, and biographical information. If you contact us, we may also keep a record of that correspondence.
When you use our Website, we also automatically collect the following information through the use of cookies and similar technologies:
See below regarding “Cookies and Tracking” and our Cookie Policy for more information on our use of cookies and similar technologies.
From Clients. Clients may provide personal information about Participants. This information may include the Participant’s name, email address and other contact details. Participants may also provide this information directly to us.
From Participants. Participants may take part in Assessments through our Website, Oasys or in a paper-and-pencil format, and they may provide personal information to us via surveys or other collection methods.
When Participating in an Assessment or otherwise using our Services, we will ask the Participant to provide information and responses, such as the following personal information:
You must provide Identification Data as this is required in order for us to administer the Assessment, provide the results to the Client who requested that the Assessment is made available to you for completion, and for the purposes set out in the section entitled “For what purposes do we process information about you?”
Most responses are mandatory within the Assessments, but we will indicate to you if a response is optional. If you do not provide a response to certain questions within the Assessment, you may not be able to proceed to the next section or it may affect your Assessment score.
You do not need to provide Research Data to us. Your provision of this information is entirely voluntary (see below).
Research Data may include personal information that reveals information about you such as your racial or ethnic origin which is considered “special categories of personal information” under EEA, UK and other data protection laws (“Sensitive Data“). This Research Data does not form part of the Assessment and is only used for our research purposes, including to monitor our tests and questionnaires for fairness and to maintain high standards for our Assessments.
Where required by applicable laws, if we directly request your Sensitive Data, we will ask for your explicit consent prior to collecting and processing such data. You do not have to provide Sensitive Data to us (other than images or videos, see below); however, we should be grateful if you would complete all the questions as this will help us to monitor our tests and questionnaires for fairness and maintain high standards for our Assessments. Your ability to complete an Assessment will not be affected by your choice not to provide Sensitive Data, nor will this choice affect your Assessment results.
We may ask you to enable your camera to capture images or videos of you for identification purposes for some of our assessments or when we conduct assessments for some clients. These images or videos may be provided to clients requesting that you complete the assessment. In the event we request that you enable your camera during your participation in an assessment, this will be required for you to proceed.
From time to time, Participants may volunteer additional personal information about themselves to us, which may include Sensitive Data. For example, Participants may inform us about a health issue or disability which may impact the way in which they undertake the Assessment.
We are committed to keeping your personal information confidential and secure. The way in which we use your personal information will depend upon whether you are a Client or a Participant.
We will use personal information about Clients in the course of providing Services for the following purposes:
Personal information provided by you in relation to each of your visits to our Website will be used:
We process personal information about Participants in Assessments for the purpose of providing Services to our Clients. This may include processing this data in order to:
We may also process such personal information for research purposes. We research responses to our Assessments in the light of areas such as gender, age and cultural background over the longer term; this is considered best practice and allows us to monitor our Assessments for fairness in use.
We may also process your personal information for the purposes of using and refining Assessment tools, analysis, accounting, billing and audit, security, administration, enforcing and defending legal rights, systems testing, maintenance and product development, customer relations, performing our obligations to Participants and Clients whether under contract or otherwise, and to help us in future dealings with you.
The Assessment reports and services we provide to our Clients may be used by them for purposes which may include the selection and development of individuals in an employment or human resources context.
We may also provide a copy of the Assessment Data to our Clients for use by them for their own internal human resource management purposes.
Clients are entitled to use the personal information that we provide to them as part of our Services for their own purposes; however, such Clients are obliged to process such personal information in accordance with their own obligations under applicable data protection laws. You will have rights with respect to the manner in which our Clients process such personal information provided by us to them.
Our Assessments are conducted, in part, on the basis of profiling, which means that we process your personal information using software that is able to process your responses to questions and provide estimates of different attributes including your personality, preferred behaviour, motivations, talents and abilities.
If you are a Participant, you should note that it is our Clients that make decisions on the basis of our Assessments. As part of these decision-making processes, our Clients may ask us to:
We will act as a data processor in these circumstances as our role will be limited to implementing instructions provided to us by our Clients by, for example, progressing Participants to the next stage of an Assessment process that have met a minimum score set by a Client. If you have any questions about how Assessment results will be used in their decision-making process, you should ask the Client (i.e. your employer or potential employer) for further information. If you are a Client, it is your responsibility to ensure that your decision-making process, including how you interpret the Assessment results, complies with applicable laws.
Under EEA, UK and similar data protection laws, we must have a legal basis to process your personal information. In most cases, the legal basis will be one of the following:
We may disclose your personal information for the following reasons.
Information about Participants will be disclosed to our Clients in the context of the provision of Services to them in connection with the Assessment(s) undertaken. Individual responses may be disclosed to Clients, and an overall Assessment report will be provided to Clients, containing an overall Assessment score and additional comments about a Participant’s performance.
To facilitate the Assessment process, information about you may also be passed to external suppliers from time to time and their respective suppliers, which may include:
Where we use external service providers, we request those providers to implement and apply appropriate security safeguards to ensure the privacy and security of your personal information. These third parties have agreed to confidentiality restrictions and to use any personal information we share with them or which they collect on our behalf solely for the purpose of providing the contracted service to us.
Finally, we also may disclose your personal information to third parties:
Aggregate and Anonymised Information. We may share aggregate or anonymised information (i.e., that which does not identify and is not linked or linkable to a particular individual), with third parties for research, marketing, analytics and other purposes.
As part of our Assessment process, we may request or you may volunteer contact details of a third party; for example, someone who can answer questions about your work in order to generate a 360 feedback report. You should inform such third party that you intend to disclose this information and obtain their prior consent to giving us their contact details.
If we have contacted you as a result of your details being disclosed to us by a Participant in our Assessment process, we will use that information and any subsequent information you may submit to us in accordance with this Privacy Policy.
Our Website may use first-party and third-party cookies, pixel tags, plugins and other tools to gather device, usage and browsing information when users visit our Website or use our online services. For instance, when you visit our Website, our server may record your IP address (and associated location information) and other information such as the type of your internet browser, your Media Access Control (MAC) address, computer type, screen resolution, operating system name and version, device manufacturer and model, language, and the pages you view and links you click on our Website, as well as date and time stamps associated with your activities on our Website. For more information, see our Cookie Policy.
We use the information for security purposes, to facilitate navigation, to personalise and improve your experience while using the Website, to improve and measure our advertising campaigns, to better reach users with relevant advertising both on our Website and on third party websites, and to report aggregate information to our advisors. We also gather statistical information about use of the Website in order to continually improve their design and functionality, understand how they are used and assist us with resolving questions regarding them. You can manage your preferences regarding cookies set by this Website (other than those portions of our Websites in which you complete an Assessment), using our cookie preference manager. If you have reached this Privacy Notice from a website other than our Website, please go back and use the cookie preference manager on that website to set your cookie preferences for that website.
Cookies. Cookies are small text files that a website transfers to your computer or other device to store and sometimes collect information about your usage of our Website, such as time spent on the Website, pages visited, language preferences, and other anonymous traffic data. You can control the way in which cookies are used by altering your browser settings. You may refuse to accept cookies by activating the setting on your browser that allows you to reject cookies. However, if you select such a setting, this may affect the functioning of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you access or log on to our Website. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org. For more information about the use of cookies on our Website and your choices regarding the placement of cookies, please see our Cookie Policy.
Pixel tags and other similar technologies. Pixel tags (also known as web beacons and clear GIFs) may be used in connection with some websites to, among other things, track the actions of users of the website (including email recipients), measure the success of our marketing campaigns and compile statistics about usage of the website and response rates. We and our service providers may also use pixel tags in HTML emails to our customers, to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.
Log files. Most browsers collect certain information, such as your IP address, device type, screen resolution, operating system version and internet browser type and version. This information is gathered automatically and stored in log files.
Third Party Analytics Tools. Our Website may use automated devices and applications operated by third parties (e.g., Google Analytics), which use cookies and similar technologies to collect and analyse information about use of the Website and report on activities and trends.
Do-Not-Track signals. Please note that our Website does not recognise or respond to any signal which your browser might transmit through the so-called ‘Do Not Track’ feature your browser might have. If you wish to disable cookies on our Website, you should not rely on any ‘Do Not Track’ feature your browser might have.
On our Websites (other than those portions of our Websites in which you complete an Assessment), we may work with third-party ad networks, analytics companies, measurement services and others (“third-party ad companies”) to display advertising on our Website and to manage our advertising on third-party websites, mobile apps and online services. We and these third-party ad companies may use cookies, pixels tags and other tools to collect information on our Website (and on third-party websites and services), such as browsing history, IP address, device ID, cookie and advertising IDs, and other identifiers, general location information and, with your consent, your device’s geolocation information; we and these third-party ad companies use this information to provide you more relevant ads and content and to evaluate the success of such ads and content.
You can manage how your preferences regarding third party ad company cookies set by this Website, using our cookie preference manager.
You may also obtain more information about targeted or “interest-based advertising” and opt-out of many ad networks at the industry websites below:
We have taken certain physical, electronic, contractual and managerial steps to safeguard and secure the personal information we collect. Despite this, the security of the transmission of information via the Internet cannot always be guaranteed and you acknowledge this in your access and use of our Website. Please note that it is your responsibility to maintain the confidentiality of your password associated with this Website, if any.
We retain Participants’ personal information (including test results) for a period of 24 months, after which time we may anonymise the data and use it for research purposes, unless a different retention period applies pursuant to a contract with a Client. We will also anonymise data at the request of the Client or the Participant. If the Participant requests their data to be anonymised, we will first inform the Client who requested the Assessment be made available to the Participant.
We retain Clients’ personal information for as long as we maintain a relationship with Clients, and then for a reasonable period of time that allows us to assist with any queries, requests or complaints regarding the Assessments and/or the Services, unless a longer retention period is required or permitted by law or defined in an agreement.
We may also retain personal information longer where necessary to commence or defend legal claims, and to comply with our regulatory obligations (including record retention obligations).
We may update this Privacy Policy from time to time. The updated Privacy Policy will be published on our Website and, where appropriate, notified to you by email. You should refer to the Privacy Policy from time to time in order to keep yourself up to date with regard to the way we process your personal information.
Where the privacy law in your respective jurisdiction provides for certain rights to a data subject, you, as the person to whom the personal information relates to, would have such rights to your personal information.
Some of these rights, as may differ from country to country, are similar to the rights as described in the foregoing section on “Additional Information for Residents in Certain Jurisdictions: European Union / European Economic Area (EEA) / Dubai International Financial Centre”.
We encourage you to contact us should you have any query on the specific rights available to you under the privacy law in your country, you can find contact information in clause 18 of the Privacy Policy. Some of these rights might be subjected to exemptions or limitations under the privacy law.
In most countries you also have the right to approach your local supervisory authority if you have concerns about how we are processing your personal information. We ask that you please attempt to resolve any issue with us first, although you have a right to contact your supervisory authority at any time.
If you require contact details of the relevant local supervisory authority in your countries, you can approach us.
In this section, we provide information for California residents, as required under California privacy laws, including the CCPA, which requires that we provide California residents certain specific information about how we handle their personal information, whether collected online or offline. This section does not address or apply to our handling of:
Purposes for Using Personal Information: While the purposes for which we may process personal information concerning Clients and Participates will vary depending upon the circumstances, in general we use personal information for the purposes set forth below.
Categories of personal information that we collect and disclose. In general, we collect and disclose for a business purpose the following categories of personal information (as defined by the CCPA):
We do not process personal data belonging to individuals who we know are younger than 16 years old.
We may share aggregated or anonymised information (i.e., that which does not identify and is not linked or linkable to a particular individual), with third parties for research, marketing, analytics and other purposes. When we de-identify personal information, we have implemented reasonable measures as required by law to ensure that the de-identified data cannot be associated with any individual or client. We will only maintain and use such data in a de-identified manner and do not attempt to re-identify the data, except as permitted by law.
Categories of Sources of Personal Information. We may collect personal information directly from you, automatically related to your use of our Website and Services, and from third parties as described below. The actual personal information we collect and process about you will vary depending upon the circumstances. The sources for the personal information we may collect include:
In the past twelve months, we have disclosed certain categories of personal information to the following categories of third parties:
Information Concerning the Sharing or Selling of Personal Information. While we do not disclose personal information to third parties in exchange for monetary compensation from such third parties, we do disclose or make available personal information we may have collected, through the use of targeting cookies, to third parties in order to receive certain services or benefits from them, such as when we allow third party tags to collect information such as browsing history on our Website, in order to improve and measure our ad campaigns, to facilitate navigation, to personalise and improve your experience while using the Website to better reach users with relevant advertising both on our Website and on third party websites, and to report aggregate information to our advisors.
The CCPA defines a “sale” as disclosing or making available to a third party Personal Information in exchange for monetary or other valuable consideration and it defines “share” in pertinent part as disclosing personal information to a third party for cross-context behavioural advertising.
Pursuant to the CCPA, the categories of personal information that we may “sell” as defined under the CCPA includes:
We have “sold” the categories of personal information listed above to data analytics providers in the preceding twelve months for the purposes outlined above.
We do not “share” personal information with third parties for cross-context behavioural advertising.
Use and Disclosure of Sensitive Personal Information. We only use and disclose sensitive personal information collected about consumers for the purposes of providing secure access for participants to complete assessments, for research purposes to monitor our assessments for fairness in use, and where participants inform us about a health issue or disability which may impact the way in which they undertake an assessment and not for any other purpose. For more information about the collection and use of personal information generally, please see section 5 and section 6 above.
Rights of California residents. California law grants California residents certain rights and imposes restrictions on particular business practices as set forth below.
California residents may make a Request to Know up to twice every 12 months. We will respond to verifiable requests received from California residents as required by law. The instructions for submitting a verifiable Request to Know are described in the “Submitting Requests” section below.
Submitting requests. Do-Not-Sell (Opt-out) Requests, Requests to Know and Requests to Delete may be submitted by:
We will use the following process to verify Requests to Know, Requests to Delete, and Requests to Correct: We will acknowledge receipt of you Consumer Request, verify it using processes required by law, then process and respond to your request as required by law. To verify such requests, we may ask you to provide the following information:
An authorised agent can make a request on a California resident’s behalf by providing a power of attorney valid under California law, or providing: (1) proof that the consumer authorised the agent to do so; (2) verification of their own identity with respect to a right to know categories, right to know specific pieces of personal information, or requests to delete which are outlined above; and (3) direct confirmation that the consumer provided the authorised agent permission to submit the request.
For more information about our privacy practices, you may contact us as set forth in section 18. Contact Information above.
Consumer Requests Received in 2023. In calendar year 2023, we received and responded to consumer requests under the CCPA as set forth in the table below:
Request Type | Number of Requests Received | Number of Requests With Which We Complied (in Whole or in Part) | Number of Requests Denied | Average Response Time (Number of Days) |
---|---|---|---|---|
Requests to Know | 9 | 9 | 0 | 11.9 |
Requests to Delete | 11 | 11 | 0 | 19 |
Requests to Opt Out of the Sale of Personal Information | 36,016* | 36,016* | 0 | 0 |
*By selecting their cookie preferences, users can opt out our use of targeted cookies. This number represents the worldwide total number of requests to opt-out of targeted cookies. |
Residents of:
regarding their personal information:
We are not required to comply with your request to erase personal information if the processing of your personal information is necessary for:
We can continue to use your personal information following a request for restriction, where:
We ask that you please attempt to resolve any issue with us first, although you have a right to contact your supervisory authority at any time.
Where the privacy law in your jurisdiction provides for certain rights to a data subject, you, as the person to whom the personal information relates to, would have such rights to your personal information.
Some of these rights are similar to the rights as described in the foregoing section on “Additional Information for Residents in Certain Jurisdictions: European Union / European Economic Area (EEA) / Dubai International Financial Centre”.
We encourage you to contact us should you have any query on the specific rights available to you under the privacy law in Mainland China, you can find contact information in clause 18 of the Privacy Policy. Some of these rights might be subjected to exemptions or limitations under the privacy law.
In addition to the “Right to personal information” stated above, a data subject also has the right to:
If you usually live in Mainland China, by continuing you also consent to the following:
You also have the right to approach your local supervisory authority if you have concerns about how we are processing your personal information. We ask that you please attempt to resolve any issue with us first, although you have a right to contact your supervisory authority at any time.
Please contact us if you require contact details of the relevant local supervisory authority.
Last updated: 8 July, 2024.
© 2024 Saville Assessment. All rights reserved.