TesTrac Privacy Policy

Last updated: May 12, 2026

TesTrac.com, LLC. (“TesTrac.com”) respects your privacy and is committed to protecting it through our compliance with this policy.

This policy describes the types of information we may collect from you or that you may provide when you visit the website https://testrac.com (our “Website”), or any assessment or testing site created by or on behalf of authorized clients, who have engaged us to provide our services (“Client Testing Site”), and our practices for collecting, using, or disclosing that information.

It is important to read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, you may choose not to use our Website or a Client Testing Site.

By using either our Website or a Client Testing Site, you agree to this privacy policy and our treatment of your information as described in this policy.

1. Lawful Basis for Processing

We process your personal data based on the following legal bases:

Contractual Necessity: When you use our services, we process your data to fulfill our contractual obligations to you, such as providing testing services.
Legitimate Interests: We may process your data for our legitimate business interests, such as improving our services, preventing fraud, or ensuring network and information security, provided these interests do not override your rights and freedoms.
Legal Obligations: We may process your data to comply with legal obligations, such as responding to legal requests.
Consent: In certain cases, we may process your data based on your explicit consent. You have the right to withdraw your consent at any time.

2. Personal Data We Collect

Generally, we collect your personal data, such as your name, postal address, email address, phone number, state, nationality, or other identifiers (“Personal Information”) for the purposes of conducting our services through the Website or a Client Testing Site.

We may also collect Personal Information to comply with legal obligations or for a legitimate business purpose. You directly provide us with most of the data we collect. For example, a candidate visiting our Website or a Client Testing Site may provide Personal Information when registering for an exam or contacting us for customer service purposes.

We may also collect certain test attempt, test item, and assessment data when a candidate takes an exam, such as test responses or test reports (“Testing Data”). We may collect this data to register a candidate for an exam, administer our testing services, process test results, or for another legitimate business purpose designed to securely administer our services.

We also use Personal Information or Testing Data to provide information or services you request from us, or for any other purpose with your consent.

3. Data Minimization and Purpose Limitation

We collect only the personal data necessary for the specified purposes. We do not collect excessive data or use your data for purposes incompatible with those stated in this policy.

4. Data Sharing and Disclosure

We DO NOT share Personal Information, Credit Card information, or Testing Data with unauthorized parties. We do not sell Personal Information or Testing Data.

Data you provide through our Website or a Client Testing Site will be visible to you, the TesTrac.com team, or TesTrac.com’s authorized clients who have engaged us to provide our services (“Client”).

We may share Personal Information or Testing Data with Clients in conjunction with the administration or processing of tests and test results.

We may disclose Personal Information if releasing this information is reasonably necessary to comply with the law, enforce or apply the terms of any of our user agreements, or protect the rights, property, or safety of TesTrac.com, our users, or others.

5. Data Subject Rights

You have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten): You can request that we delete your personal data under certain circumstances.
Right to Restriction of Processing: You can request that we restrict the processing of your personal data under certain circumstances.
Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format and have it transmitted to another controller.
Right to Object: You can object to the processing of your personal data under certain circumstances, including processing based on legitimate interests or direct marketing.
Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless it is necessary for a contract, authorized by law, or based on your explicit consent.

To exercise these rights, please contact us using the contact information provided below.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention period will vary depending on the type of data and the purposes for which it is processed.

7. Data Security

We have implemented appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction.

8. International Transfers

If we transfer your personal data outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to protect your data.

9. Children's Privacy

Our services, this Website, and Client Testing Sites are not intended for children under 16 years of age. No one under age 16 may provide any Personal Information to us through the Website or a Client Testing Site.

We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on this Website or on any Client Testing Site or through any of its features, register on the Website or on any Client Testing Site, or provide any Personal Information.

If we learn that we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information.

If you believe we might have any information from or about a child under 16, please contact us.

10. Right To Complain

You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.