YOUR INFORMATION AND YOUR RIGHTS

How we collect, use and protect personal information

Robust Digital Expert Limited respects your privacy. This notice explains what personal information we collect, why we use it, how long we keep it and the rights available to you.

Last updated: 25 October 2026

INFORMATION WE COLLECT

Personal information may include

YOUR DATA PROTECTION RIGHTS

You can ask us to take action concerning your information

These rights are subject to legal conditions and exemptions. We may need to verify your identity before completing a request. Exercising a right will normally be free of charge.

We do not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

QUESTIONS AND COMPLAINTS

Contact us first so we can address your concern

Email core.desk@robustdigital.expert if you have a privacy question, want to exercise a right or believe that we have not handled your information properly.

You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data protection regulator. Visit ico.org.uk/make-a-complaint for current guidance.

Career Discovery: your answers and private report

New Career Discovery assessments are for adults aged 18 or over. We ask you to confirm this without collecting your date of birth. People under 18 can browse learning information without taking this assessment. The age change does not remove existing candidates’ rights to access, export, withdraw analytics permission or request deletion of retained assessments.

For new assessments, we collect your selected interests, experience, self-reported skills, scenario choices and learning preferences, plus brief explanations where you select Other. Optional written reflections stay in your browser and are not submitted or included in the server-generated report. You can download those reflections as a text file from the review screen. They do not affect role ranking or request adviser review. Avoid health histories, passwords, names and confidential information, including in Other explanations. Earlier assessments may contain optional text submitted under the previous version until removed under their applicable retention or rights process.

When you submit a new assessment, we store your fixed-choice answers, necessary Other explanations, suggested directions, questionnaire and model versions, completion and expiry information, adult-age confirmation and analytics choice. If you are signed in, the assessment also contains your internal RDE account identifier. It has a record identifier before you register for a report.

For a private report, we collect your name and email address and information needed to verify and protect access. An email address is needed to send the verification link. Report registration does not create a website account or subscribe you to marketing. The one-use verification link expires after 30 minutes. Verified report access lasts up to one hour, after which fresh verification may be needed.

Lawful basis for the requested assessment and report: legitimate interests in providing the voluntary career exploration service you request and protecting private access against misuse. You can object to this processing by contacting core.desk@robustdigital.expert. We will consider your circumstances and the applicable legal requirements.

Website sessions and abuse-prevention controls support the service. Abuse controls use hashed identifiers derived from information such as email addresses or IP addresses. Hashing does not necessarily make information anonymous. Website, email and hosting systems may also process access and security logs.

How career suggestions are produced

Career matching is automated profiling. The current rules-based model combines selected interests, self-reported skills and scenario responses, with component weights of 40%, 30% and 30%. If a component has no usable evidence, the model uses the available components. A dislike adjustment may lower a role ranking. Free-text answers and support or equipment preferences do not determine the role ranking.

The report suggests three career directions and relevant learning routes. Suggestions are provisional exploration guidance, not verified competence, a psychometric diagnosis or a guarantee of employment or earnings. The tool itself does not decide admission, funding, benefits or employment. You can explore another direction or contact RDE to discuss the suggestions.

Your optional course-improvement analytics choice

With your separate consent, your assessment may contribute to analysis used to review learning needs and courses. This choice is optional and off by default. Refusing or withdrawing it does not remove your private report access.

Restricted staff dashboards and exports use selected fixed-choice preferences, suggested directions and development priorities. They exclude names, email addresses and free-text answers. Groups below five assessments are suppressed. Counts represent assessments, not necessarily different people. These controls do not make the underlying assessment records anonymous.

Change your choice through Manage my assessment data after verifying access to the relevant report, or contact us. Withdrawal excludes the assessment from future dashboard and export calculations. Previously exported copies cannot be recalled automatically; contact us about those copies. Withdrawal does not make earlier consent-based processing unlawful. This permission is separate from cookie choices and marketing permission.

Assessment retention, deletion and recovery

Completed assessments expire 365 days after creation. Linked report registrations expire with the assessment. Expired assessments are unavailable for report access and are removed with related registration records by scheduled cleanup. Cleanup runs periodically, rather than deleting at the exact second of expiry.

Through Manage my assessment data, you can download your assessment information and delete the assessment and its related report registration after verifying access. You can also contact us for access, correction, objection or deletion requests. Deleting an assessment does not automatically remove unrelated enquiries, accounts, learning or financial records.

We keep a separate protected record of deletion requests and analytics choices to prevent restored backups from silently reinstating deleted assessments or outdated analytics permissions. It contains limited reference and verification information rather than your name, email address or answers. Our policy is to retain relevant recovery records while backups can reintroduce the assessment or permission, then review removal after a further 30 days, subject to documented rights or legal holds. We review recovery-record and snapshot retention monthly. We do not remove a still-needed journal entry merely because a snapshot is old.

Backup copies may persist after live records are removed. They have restricted access, and our recovery procedure requires deletion and analytics-choice safeguards to be applied before restored data returns to service. Live assessment expiry does not mean every backup copy is immediately erased. Browser-saved drafts and copies of reports you download are separate from the server-held assessment; see our Cookies page for draft controls.

Our United States hosting arrangements

Our website, database and hosting email services use HostDime Global Corporation in the United States. HostDime has confirmed in writing that it acts as processor for hosted personal information and that the UK Extension to the EU-US Data Privacy Framework covers this processing.

For covered transfers to an actively certified organisation, the UK Extension provides an adequacy route. Certification scope and status are subject to supplier review. You can ask us for information about the applicable transfer safeguards. The official participant register is at dataprivacyframework.gov/list.

HostDime states that hosted drives are retained and archived for 30 days after service termination and then wiped. This hosting-termination period is separate from our normal assessment retention. Its separate retention of information about its own customer relationship and communications for at least five years does not mean RDE keeps every candidate assessment for five years.

Encrypted copies of our limited deletion and analytics-choice register are also downloaded to an RDE-controlled device in the United Kingdom. These copies do not constitute a complete off-server backup of the website or assessment database.

Facebook sign-in and data deletion

When you choose Facebook sign-in, we receive your Facebook account identifier and the basic profile information and email address made available through the permissions you grant. We use this information to create or identify your RDE account and personalise your account experience.

To request deletion of your Facebook-linked RDE account or information received through Facebook Login, email core.desk@robustdigital.expert with the subject “Facebook data deletion request”. Identify your RDE account and explain whether you want the Facebook connection removed or the entire RDE account deleted. Do not send passwords or access tokens.

We may verify your identity before acting. We will explain any information that must be retained, the reason and the applicable retention period.

You can also remove RDE Website Sign-in through Facebook’s Apps and Websites settings. Removing the connection stops future access through that connection but does not itself delete information already held by RDE.