Privacy Policy

1. Who We Are (Data Controllers)

Genius IQ operates through several regional legal entities. The applicable data controller depends on your country of residence:

If you reside in the United States:

If you reside in the United Kingdom:

If you reside in the Europe:

All entities together are referred to as the Genius IQ Group.

2. Data We Collect

We may collect the following categories of personal data:

Information you provide voluntarily:

• Email address
• Name (if provided)
• Responses to assessments and questionnaire data
• Support inquiries
• User feedback or testimonials

Automatically collected data:

• IP address
• Device information (browser, OS, device type)
• Language and region
• Time zone
• Session data
• Referring URL
• Usage activity on our platform

Payment information

Payment processing is handled exclusively by third-party providers such as Stripe. We do not store full card numbers or CVV codes.

We may receive:

• last 4 digits of the card
• card type (Visa/Mastercard/etc.)
• transaction status
• billing country

Data from cookies and tracking technologies

Details about cookies are provided in our Cookie Policy.

3. How We Use Your Data

We use personal data for the following purposes:

• To create and manage your Genius IQ account
• To deliver assessment results and digital content
• To operate, analyze, and improve our services
• To personalize user experience
• To process payments and manage subscriptions
• To detect fraud and prevent abuse
• To comply with legal obligations
• To send transactional emails (e.g., login details, receipts)
• To provide customer support

We do not use your test responses to make automated decisions that have legal or significant effects.

4. Legal Bases for Processing (GDPR / UK GDPR)

We process personal data based on:

• Performance of a contract (providing access to assessments, results, subscription services)
• Legitimate interests (fraud prevention, service improvement, analytics)
• Consent (cookies, marketing where applicable)
• Legal obligations (tax and accounting requirements)

5. Sharing Your Data

We may share data with:

Service providers

• Payment processors (Stripe)
• Hosting and cloud infrastructure
• Analytics and measurement platforms (e.g., Google Analytics)
• Email delivery providers (e.g., Resend)
• Fraud prevention tools

Legal purposes

We may disclose data when required to:

• comply with the law
• respond to valid legal requests
• protect our rights and the rights of users

We do not sell personal data.

6. International Data Transfers

Your data may be transferred and processed in countries outside your residence. We ensure appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs)
• GDPR-compliant transfer mechanisms
• Data processing agreements with providers

7. Data Retention

We retain data only for as long as necessary to:

• provide our services
• comply with legal obligations
• resolve disputes
• enforce agreements

Assessment responses may be stored to maintain your account history.

You may request deletion at any time (see Section 9).

8. Your Rights (GDPR / UK GDPR)

Depending on your region, you may have the right to:

• Access your personal data
• Request correction
• Request deletion (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent (where applicable)

To submit a request, contact: [email protected]

9. California Privacy Rights (CCPA / CPRA)

Residents of California have additional rights:

• Right to know what personal information is collected
• Right to request deletion
• Right to correct information
• Right to opt out of “selling or sharing” personal information
• Right to non-discrimination
• Right to limit use of sensitive information

We do not sell or share personal data as defined by the CCPA.

You may exercise your rights by contacting: [email protected]

10. Children’s Privacy

Genius IQ does not knowingly process data of individuals under 16 years of age. If you believe we have collected such data, please contact us.

11. Security

We take appropriate technical and organizational measures to protect your data, including:

• Encryption
• Access controls
• Network protections
• Regular monitoring

No method of transmission is 100% secure.

12. Your Contact Point for Privacy

For any privacy-related questions or requests:

Email: [email protected]

Applicable data controller: see Section 1.

13. Changes to This Policy

We may update this Policy from time to time.

Updates become effective when posted.

14. Contact Details

If you have data protection concerns or wish to exercise your rights:

Email: [email protected]

Regional data controller: see Section 1.