Privacy policy

The Official IQ Test is an online cognitive-assessment service, and a tradename (handelsnaam) of The Sales Factory B.V., registered with the Dutch Chamber of Commerce (KvK 94473102). Personal data enters at three points: when you take a test, when you open an account, and when you pay for a subscription. This policy sets out what happens to it. We work in line with the EU General Data Protection Regulation (GDPR) and, for residents of California, the California Consumer Privacy Act (CCPA).

Disagreeing with any part of this policy is a fair reason to stop using the service. If you carry on using it, these practices apply to you.

We collect only what running the service requires. It groups like this:

• Account details: the name and email address you register with, and optional details such as date of birth or gender, which let us norm a test to you.
• Your results: the score, the category breakdown, and the answer-level detail a test produces. This is what your report is built from.
• How you use the service: pages opened, time spent on a test, the answers given, and technical signals such as device, browser, IP address, and timestamps.
• Payment details: the billing information entered at checkout. Stripe processes card payments, and full card numbers never reach our servers.
• Cookies and similar signals: small identifiers that hold your session open and show us how the service is used. The Cookies section below sets them out in full.

Every use of your data answers to one of these purposes:

• Running the service: scoring tests, producing reports, and keeping your account working.
• Improving it: finding what is slow or confusing, fixing it, and deciding what to build next.
• Staying in touch: account and billing notices, replies to your questions, and, where you have allowed it, occasional product news.
• Handling payments: taking payment, running your subscription, and resolving billing questions.
• Meeting legal duties: complying with the law, enforcing our Terms, and preventing fraud and abuse.
• Understanding trends: combining data into anonymous, aggregate figures that no longer identify anyone.

We do not sell your personal data. We share it only with the partners needed to run the service, and only for that work:

• Payment processing: Stripe handles card transactions under its own PCI-DSS-compliant controls.
• Analytics: tools such as Google Analytics show us usage patterns, each operating under its own terms.
• Advertising: we may share hashed (irreversibly scrambled) email addresses with ad platforms such as Google Ads Customer Match, so that we can reach people who have shown interest and measure whether our ads work. In this Google acts only as our processor and does not add the data to its own profile of you. Our legal basis is legitimate interest, Article 6(1)(f) GDPR, and you may object at any time (see Your Privacy Rights).
• Legal reasons: we may disclose data where the law, a court order, or the prevention of fraud requires it.
• A change of ownership: if the business is sold or merged, your data may transfer with it. We will tell you before that happens.

Every processor we use is contractually bound to protect your data and to use it only for the work we engaged them to do.

Cookies are small files your browser stores on our behalf. We group them by what they do:

• Essential: these hold your session and keep the service secure. The service cannot run without them.
• Analytics: these show us, in aggregate, how the service is used. You can turn them off in your browser.
• Preference: these remember choices such as your language, so you do not set them again every visit.

Your browser can review, block, or clear cookies at any time. Blocking the essential ones will break parts of the service.

We protect your data with measures matched to how sensitive it is:

• Encryption in transit: TLS encrypts passwords and payment details while they move.
• Guarded storage: data rests on access-restricted systems, reviewed regularly.
• Need-to-know access: personal data is reachable only by staff with a genuine reason to see it.
• Ongoing upkeep: systems stay patched, and we test them for weaknesses.

No system on the internet is ever completely secure, and we will not pretend otherwise. What we can commit to is continuing, genuine effort to keep your data safe.

Where you live decides which of these apply, but GDPR, the CCPA, and comparable laws give you rights over your data:

• Access: request a copy of everything we hold about you.
• Correction: have inaccurate or incomplete details put right.
• Deletion: ask us to erase your data, within the limits the law sets.
• Export: receive your data in a portable, machine-readable format.
• Withdraw consent: take back any permission you have given, at any time.
• Object: require us to stop certain processing, direct marketing included.
• Opt out of ad targeting: have your details taken out of advertising audiences such as Google Ads Customer Match.

To exercise any of these, reach us using the details below. We reply within 30 days, and sooner where the law requires it. Exercising a CCPA right never costs a California resident anything or changes how we treat them.

The Official IQ Test is not built for children under 13, and we do not knowingly collect their data. If we discover that a child under 13 has given us personal data, we delete it and close the account. Between 13 and 18, some regions require a parent or guardian to give permission first. A parent who believes their child has shared data with us should contact us so we can put it right.

This policy can change as the service, the technology, or the law changes. New versions are posted here, with the date at the top updated. Using the service after a change means the updated policy applies to you, so it is worth a look now and then.

For a privacy question, or to exercise any right above, email us at support@salesfactory.media.

The Official IQ Test is a tradename (handelsnaam) of The Sales Factory B.V., registered with the Dutch Chamber of Commerce (KvK 94473102).

If we cannot settle your concern, you have the right to complain to your local data-protection authority.

See also our Terms of Service and Refund Policy.