playbox gdpr commitment

Commitment Statement

Playbox Consultancy is committed to the highest standards of data protection. We process candidate data under the UK GDPR, applying principles of transparency, purpose limitation, and data minimisation.

• Candidate assessment responses (scored for Psychological Safety, Collaboration and Goal-orientation).
• Demographic data (separated from employer-facing exports).
• Unique pseudonymised candidate ID. 
• No names, personal addresses, or contact details stored. 

• Employers receive an export with scores and candidate profiling only (pillar percentages + subdimensions + interpretation bands).
• Demographics are excluded from employer's CSVs by design.
• Each candidate is linked to an organisation-assigned ID (so you, the client, can reconcile results internally, without Playbox holding identifiers). 

• Data access is controlled by organisation-specific keys (download keys). 
• Employers only see their own cohort's data.
• Data is hosted securely: currently on Pythonanywhere EU servers. 

• Candidates can see their results instantly after completing the test. 
• Each candidate is issued a unique ID they can quote if they want their data erased or amended.
• As Data controller, Playbox will handle such requests in line with GDPR. 

• Pseudonymised results are retained for research and validation. 
• Special category data (demographics) is stored separately, and not shared with you, the client.
• Candidates may request deletion of identifiable or pseudonymised records via email. 

• Data Controller contact details: connection@playbox-consultancy.com. 
• Contact the ICO (Information Commissioner's Office) for complaint rights.