How we look after your child's information
Version 2026-10. Our students are aged 14–18. Whatever their age, we follow the U.S. Children's Online Privacy Protection Rule (COPPA, 16 CFR Part 312) for every student: a parent's verified consent comes first, and the parent stays in control.
Who we are
[Operator legal name] · [Postal address] · [privacy@your-domain] · [Telephone]. Contact us with any question about your child's information.
What we collect from or about a student
- From the parent: the student's first name, last-name initial, and birth month and year.
- From the student, with the parent's consent: answers to the questionnaire — interests, preferred ways of working, personality, strengths, values, things they've done, and short written answers; how long each section took (to spot rushed answers); and, if they choose, grades, curriculum, country of school and nationality.
- Sign-in: a generated username and a password chosen by the parent. Sign-in uses a single essential cookie.
We do not collect a student's email address, phone number, home address, school name, photo, voice, location or device identifiers, and a student cannot sign in with Google, Apple or Microsoft. No question is required beyond what the assessment needs, and optional ones are marked as such.
How we use it
Only to produce career-direction reports for the family, and to compare a student's assessments over the years. A counsellor reads the answers only if the parent consents to that separately. We do not use children's information for advertising, profiling for marketing, or training AI models.
Disclosure
We never sell, rent or disclose a student's information to anyone — no universities, agencies, advertisers or data brokers. Our hosting and email providers process it only on our behalf, under contracts that require them to keep it confidential and secure. There is no messaging between users and no public profile.
Parental consent
When a parent adds a student, we email the parent a notice of all of the above with a link. Nothing is collected from the student, and no student sign-in can be created, until the parent confirms through that link (or returns a signed consent form). We then send a confirmation a day later explaining how to withdraw consent. If we ever change materially how children's information is collected or used, we ask every parent to consent again, and stop collecting until they do.
Your rights as a parent
- Review: see everything we hold about your child on screen (Review your child's data) or download it.
- Refuse further collection: withdraw consent at any time; your child is signed out at once and nothing more is collected. You can also refuse counsellor access while allowing collection.
- Delete: Erase permanently deletes your child, their sign-in, every assessment and every report immediately.
- Correct: contact us and we'll correct anything inaccurate.
Students are told when they start that their parent can ask to see their answers.
When a student turns 18
From the first day of the month after a student's 18th birthday, they're an adult and their information is theirs to control. We tell parents 30 days beforehand. On that day the parent's consent ends and the parent can no longer see, download or change anything. When the student next signs in, they take control of their account: they add their own email address, choose a new password, agree to these terms themselves, and decide whether a counsellor may read their answers and whether their parents may still see their assessments (off unless they choose it). Until they do, their account is paused. If they haven't taken control within 60 days, everything is permanently erased; parents are reminded 7 days before. Parents can't add a student who is 18 or about to be.
How long we keep it — our retention policy
| A student whose parent never confirms consent | Deleted after 7 days |
| After a parent withdraws consent | Erased after 30 days (time to change your mind or download it) |
| A student who turns 18 and doesn't take control of their account | Erased 60 days after they come of age |
| A student with no activity | Erased after 24 months, with an email warning 30 days before |
| Emails we've sent (they can name your child) | Deleted 30 days after sending |
| The access log (who did what and when — never answers) | Kept 7 years |
Assessments are kept between those limits because students take the assessment again over several years and the comparison is part of the service. This policy is enforced automatically every day.
How we protect it
- Pseudonymised storage: answers and reports are stored without names and linked to a student only by a keyed code. The key is held outside the database, so a copy of the database alone cannot connect a child to their answers.
- Encryption: answers, reports and our notes are encrypted in the database, as well as in transit.
- Access control: staff can open a student's answers only while counsellor-access consent is in force, must use two-factor authentication, and every access is logged.
- Accounts: short sessions, rate-limited sign-in and lock-out after repeated failures. Pages can't be embedded in other sites, and no third-party scripts or trackers are loaded.
Safeguarding
Students sometimes write about difficult things. If something a student writes suggests they may be at risk, a counsellor will contact the parent or guardian and follow our safeguarding procedure.