Privacy notice

This privacy notice applies only to the Q-Global and Q-Interactive platforms (the 'Pearson
Platforms'). It contains information about how Pearson Education Limited (‘Pearson’) collects,
uses and protects personal data it receives from customers and test administrators and how it
processes personal data which is generated by assessments carried out on the Pearson
Platforms. Whether Pearson is a data controller in relation to your personal data (the person who
decides how personal data is processed and used) or a data processor (which carries out
processing on behalf of and in accordance with the instructions of a data controller) depends on
whether you are a Pearson customer and/or test administrator or an individual who participates
in a test or assessment administered by a test administrator.

I am a customer and/or a test administrator.

Pearson is the Data Controller

Pearson Education Limited is the data controller in relation to your personal data. It is
registered at Companies House under company number 00872828 and its registered
office is 80 Strand, London WC2R 0RL You can contact Pearson in relation to this
privacy statement or our handling of your personal data at the following address;

Data Privacy Office, Pearson plc - dataprivacy@pearson.com

What information does Pearson collect about me?

Account information

We collect some or all of the following personal information from customers and/or test
administrators directly when we set up your account; name, telephone number, mobile
number, e-mail address, “Pearson Qualification Level”, login ID and password. Our legal
basis for the collection and processing of this data is the provision to you of services
purchased by you or on your behalf on the Pearson Platforms. We need this information
in order to provide the services under our agreement with you and if you do not provide
this information then we may not be able to provide you with the services.

Browser Information;

We also automatically collect information transmitted by your browser when you access
the Platforms and relevant products. This includes your IP address, the date and time of
the request, the pages accessed, the access status/ HTTP status code, the data volume
transmitted at any one time, the website from which the request has come, your browser,
your operating system and interface, as well as the language and version of the browser
software. The legal basis for collecting and processing this personal data is to be able to
operate the Pearson Platforms and provide you with access to the products and services
you are entitled to access.

Cookies

We use cookies (small text files which are transferred to your browser by the Pearson
Platforms) to identify data traffic patterns, personalise contents and support security. The
cookies we use are described in more detail in our cookie statement below. They do not
provide any information which might disclose the identity of a specific person but they
may potentially identify your computer, your browser and your internet settings. You may
change the storing of cookies in your browser settings at any time by selecting the
function “accept no cookies”. However, disabling essential cookies may result in you no
longer be able to use the entire functionality of the Pearson Platforms.
 Google Analytics

Google Analytics, a web analytics service provided by Google, Inc. (“Google”) also
places cookies on your computer, to enable Google to provide us with activity reports
relating to the Pearson Platforms. Google uses this data only to provide us with
information on how users use the Pearson Platforms and does not associate your IP
address with any other data held by Google. The information generated by Google
cookies about your use of the platform (including your IP address) will be transmitted to
and stored by Google on servers in the United States. You may refuse these cookies by
selecting the appropriate settings on your browser or by downloading and installing the
browser plug-in available under
https://tools.google.com/dlpage/gaoptout?hl=en-GB.

What will Pearson do with my personal information?

We use your account information for the purpose of setting up and administering your Q-
global or Q-interactive account so that you can purchase, access and use products and
services available on the Pearson Platforms, to verify your entitlement to use products
and services that have been purchased by you or for your use and to provide you with
support and customer services.

Pearson may also use your contact information for its own legitimate purposes of
informing you about other Pearson services which may interest you. You may at any time
elect not to receive further marketing information by following the ‘unsubscribe’ link at the
foot of an email from Pearson or by emailing Pearson at the following address:
marketing@pearsonclinical.co.uk

How long does Pearson keep my personal information for?

Pearson will retain personal data collected directly from a customer or test administrator
while the account remains active and for such period after that as is necessary to enable
you to download data and carry out such activities as are necessary for us for you to
close your account. We will then retain such limited amount of information relating to
your account as is required for audit purposes.

How does Pearson keep my personal information safe?

Pearson and its affiliate companies host the personal information provided by you and
the reports delivered to the test administrator on secure servers operated by Pearson
group companies or by contractors appointed to operate and administer the Pearson
Platforms. Pearson takes appropriate operational and security measures necessary to
keep the information secure and requires similar operational and security measures from
its contractors. Further details about Pearson’s security measures are available on the Q-
Global and Q-interactive websites.

Will Pearson share my personal information with anyone else?

Pearson will not sell your information. Pearson will not share your information with any
third party except as is required to operate the Pearson Platforms and administer your
account. This requires us to share your information with our affiliate companies and
contractors involved in the operation and administration of the Pearson Platforms.

Will Pearson send my personal information outside of Europe?

Account information is administered outside the United Kingdom and the EEA by NCS
Pearson Inc., Pearson’s affiliate company in the USA. Pearson has entered into an
intercompany data processing agreement using the European Commission standard
contractual clauses for data transfers to its affiliates outside the United Kingdom and the
EEA. The Pearson Platforms and the personal data they process are hosted by Amazon
 Web Services in Canada. Such personal data is transferred from the United Kingdom
and the EEA to Canada under an adequacy decision of the European Commission, and
such transfers will also be conducted in accordance with applicable local law.

What rights do I have in respect of my personal information?

You have the right to update and correct the personal information on your account. You
also have the right to request from Pearson all personal information that we hold that
relates to you, to request restriction of the processing of that data and to request that we
delete that data. Where allowed by applicable law there may be an administrative charge
for supply of copies of data. You also have the right to object to our continued processing
of your personal data. You may also have the right to data portability. If you have a
complaint about the way in which Pearson uses your personal information you have the
right to complain to your relevant local Data / Information Regulator.

I am participating in a test or assessment carried out by a test administrator.

The test administrator is the Data Controller

The data controller (the person who decides how personal data is processed and used)
is the person who carries out the test or assessment on the Pearson Platforms.

What information will Pearson receive about me?

When you participate in a test or assessment on the Pearson Platforms we will process
on behalf of the test administrator some or all of the following personal information;
unique identifier, date of birth, gender, left or right-handedness and native language.
Depending on the nature of the assessment being performed we may receive further
information including but not limited to: medical history; professional training and
information on issues linked therewith; employment, professional career and information
on issues linked therewith; health problems; medication used; employment status; marital
status; family information and family history.

How will Pearson receive my personal information?

Depending on the nature of the test or assessment this information is provided by you to
the test administrator who enters it into the Pearson Platforms, or is entered directly into
the Pearson Platforms during the assessment either by you or by the test administrator.

What will Pearson do with my personal information?

The processing Pearson carries out on the information provided by you during a test or
assessment is to evaluate the answers to questions asked in the course of the test or
assessment and to derive raw scores and test-specific scaled or percentile scores within
the Pearson Platforms. We then return this information to the test administrator in the
form of reports and/or structured data containing scores, indexes etc. which are produced
by the Pearson Platforms. We do this processing solely on behalf of and on the
instructions of our customer who has administered the test or assessment.

We may occasionally compile answers provided to us and other information collected in

the course of test implementations into an aggregated form which does not identify any
individual. This aggregated data may be made available to researchers, test developers
and our contractors for the purposes of research, quality control, operational
management, security and sales promotion, as well as to improve, develop and expand
our products and services.

How long does Pearson keep my personal information for?

 Pearson retains the information you provide for so long as the test administrator retains
an account on the Pearson Platforms. Pearson will delete all personally identifying
information on closure of this account.

How does Pearson keep my personal information safe?

Pearson and its affiliate companies host the personal information provided by you and
the derived scores and reports delivered to the test administrator on secure servers
operated by Pearson group companies or by contractors appointed to operate and
administer the Pearson Platforms. Pearson takes appropriate operational and security
measures necessary to keep the information secure and requires similar operational and
security measures from its contractors. Further details about Pearson’s security
measures are available on the Q-Global and Q-Interactive websites.

Will Pearson share my personal information with anyone else?

Pearson will not sell your information. Pearson will not share your information with any
third party except with the Pearson customer who has administered the test or on their
instructions and with Pearson’s affiliates and contractors involved in hosting and
operating the Pearson Platforms.

Will Pearson send my personal information outside of Europe?

The Pearson Platforms and the personal data processed on the Pearson Platforms is
hosted by Amazon Web Services in Canada. Such personal data is transferred from the
United Kingdom and the EEA to Canada under an adequacy decision of the European
Commission, and such transfers will also be conducted in accordance with applicable
local law.

What rights do I have in respect of my personal information?

You have the right to update and correct your personal information, to request all
personal information that the test administrator holds that relates to you, to request
restriction of the processing of that data, and to request that they delete that data. You
may also have the right to data portability of that data. There may be an administrative
charge for supply of copies of data where permitted by applicable law. These requests
must be made to the Pearson customer or test administrator who administered the test
on the Pearson Platforms. You also have the right to object to continued processing of
your personal data by the Pearson customer or test administrator. If you have a
complaint about the way in which Pearson uses your personal information you have the
right to complain to your relevant local Data / Information Regulator.