GL Assessment Limited of 1st Floor Vantage London, Great West Road, Brentford, United Kingdom, TW8 9AG (we, us) are committed to protecting and respecting individuals’ privacy. We operate the website and service available at https://reports.testwise.net (TRS) for the benefit of schools, Local Education Authority (LEAs) or similar organisations, as applicable (School).
Administrative Users - someone who uses TRS for or on behalf of a School - e.g. a school’s staff.
Students - students who take a paper-based test, the results of which can be accessed by Administrative Users on TRS.
By accessing TRS, Administrative Users are accepting and consenting to the practices described in this policy.
We use data relating to Administrative Users as detailed below. For the purpose of the Data Protection Act 1998, the General Data Protection Regulation (EU) 2016/679 and any subsequent UK data protection legislation (the Data Protection Legislation), the data controller is GL Assessment Limited.
We also process data relating to Students as detailed below and we do this on the School’s behalf. For the purposes of the Data Protection Legislation, the School is the data controller and GL Assessment Limited is the data processor.
INFORMATION ABOUT ADMINISTRATIVE USERS
We may collect and process the following data:
Information Administrative Users give us when using TRS. Administrative Users may give us information when registering for or logging into TRS, using the services available via TRS, or by corresponding with us by phone, e-mail or otherwise to assist with administration and support of TRS or a User’s account. Such information about an Administrative User may include name, address, e-mail address and phone number.
Information we collect about Administrative Users. With regard to each visit to TRS we may automatically collect the following information:
technical information, including the Internet protocol (IP) address used to connect a User’s computer to the Internet, login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
information about a User’s visit, including the full Uniform Resource Locators (URL) clickstream to, through and from TRS (including date and time); pages viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our support number.
HOW WE USE THIS INFORMATION
We use information held about Administrative Users in the following ways:
Information about Administrative Users. We will use this information:
to provide TRS and the related services available via TRS to Administrative Users;
to carry out our obligations arising from any contracts entered into between the School and us and to provide Administrative Users with the information, products and services requested from us;
to provide Administrative Users with information about other goods and services we offer that are similar to those that Administrative User or the School has already purchased or enquired about;
to provide Administrative Users, or permit selected third parties to provide Administrative Users, with information about goods or services we feel may interest them. If the School or Administrative User is an existing customer, we will only contact the Administrative User by electronic means (e-mail or SMS) with information about goods and services similar to those which were the subject of a previous sale or negotiations of a sale to the Administrative User or the School. If the School or Administrative User is a new customer, and where we permit selected third parties to use Administrative Users’ data, we (or they) will contact the Administrative User by electronic means only if the Administrative User has consented to this;
to notify Administrative Users about changes to our service;
to improve TRS and ensure that content from TRS is presented in the most effective manner for Users and the computers being used to access TRS;
for internal record-keeping, reporting, product review and development purposes;
for the purposes of supporting the provision of TRS and dealing with any support requests or customer queries;
to administer TRS and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
to allow Administrative Users to participate in interactive features of our service, when Administrative Users choose to do so;
as part of our efforts to keep TRS safe and secure;
to measure or understand the effectiveness of any advertising we serve to Administrative Users and others, and to deliver relevant advertising to Administrative Users.
INFORMATION WE MAY COLLECT ABOUT STUDENTS
We may collect and process the following data:
Information given to us about Students. This would include information entered into TRS when an Administrative User is using the services available or as otherwise provided to us by the School or an Administrative User. Such information about a Student may include name, date of birth, age, gender, ethnicity, socio-economic information (for example, whether or not qualifying for free school meals) school and year group.
HOW WE USE THIS INFORMATION
We use information held about a Student in the following ways:
Information about Students. We will use this information:
to carry out our obligations arising from any contracts entered into between the School and us and to provide the School (and the applicable Administrative Users) with the information, products and services requested from us;
to carry out internal product and quality reviews and product development.
INFORMATION WE RECEIVE FROM OTHER SOURCES
We may receive information about an Administrative User if an Administrative User uses any of the other websites we operate or the other services we provide. In this case we will have informed an Administrative User when we collected that data that it may be shared internally and combined with data collected on this site. We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about Administrative Users from them.
HOW WE USE THIS INFORMATION
We may combine this information with information Administrative Users give to us and information we collect about Administrative Users. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).
We may use information relating to Students and Schools in anonymised format to produce reports that we produce and share with third parties. These reports would, for example, be comparable reports about type of organisation (for example, type of school, % of students with different languages) and their performance. No Student or school would be identifiable in such reports.
DISCLOSURE OF INFORMATION
We may share Administrative Users’ personal data with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
We may share Administrative Users’ personal data with selected third parties including:
Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or a school.
Analytics and search engine providers that assist us in the improvement and optimisation of our site.
The school, LEA, or other similar organisation on whose behalf or under whose direction Users access and use TRS.
We may disclose personal data to third parties:
In the event that we sell or buy any business or assets, in which case we may disclose Administrative Users’ personal data to the prospective seller or buyer of such business or assets.
If GL Assessment Limited or substantially all of its assets are acquired by a third party, in which case personal data held by it about its Administrative Users will be one of the transferred assets.
WHERE WE STORE USER PERSONAL DATA
The data that we collect from Administrative Users and Students will not be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). All data provided to us is stored on our secure servers. Where Administrative Users have chosen or been given a password which enables access to certain parts of TRS, Administrative Users are responsible for keeping this password confidential. We ask Administrative Users not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect personal data, we cannot guarantee the security of data transmitted to TRS; any transmission is at the School’s and the Administrative User’s own risk. Once we have received Administrative User and Student information, we will use strict procedures and security features to try to prevent unauthorised access.
HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
We keep personal information for as long as we need to for the purposes for which it was collected or (if longer) for any period for which we are required to keep personal information to comply with our legal and regulatory requirements.
ADMINISTRATIVE USERS’ RIGHTS
Administrative Users have a number of rights in relation to their personal data, these include the right to:
find out how we process their data;
request that their personal data is corrected if they believe it is incorrect or inaccurate;
obtain restriction on our, or object to, processing of their personal data;
if we are relying on consent, the Administrative User can withdraw their consent to our processing of their personal data (including any direct marketing);
obtain a copy of the personal data we process concerning the Administrative User. We may charge a reasonable fee towards the cost of administering a request if appropriate and we will take steps to verify the Administrative User’s identity before responding to their request. Once we have received the fee (if required) and verified the Administrative User’s identity, we will respond as soon as possible and in any event within one month; and
lodge a complaint with the UK supervisory body, the Information Commissioner’s Office (the ICO) here https://ico.org.uk/. If there are any concerns or complaints about the way we handle personal data, we ask that you contact us in the first instance to allow us to investigate and resolve the matter as appropriate.
If you are a Student, we advise that you contact your School with any enquiries surrounding your rights.
LINKING TO THIRD PARTY WEBSITES
TRS may, from time to time, contain links to and from the websites of our partner networks. If Administrative Users follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Administrative Users should check these policies before submitting any personal data to these websites.