Privacy Policy

This policy will set out what data The PsychoMath collects, why it is collected, how long it is kept, who processes it, what rights you have over it, and how to exercise them.

What is collected, and why

Three sources, set out separately, because they carry different risks.

What a visitor gives us

Enquiry and booking forms
Name, email address, telephone number, the institution if one is named, and whatever the visitor writes in the message field.
To answer the enquiry and to route it to the right desk.
Account registration
Name, email address, and a password held only as a hash.
To hold an account and deliver a report to it.
Qualification evidence
Degree, registration number and the documents supplied in support, for buyers of restricted instruments.
To verify a tier before a restricted order is released. See the access rule.
Order and delivery
Delivery address, and GSTIN where an institutional invoice is required.
To despatch an order and issue its invoice.
Payment
Handled by the payment gateway. Card and bank details are not seen or stored by this site.
To take payment.

What an assessment produces

Responses
The answers given to an instrument.
To score it.
Scores and the report
The scored result and the report generated from it. This is psychological data about a named person and is treated as the most sensitive class held here.
To deliver the report to the person entitled to it, and to discuss it with them.
Who administered it
The professional or institution under whose engagement the assessment was taken.
To establish who may see the result.

What the site records on its own

Server logs
IP address, browser, the pages requested and when. Kept by the hosting provider.
To keep the site running and to investigate faults or abuse.
Nothing else, at present
This site sets no cookies of its own, uses no analytics, no advertising pixel and no tracking script, and stores nothing in the browser.
Stated as a fact about the build as it stands, not as an undertaking about the future. If a tool is added, this page and the cookie notice change first.

What you may ask for

See what is held
A written request to the grievance officer named below.
Correct what is wrong
The same route. Corrections to a report are made by re-issuing it, not by editing the original.
Withdraw consent
Withdrawal stops future processing. It does not undo an assessment already administered or an invoice already issued.
Ask for erasure
The same route. Where a record must be kept for a statutory or accounting reason, we say which and for how long.
Nominate someone
A person may nominate another to exercise these rights on their behalf in the event of death or incapacity.
Complain
To the grievance officer first. If the answer does not satisfy, to the authority named by counsel.

Still being settled

These points are with our advisers and will be published here as each is confirmed. Nothing has been filled in with a plausible-sounding figure in the meantime. Where an answer is already known it is shown beneath the line.

Data controller
The registered entity, its address and its registration number.
CG-35
Grievance officer
A named person, a designation, an email address and a postal address. A role title alone is not enough.
CG-27
Retention period, by class
Enquiry data, account data, order and invoice data, qualification evidence, and assessment reports each need their own period, with a reason.
CG-24, CG-27
Confirmation pendingAssessment reports are deleted 90 days after they are issued, and the software does the deleting. The other classes have no period yet.
Processors
Hosting provider, email provider, payment gateway, and any assessment platform — each named, with the country its servers sit in.
CG-22, CG-27
The ground on which each purpose rests
For each purpose above, with the retention period beside it.
counsel
Cross-border transfer
Whether any processor holds data outside India, and on what footing.
counsel
Response time
The period within which a request will be answered.
counsel
Last updated
A visible date. Its absence was the specific failure found on the comparable live site.
CG-27
To counsel Everything above describes what this site does, as built. Where the site's behaviour is wrong in law, the behaviour will be changed — not the wording. Please mark both.
WhatsApp