Privacy Policy

1. General Information

This Privacy Policy defines the principles of personal data processing and privacy protection for users of MindLabIQ.com (hereinafter: “Service”). The personal data administrator is MindLab IQ (hereinafter: “Administrator”).

2. Scope of Collected Data

We collect the following data:

• Email address (only from Stripe side)
• Test answers (responses you provide during the IQ test)

3. Purpose of Data Processing

We process your data for the following purposes:

• Providing access to the test and generating your results
• Sending your results and related materials via email
• Customer support and responding to inquiries
• Anonymous, aggregated statistical analysis to improve assessment quality
• Ensuring the security and proper functioning of the Service

4. Legal Basis for Processing

We process personal data based on:

• Consent (Art. 6(1)(a) GDPR) — e.g., receiving results and communications
• Contract necessity (Art. 6(1)(b) GDPR) — to deliver the test and results you request
• Legitimate interests (Art. 6(1)(f) GDPR) — aggregated analytics, service security, and improvement

5. Data Storage

We retain email addresses and test answers only as long as necessary to provide the Service, improve it, and meet legal or accounting requirements, or until you withdraw consent where applicable.

6. User Rights

You have the right to:

• Access your personal data
• Request rectification of inaccurate data
• Request erasure of data (“right to be forgotten”)
• Restrict or object to processing in specific cases
• Data portability (where technically feasible)
• Withdraw consent at any time (does not affect prior lawful processing)

To exercise these rights, contact us at main@mindlabiq.com.

7. Data Sharing

We do not sell your personal data. We may share data with trusted processors solely to provide the Service (e.g., secure hosting, email delivery, analytics). These processors act on our instructions and are bound by appropriate data protection agreements. We may also disclose data when required by applicable law or lawful requests from public authorities.

8. Cookie Policy

We use cookies and similar technologies to ensure basic functionality, improve performance, and analyze usage. You can manage cookie preferences in your browser settings. Disabling certain cookies may affect site features.

9. Traffic Analysis

We use analytics tools such as Google Analytics to understand how the Service is used and to improve user experience. These tools may set cookies and collect usage data in an aggregated manner. For details on how Google processes data, please refer to Google’s Privacy Policy. You can opt out of Analytics cookies via your browser settings or available opt-out mechanisms.

10. Optional IQ Test Calibration Data

10.1 Purpose of calibration

MindLabIQ continuously evaluates its assessment to improve question quality, scoring methods, reliability, and the accuracy of estimated results. You may voluntarily allow us to store information about how you completed the IQ test for research and calibration purposes.

Calibration data may be used to:

• evaluate whether questions are too easy or too difficult;
• identify unclear, misleading, or poorly performing questions;
• measure how well questions distinguish between different performance levels;
• evaluate completion times and response patterns;
• improve the accuracy and reliability of future scoring methods;
• compare performance across broad language and age groups;
• develop statistical norms after sufficient data has been collected.

10.2 Participation is optional

Participation in calibration is entirely optional. Calibration data is collected only when you actively select the calibration consent checkbox before beginning the test.

Refusing or withdrawing calibration consent does not affect:

• your ability to complete the test;
• your estimated result;
• the price of any product or report;
• your payment options;
• your access to purchased content.

10.3 Information we may store

When you provide consent, the calibration record may contain:

• the version of the test you completed;
• the identifiers of the questions presented to you;
• the answer option selected for each question;
• whether each response was correct or incorrect;
• the amount of time spent on each question;
• the total test-completion time;
• whether the test ended because the timer expired;
• the order in which questions were presented;
• your selected broad age band;
• whether English is your native language;
• an optional two-letter country code;
• the applicable consent version;
• the date and time the contribution was received;
• the scheduled deletion date for the record.

10.4 Information excluded from the calibration database

The calibration system is designed not to store the following information inside the calibration record:

• your name;
• your email address;
• your telephone number;
• your postal address;
• your payment-card information;
• your Stripe payment-session identifier;
• your purchased report identifier;
• your advertising identifier;
• your cookie identifier;
• your browser local-storage identifier;
• your browser user-agent string;
• your IP address as a field in the calibration database;
• your displayed IQ estimate or percentile.

Hosting, security, and infrastructure providers may temporarily process technical information such as IP addresses in ordinary server, network, or security logs. These infrastructure logs are separate from the IQ calibration database and may be retained according to the provider’s security and operational policies.

10.5 Legal basis

The legal basis for storing your optional calibration contribution is your consent under Article 6(1)(a) GDPR. You may choose not to provide consent and may withdraw it without affecting the lawfulness of processing carried out before withdrawal.

Calibration consent is separate from consent for:

• analytics cookies;
• advertising technologies;
• Meta Pixel;
• Google Analytics;
• email marketing;
• promotional communications.

10.6 Storage and security

Calibration data is transmitted through an encrypted HTTPS connection and stored in a protected PostgreSQL database. Access is restricted to authorised systems and persons who require access for test development, security, maintenance, or statistical analysis.

Safeguards may include:

• encrypted network connections;
• server-side validation of submitted records;
• restricted database permissions;
• private database credentials stored outside the public website code;
• request-origin restrictions;
• rate limiting and abuse protection;
• access controls for administrative accounts;
• automatic retention and deletion procedures;
• separation of calibration information from payment information.

No online storage system can be guaranteed to be completely secure. Nevertheless, MindLabIQ takes reasonable technical and organisational measures designed to prevent unauthorised access, alteration, disclosure, or destruction.

10.7 Retention period

Individual calibration records are scheduled for deletion no later than 24 months after collection, unless a shorter period is required by law or the record is deleted earlier following a valid withdrawal request.

Statistical summaries and aggregated results that no longer identify or single out an individual test attempt may be retained for longer for research, test development, and historical comparison.

10.8 Deleting your contribution

After a calibration contribution is successfully stored, your browser may receive a random deletion token. This token allows the associated calibration record to be deleted without requiring your name or email address.

The deletion token is stored only in your browser. Clearing browser data, using private-browsing mode, changing devices, or changing browsers may remove the token. MindLabIQ may be unable to identify a specific contribution without the deletion token because calibration records are not linked to names or email addresses.

10.9 Service providers

Calibration data may be processed using service providers that supply website hosting, server functions, database hosting, security, monitoring, or related infrastructure. These may include:

• Vercel for website hosting and server functions;
• Neon or another managed PostgreSQL provider for database storage;
• security and monitoring providers used to prevent abuse and maintain availability.

10.10 International processing

Where a service provider processes information outside the European Economic Area, appropriate safeguards will be used where required by applicable law. These safeguards may include contractual protections or other recognised transfer mechanisms.

10.11 Your data-protection rights

Depending on applicable law, you may have the right to request access, correction, deletion, restriction, portability, or information about processing, and to withdraw consent or lodge a complaint with a competent supervisory authority.

Because calibration records are intentionally not linked to a name or email address, MindLabIQ may require the deletion token or sufficient technical information to locate a specific contribution. We may be unable to identify an individual calibration record when no such information is available.

10.12 Data controller and contact

11. Contact

For questions about this Privacy Policy or your personal data, contact us at: main@mindlabiq.com