Privacy Policy

1. Who we are

Pathfinder is a psychometric career-assessment platform operated by [Operator legal name], [registration number], of [address], South Africa (“we”, “us”). We are the responsible party for the personal information processed through this platform. For privacy queries, contact [privacy@yourdomain].

2. Information we collect

• Account details — name, email address, and role (individual, school, or business).
• Assessment responses and the computed psychometric results derived from them.
• For learners — first/last name, optional student number, and class membership.
• For candidates — name, optional email, and the role you applied to assess for.
• Technical data — limited request metadata used for security and rate limiting.

3. How we use it

We process personal information to deliver assessments, generate results and reports, share results with the relevant school or employer who invited you, maintain security, and meet legal obligations. Assessment scores are computed on our servers from your answers.

4. Lawful basis & consent

We rely on your consent and, where applicable, the legitimate interests of the school or employer who invited you. Where a learner is under 18, a parent or guardian must consent on their behalf before the assessment is taken.

5. Sharing

Learner results are shared with the learner’s school and teacher. Candidate results are shared with the inviting employer. We use Supabase (hosting and database) and Adzuna (job listings) as processors. We do not sell personal information.

6. Retention

We keep personal information only as long as necessary for the purposes above or as required by law, after which it is deleted or anonymised.

7. Your rights under POPIA

You may request access to, correction of, or deletion of your personal information, object to processing, and lodge a complaint with the Information Regulator of South Africa. To exercise these rights, contact [privacy@yourdomain].

8. Security

We apply technical and organisational measures including encrypted transport, row-level access controls, and least-privilege server credentials to protect personal information.

9. Changes

We may update this policy; material changes will be posted on this page.