Introduction

Metric Mind Limited ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Data Protection Policy explains how we collect, use, disclose, and safeguard your information when you use our aptitude testing services.

We comply with applicable data protection laws, including the Nigeria Data Protection Act (NDPA) and the General Data Protection Regulation (GDPR) where applicable. By using our services, you consent to the data practices described in this policy.

Information We Collect

We collect several types of information to provide and improve our services:

How We Use Your Information

We use the collected information for the following purposes:

• To administer and score aptitude assessments
• To generate comprehensive assessment reports
• To verify test-taker identity and maintain assessment integrity
• To improve our testing methodologies and user experience
• To communicate with you about your assessments and our services
• To process payments and manage your account
• To comply with legal obligations and protect against fraudulent activities

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to fulfill our services to you
• Legal Obligation: Processing required to comply with applicable laws
• Legitimate Interests: Processing for our legitimate business interests while respecting your rights
• Consent: Processing based on your explicit consent for specific purposes

Data Sharing and Disclosure

We may share your information in the following circumstances:

• With Your Consent: When you explicitly authorize us to share your assessment results with employers or educational institutions
• Service Providers: With trusted third parties who assist us in operating our website, conducting our business, or servicing you
• Legal Requirements: When required by law or to respond to legal process
• Business Transfers: In connection with any merger, sale of company assets, or acquisition

We do not sell your personal data to third parties for marketing purposes.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Secure data backup and recovery procedures
• Employee training on data protection and privacy

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Assessment results are typically retained for a period of 5 years to allow for historical comparison and verification.

You may request deletion of your personal data at any time, subject to any legal obligations we have to retain certain information.

Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: You can request copies of your personal data
• Right to Rectification: You can request that we correct any inaccurate or incomplete information
• Right to Erasure: You can request that we delete your personal data under certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your personal data
• Right to Data Portability: You can request a copy of your data in a machine-readable format
• Right to Object: You can object to our processing of your personal data
• Rights Related to Automated Decision-Making: You have rights regarding automated processing and profiling

To exercise any of these rights, please contact our Data Protection Officer using the details provided below.

International Data Transfers

As a global provider of aptitude testing services, we may transfer your personal data to countries outside of Nigeria. When we do so, we ensure appropriate safeguards are in place to protect your data in accordance with this policy and applicable data protection laws.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Changes to This Policy

We may update our Data Protection Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. You are advised to review this policy periodically for any changes.

Last Updated: January 15, 2025