This policy explains what we collect and why. The data controller is Harewood Digital Limited (Company No. 11896620), England and Wales. Contact: hello@testedmind.com.
When you take the test: your answers, timing, approximate region and a session identifier. When you buy results: your email address, the name you put on the certificate, and payment confirmation from Stripe. We never see or store your card details; Stripe processes payment as an independent controller.
With your consent, given via the cookie banner, we use PostHog to collect usage analytics: pages viewed, progress through the test (which question numbers you reached, not your answers), button clicks, and device and browser information. Analytics data is hosted in the EU. We do not send your email address, your certificate name or your individual answers to analytics, and we do not use session recording. If you decline the banner, no analytics run at all. You can change your choice at any time on the cookies page.
To score your test, deliver your results and certificate, respond to support requests, and meet legal obligations such as accounting records. The lawful basis is contract for delivery, legitimate interest for service operation and abuse prevention, and consent for analytics.
Paid results are kept so your permanent results link and certificate verification keep working. Unpaid test sessions are deleted within 30 days. You can ask us to delete your data at any time, though deleting a paid result also disables its verification.
You have the rights of access, correction, deletion, restriction and portability under UK GDPR. Email us to exercise them. You can also complain to the ICO at ico.org.uk.
TestedMind is operated by Harewood Digital Limited, registered in England and Wales, Company No. 11896620.