Mint.Psychometrics

Candidate privacy notice

This notice explains what personal data we handle when you complete a Mint Psychometrics assessment, why we handle it, how long we keep it and what rights you have.

It should be read alongside the privacy information provided by the organisation that invited you, and our approach to fair assessment.

Who we are and our role

Mint Psychometrics provides assessment tools and reporting to organisations that use them as part of their selection, development and benchmarking processes.

  • In most cases the organisation that invited you to complete an assessment is the data controller. It decides why you are being assessed and how the results are used.
  • Mint Psychometrics normally acts as a data processor for that organisation, handling assessment data on its documented instructions.
  • Where we use limited, de-identified data for our own validation and quality work, we act as a controller for that narrow purpose.

If you are unsure which organisation invited you, contact the recruiting or hiring team you have been dealing with, or use the contact route at the end of this notice.

The data we collect

Identity and contact data

Provided by the organisation inviting you, or by you:

  • name and email address
  • the role or programme you are being assessed for
  • the organisation you are associated with
  • any reasonable adjustment requirements you tell us about

Assessment data

Created when you complete an assessment:

  • your responses to scenarios, forced-choice blocks, reasoning items, ranking tasks and written questions
  • section timings, progress, pauses and completion status
  • scores, indicators, evidence extracts and report narrative generated from your responses

Technical and integrity data

Collected automatically to keep the assessment secure and comparable:

  • device and browser type, and approximate session timing information
  • assessment session events such as page focus changes, copy or paste activity and interruptions
  • audit records of who accessed a report and when

Diversity data, where collected

Some organisations ask for diversity information to monitor fairness. Where this is collected it is optional, kept separate from your assessment responses, is not visible to assessors or hiring managers, and is never used in scoring.

How we use your data

Assessment data is used only for legitimate assessment purposes, specifically to:

  • deliver the assessment to you and save your progress
  • score responses and generate a report for the organisation that invited you
  • support human review of any AI-assisted scoring before results are finalised
  • monitor reliability, validity, item performance and fairness
  • investigate technical issues you report to us
  • maintain security, audit trails and assessment integrity

We do not sell your data, use it for advertising, or use it to build profiles unrelated to the assessment you completed.

Lawful bases for processing

Where UK GDPR or EU GDPR applies, processing is carried out on one or more of the following bases:

  • Legitimate interests — assessing candidates fairly and consistently for a role, and maintaining the quality and security of our assessments.
  • Contract — taking steps at your request, or the organisation's request, prior to entering into a contract of employment or engagement.
  • Consent — where you volunteer optional information such as diversity data or reasonable adjustment details.
  • Legal obligation — where we must retain or disclose information to comply with the law.

Where consent is the basis, you can withdraw it at any time without affecting processing already carried out.

Automated processing and human review

Some scoring is automated, and some written responses are scored with AI assistance. This is governed carefully.

  • No hiring decision is made solely by automated means. Results are reviewed by a person before they are released and are considered alongside interviews and other evidence.
  • AI-assisted scoring models and prompts are version controlled, and material changes are reviewed before use.
  • We do not analyse facial expression, voice, accent or personal characteristics unrelated to the role.
  • You can ask for human intervention, express your point of view, and contest a result you believe is inaccurate.

Who we share data with

  • The organisation that invited you, and the specific people within it who are authorised to see assessment outcomes.
  • Partner platforms that deployed the assessment on that organisation's behalf, where the organisation has authorised the integration.
  • Service providers who host, secure and operate the platform under contract, including cloud hosting, database, email delivery and AI scoring providers.
  • Regulators, advisers or authorities where we are legally required to disclose information.

Providers act on our instructions under written terms, may only use the data to deliver their service, and are not permitted to use assessment content to train their own general-purpose models.

International transfers

Our platform and service providers may process data outside the UK or European Economic Area. Where that happens, transfers are made under a UK adequacy decision or with appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses, together with additional technical and organisational measures.

How long we keep data

  • Assessment responses, scores and reports are retained for the period agreed with the organisation that commissioned the assessment, typically 12 to 24 months from completion.
  • Audit and access logs are retained for the period needed to evidence governance and security.
  • Data may be retained for longer where required by law or where a dispute or legal claim is live.
  • Data used for validation and quality analysis is de-identified so that it no longer identifies you.

When retention periods end, data is deleted or irreversibly de-identified.

How we protect your data

  • encryption of data in transit and at rest
  • role-based access controls and least-privilege administration
  • row-level security so organisations can only reach their own data
  • separation of identity data from assessment response data where appropriate
  • audit logging of report access and administrative actions
  • regular review of access rights and platform security

Your data protection rights

Subject to the conditions in data protection law, you have the right to:

  • be informed about how your data is used
  • request access to a copy of your personal data
  • request correction of inaccurate or incomplete data
  • request erasure of your data in certain circumstances
  • request restriction of processing, or object to processing based on legitimate interests
  • request portability of data you provided to us
  • withdraw consent where consent is the basis for processing
  • request human review of, and contest, an assessment outcome

Because the organisation that invited you is usually the controller, requests are normally handled by them and we will support them in responding. You can also raise a request with us and we will pass it on promptly.

If you are not satisfied with how a request has been handled, you can complain to the Information Commissioner's Office (ico.org.uk) or to the supervisory authority in your country.

Cookies and local storage

The assessment platform uses only cookies and browser storage that are strictly necessary to run a session: keeping you signed in, holding your place in an assessment, saving progress and protecting against misuse. We do not use advertising or third-party tracking cookies on candidate-facing assessment pages.

Changes to this notice

We review this notice periodically and update it when our processes, providers or legal obligations change. Where a change materially affects candidates, the organisations we work with are informed so that their own candidate communications stay accurate.

Contacting us

For any question about this notice, a data protection request, a reasonable adjustment or a technical issue, use our contact form and tell us the assessment you were invited to complete. We aim to acknowledge requests within five working days and respond substantively within one month.

Contact the assessment team