Privacy notice
Version consent-1.0. Last updated on publication.
Who is responsible
[Registered company name], [registered address], is the data controller for the information described here. Questions and requests go to [privacy@yourdomain].
What we collect
- Your answers to the assessment, and the time spent on each question.
- The scores calculated from those answers.
- Your email address, if you choose to open your result or buy a report.
- If an employer invited you: the organisation and team they assigned you to.
We do not ask for, and you should not enter, information about your health, ethnicity, religion, sexual orientation, political views, trade union membership or criminal record. The assessment measures none of these and reports on none of them.
Why we hold it, and on what basis
- To produce your result and report. Basis: your consent, given before you start. You can withdraw it at any time.
- To improve the assessment. We use results in anonymised, aggregated form to build norms and test the instrument. Basis: legitimate interests. Anonymised data cannot be traced back to you.
- To take payment. Basis: performance of a contract. Card details are handled by Stripe and never reach our servers.
Who can see your result
Your individual result is yours. Where an employer invited you, they can see it only if you separately agree to share it, and you can withdraw that at any time. Declining does not notify them and does not tell them anything about your answers.
Employers can always see team-level statistics that combine several people and identify nobody.
How long we keep it
Your assessment and reports are kept while your account is open, and for 24 months after your last activity if you do not have an account. After that they are deleted. Anonymised aggregate data is kept indefinitely, because it can no longer identify anyone.
Who we share it with
Our hosting and database providers, our payment provider, and the AI provider that generates the written report. Report generation sends your scores and the framework text, not your name or email. We do not sell data and we do not use it for advertising.
Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or withdraw consent. Email [privacy@yourdomain] and we will act within one month. If you are not satisfied, you can complain to the Information Commissioner’s Office at ico.org.uk.
What this assessment is not
CareerDNA measures how you contribute at work and the conditions that suit you. It is not a clinical or psychological screening tool, it does not diagnose anything, and it must not be used as the basis for a hiring or dismissal decision. Where an employer uses it, it is for development, career conversations and team composition.