Privacy policy

This policy explains how the personal data of users of the Testogen online testing platform (hereinafter, the Platform) and of test takers is processed. The policy is based on the requirements of the Law of the Republic of Uzbekistan «On Personal Data».

1. Who is responsible for the data

There are two parties on the Platform:

• The organisation (a school, university, centre or company) creates tests, determines what information is requested from respondents and uses the results. The organisation is the owner of respondent data.
• The Platform operator provides the service and processes data on the organisation's instructions, solely for the purpose of providing the service.

2. What data is collected

• Account data: the name, email address, hashed password and role of the organisation's staff members.
• Respondent data: the fields requested by the organisation at the start of a test (for example, name, group or email address) and the answers given.
• Technical data: IP address, browser type, and the times a test was started and finished; where integrity controls are enabled, events such as switching to another window.
• Enquiries: messages sent via the contact form.

The Platform does not collect any respondent data not requested by the organisation, does not track users for advertising purposes and does not sell data.

3. Why the data is used

• To deliver tests, score answers and present results to the organisation.
• To issue certificates and enable verification of their authenticity.
• To ensure the security of the service, including the prevention of fraud and unauthorised access.
• To send users service notifications (for example, that a result is ready).

4. Retention period

Data is retained for as long as the organisation's account remains active. The organisation may delete results at any time. When an account is closed, the data is deleted or anonymised after the periods prescribed by law have elapsed.

5. How the data is protected

• The connection between the browser and the server is encrypted (HTTPS).
• Passwords and group passwords are stored as irreversible hashes.
• Results are visible only to staff members of the organisation with the appropriate permissions; actions are recorded in an audit log.
• In accordance with the law, the personal data of citizens of the Republic of Uzbekistan must be stored on servers located within the territory of Uzbekistan; the operator hosts the service accordingly.

6. Disclosure to third parties

Data is disclosed to third parties only in cases provided for by law or, under a contract, to providers necessary for delivering the service (for example, an email delivery service).

7. Your rights

You have the right to access the data held about you, to request its correction or deletion, and to withdraw your consent to its processing. As a respondent, please first contact the organisation that administered the test; for any other questions, write to support@testogen.uz.

8. Cookies

The Platform uses only strictly necessary cookies: to keep you signed in, to resume a test attempt and to remember your language choice. No advertising or analytics cookies are used.

9. Changes

When this policy changes, the new version will be published on this page. Organisation owners will be notified of material changes by email.