Privacy Policy

1. Introduction

Standard IQ Score ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website and services ("Service"), including for users in the European Economic Area (EEA), United Kingdom (UK), and other jurisdictions worldwide. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the UK GDPR where applicable.

2. Data Controller

The data controller responsible for your personal data is the entity operating Standard IQ Score. For contact details and any data protection inquiries, please email us at info@standardiqscore.com.

3. Information We Collect

We may collect the following categories of personal data:

• Account and identity: name, email address, password (hashed), and any information you provide when creating an account.
• Payment: billing address and payment method details; payment processing is handled by third-party providers (e.g., Stripe) in accordance with PCI-DSS standards. We do not store full card numbers.
• Test and usage data: test responses, scores, reports, and usage of the Service (e.g., pages visited, time spent).
• Technical data: IP address, browser type, device information, and similar technical identifiers.
• Communications: messages you send to us (e.g., support requests).

4. Legal Basis for Processing (EEA/UK)

Where the GDPR or UK GDPR applies, we process your personal data on the following legal bases: (a) performance of a contract (e.g., providing the Service and processing payments); (b) your consent where we have asked for it (e.g., marketing); (c) our legitimate interests (e.g., improving the Service, security, analytics) where not overridden by your rights; (d) compliance with legal obligations. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. How We Use Your Information

We use your data to: provide and operate the Service; process payments; generate and deliver test results and reports; communicate with you (e.g., account and support messages); improve and personalize the Service; ensure security and prevent fraud; comply with legal obligations; and, where you have consented, send marketing communications. We do not sell your personal data to third parties.

6. Sharing and Disclosure

We may share your data with: (a) service providers who assist us (e.g., hosting, payment processing, email delivery) under contractual obligations to protect your data; (b) authorities when required by law or to protect our rights; (c) in connection with a merger, sale, or restructuring, subject to applicable law. We do not share your personal data with third parties for their own marketing purposes without your consent. Where we transfer data outside the EEA/UK, we ensure appropriate safeguards (e.g., adequacy decisions, standard contractual clauses) are in place as required by law.

7. Cookies and Similar Technologies

We use cookies and similar technologies (e.g., local storage) for essential operation, security, preferences, and analytics. Where required by law (e.g., in the EEA/UK), we obtain your consent for non-essential cookies. You can manage cookie preferences via your browser or our cookie notice where provided.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, including legal, accounting, or reporting requirements. Account and test data are retained while your account is active and for a reasonable period thereafter; you may request deletion of your account and associated data subject to the rights below.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data in certain circumstances ("right to be forgotten").
• Restriction: request that we restrict processing in certain cases.
• Portability: request a copy of your data in a structured, machine-readable format.
• Object: object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: where we rely on consent, you may withdraw it at any time.
• Complaint: lodge a complaint with a supervisory authority (e.g., in your country of residence in the EEA/UK).

To exercise these rights, please contact us at info@standardiqscore.com. We will respond within the timeframes required by applicable law (e.g., one month under the GDPR). For California residents, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of sale (we do not sell personal information).

10. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including encryption where appropriate. Payment data is processed by PCI-DSS compliant providers.

11. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16 (or the applicable age in your jurisdiction). If you believe we have collected data from a child, please contact us at info@standardiqscore.com and we will take steps to delete it.

12. International Transfers

Your data may be processed in countries outside your residence. Where we transfer data from the EEA/UK to countries not deemed adequate, we use appropriate safeguards (e.g., standard contractual clauses approved by the European Commission or UK authorities) to ensure your data remains protected.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Where required by law (e.g., material changes under the GDPR), we will notify you or obtain your consent.

14. Contact

For privacy-related questions, to exercise your rights, or to contact our data protection officer (where applicable), please email us at info@standardiqscore.com.