Privacy Policy – Intellestis IQ Test (GDPR & CCPA Compliant)

Last updated: August 4, 2025

This Privacy Policy explains how we collect, use, and protect your personal data when you visit www.iqtests.co and use the services offered by Intellestis, a brand of Alcade Investments Limited, located at Andrea Mantole 2/301, Agios Athanasios 4105, Limassol, Cyprus (“we”, “us”, or “our”).

We process your personal data in accordance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Data Controller

Alcade Investments Limited

Andrea Mantole 2/301
Agios Athanasios 4105
Limassol, Cyprus
Email: privacy@iqtests.co

2. What Data We Collect

We collect the following types of data:

a. Provided by you

  • Email address
  • Test answers and results
  • Subscription activity (e.g. start, cancellation)
  • Cookie and consent preferences

b. Automatically collected

  • IP address
  • Browser and device data
  • Session behavior (e.g. clicks, scrolls) via Hotjar
  • Traffic source and usage via Google Analytics
  • Consent logs via Usercentrics

3. Purpose and Legal Basis for Processing

PurposeLegal Basis
Access to IQ test and dashboardContract (Art. 6(1)(b))
Subscription/payment processingContract
Test improvement & UX optimizationLegitimate interest (Art. 6(1)(f))
Analytics & remarketingConsent (Art. 6(1)(a))
Legal/tax complianceLegal obligation (Art. 6(1)(c))

4. Tracking Technologies

We use the following tools:

  • Usercentrics – For cookie consent management (GDPR compliant)
  • Google Analytics & Ads – For website performance and marketing (with IP anonymization)
  • Hotjar – For behavioral insights (anonymized sessions)

All tools are activated only with your explicit consent via the cookie banner.

5. Payment Processing & PCI-DSS Compliance

Payments are handled by a PCI-DSS compliant payment provider. We do not store or access your credit card or banking data. Payment information is encrypted and securely processed in compliance with global financial standards.

6. Data Sharing

We do not sell, rent, or share your personal data with any third parties.
Your data is used solely by Intellestis to provide you with the service, manage subscriptions, and improve the test and user experience.
We will never use your data for third-party marketing or profiling.

7. Data Storage and Security

Your data is stored on encrypted servers located within the European Economic Area (EEA). We apply bank-level security measures, including:

  • Full HTTPS encryption (TLS 1.2 or higher)
  • Encrypted storage (AES-256)
  • Access control with role-based permissions
  • 2FA for internal systems
  • Routine security updates and vulnerability scans

We implement security best practices to prevent unauthorized access, loss, or misuse of your data.

8. International Transfers

Some third-party tools (e.g. Google, Hotjar) may process limited data outside the EU.
We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs)
  • Vendor security certifications
  • Data minimization and pseudonymization where applicable

9. Data Retention

We retain your data only as long as necessary, or as required by law:

  • Subscription/account data: up to 7 years (legal obligation)
  • Test results: indefinitely for internal improvement, unless deletion is requested
  • Analytics: max 14 months
  • Consent records: 5 years (legal documentation requirement)

Once data is no longer needed, it is securely deleted or anonymized.

10. Your Rights Under GDPR

You have the right to:

Access your data (Art. 15)
Rectify incorrect data (Art. 16)
Request deletion (Art. 17)
Restrict/oppose processing (Art. 18–21)
Withdraw consent (Art. 7)
Receive a data copy (Art. 20)
Lodge a complaint with a supervisory authority (Art. 77)

To exercise your rights, contact: privacy@iqtests.co

11. Your Rights Under CCPA (California)

California residents may:

  • Access or delete their personal data
  • Request information about data use and sharing
  • Opt out of data sales (we do not sell data)
  • Exercise rights without discrimination

Send CCPA requests to: privacy@iqtests.co

12. Supervisory Authority (EU)

You may lodge a complaint with your local authority or:

Commissioner for Personal Data Protection (Cyprus)

www.dataprotection.gov.cy

13. Children’s Data

Our services are intended for users aged 16 or older. We do not knowingly process data of minors under 16 without verified parental consent.

14. Changes to this Policy

We may update this Privacy Policy periodically. The “Last updated” date reflects the most recent revision.
Any material changes will be clearly indicated on our website.

15. Contact Us

Alcade Investments Ltd – Intellestis

Andrea Mantole 2/301
Agios Athanasios 4105, Limassol, Cyprus

Email: privacy@iqtests.co