Our privacy policy is based on the principle that your data is your property - not ours. You have trusted us to hold it and we will protect it to the best of our ability, but we will not use, sell or give it to anyone else without your express permission.

Privacy Legislation

We believe our privacy policy meets the requirements of all major privacy legislation in the countries we operate in. This includes:

Cookie Consent Exemption

EU users may notice that despite using a cookie, we do not ask you to accept it. This is because our cookie is strictly necessary to provide our service - we could not provide a secure personalised service without it. This means we satisfy Criterion B of Article 5.3 of Directive 2002/58/EC as amended by Directive 2009/136/EC, and are exempt from providing the right to refuse a cookie.

Server Location

Our services are used by customers in over thirty counties. It would be impractical and expensive to set up and manage servers in each country, so we use centralised servers based in the USA.

Subprocessors

Google Cloud Platform

Our only subprocessor is Google Cloud Platform, which provides the Appengine platform that School Interviews runs on. Appengine stores and processes all School Interviews data, which is encrypted in transit and at rest. In-depth analysis here.

Our use of Google Cloud Platform does not give Google Search any access to School Interviews data. We don't use Google authentication or analytics, so there is no way Google can use School Interviews data to identify or track you.

Google offers Data Processing and Security Terms (DPST) that incorporate Standard Contract Clauses (SCC) that meet the security, contracting, and data transfer requirements under EU, UK, and Swiss GDPR data protection laws.

Google's security and privacy arrangements have been independently certified:

Google has many other certifications, which you can view here.

We have no other subprocessors. In particular, We do not use any third-party analytics.