Privacy Policy
Last updated: 30/08/2026
1. Who we are
Test Assurance Ltd (“we”, “us”, “our”) provides IT quality, risk and assurance consultancy services. We are the data controller for the personal data described in this notice.
- Registered company name: Test Assurance Ltd
- Registered in: England and Wales
- Company number: 08779256
- Registered office and correspondence address: 124 City Road, Suite G4005, London, EC1V 2NX
- Contact for data protection matters: admin@testassurance.co.uk
This notice explains what personal data we collect through our website and services, why we use it, who we share it with, and what rights you have over it.
2. The personal data we collect
When you contact us. Through our contact form or by email: your name, email address, organisation, job role where you give it, and the content of your message.
When you call us. Our telephone line is answered by a call handling service acting on our behalf. They record your name, your number, and the substance of your message, and pass it to us.
When you book a call. Our “Book a Strategy Call” button links to Calendly. Nothing loads from Calendly while you are on our site. If you follow the link and book, Calendly collects your name, email address, the time you select, and anything you add to the booking. Calendly processes this on our behalf and under its own privacy notice.
When you complete an assessment. If you complete a Readiness Check or any survey we publish: your answers, the scores calculated from them, and the contact details you submit with them. We also generate a PDF copy of your responses and scores, which we email to you and retain alongside your entry.
When you ask for marketing emails. If you tick the optional box to receive our updates: your name and email address, which we pass to our email provider. Ticking it is never a condition of receiving your results.
When you browse the site. Our website receives your IP address, browser and device type, and the pages you view. This information reaches only us and our hosting provider — our pages load no third-party content, so no one else receives it. See section 4 for what is stored on your device.
We do not knowingly collect special category data, and we ask that you do not include it in enquiry messages or assessment responses.
3. Why we use it, and our lawful basis
| What we do | Why | Lawful basis |
|---|---|---|
| Respond to your enquiry | To answer questions and discuss whether we can help | Legitimate interests — responding to someone who has contacted us. Also steps prior to a contract where you are asking about engaging us |
| Take and pass on telephone messages | So that calls are answered when we cannot answer them ourselves | Legitimate interests |
| Arrange and hold meetings | To schedule and prepare for calls you book | Legitimate interests / steps prior to a contract |
| Score and return assessment results | To give you the result you asked for and explain it | Legitimate interests — providing something you requested |
| Send you marketing emails | To share insight and updates you have asked to receive | Consent — given by ticking the optional box, and withdrawable at any time |
| Deliver our services | To carry out engagements and keep records of them | Contract |
| Understand how the site is used | To improve content and structure | Legitimate interests — see section 4, which explains why this does not require your consent |
| Meet legal and accounting obligations | Tax, company and record-keeping duties | Legal obligation |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights and concluded that it is not: the processing is limited to what is needed to respond to you or to provide what you asked for. You can object at any time — see section 8.
4. Cookies and similar technologies
On an ordinary visit, nothing is stored on your device at all. This table is complete.
| Stored on your device | Set by | Purpose | Consent needed |
|---|---|---|---|
| wp-settings-*, et-* | WordPress / Divi | Editor preferences. Set only for logged-in administrators, never for visitors | No — strictly necessary |
Our website analytics store nothing on your device. We use Burst Statistics, which runs on our own server in cookieless mode. It does not set a cookie, does not read anything from your device, does not assign you an identifier, and does not follow you to other websites. Because nothing is stored on or retrieved from your device, the consent requirement in PECR regulation 6 does not apply, and we do not ask for consent to run it. Nothing it collects identifies you.
We load no third-party content. There are no embedded maps, videos, social media widgets, booking tools or externally hosted fonts. Our typefaces are served from our own servers. Where we link to an external service, nothing loads from it until you choose to follow the link and leave this site.
We therefore do not display a cookie banner. Consent is required to store or read information on your device unless it is strictly necessary for a service you have requested. Everything above meets that exemption, so there is nothing for you to accept or decline. Our Cookie Policy sets this out in full.
You can control cookies through your browser settings, though blocking strictly necessary cookies may stop parts of the site working.
5. Who we share your data with
We do not sell your personal data, and we do not use it for advertising.
| Provider | What for | Where |
|---|---|---|
| Capital Office | Telephone answering, message taking, and mail handling at our registered and correspondence address | United Kingdom |
| Bluehost / Newfold Digital | Website hosting and backups | United States |
| MailerLite | Sending marketing emails, where you have opted in | European Union |
| Calendly | Meeting scheduling, if you choose to book a call | United States |
We may also disclose personal data where we are legally required to, or to establish or defend legal claims.
6. International transfers
Where personal data is transferred outside the UK we rely on the UK Government’s adequacy regulations where they apply, or on the International Data Transfer Agreement, or on the UK Addendum to the EU Standard Contractual Clauses.
Our hosting provider is based in the United States. MailerLite is based in the European Union, which is covered by the UK’s adequacy regulations. Calendly is based in the United States and receives your data only if you choose to book a call.
No transfer happens without an action on your part. Browsing the site discloses your data to no one but us and our host, because our pages load nothing from any third party.
7. How long we keep it
| Data | Retained for |
|---|---|
| Enquiries that do not become engagements | 24 months from your last contact with us |
| Telephone messages | 12 months |
| Client records and engagement documentation | 6 years after the engagement ends |
| Assessment responses and scores | 24 months, unless you ask us to delete them sooner |
| PDF copies of assessment results | 24 months, deleted with the responses they record |
| Marketing subscriptions | Until you unsubscribe, which you can do from any email we send |
| Website analytics | 24 months (then moved to archive) |
8. Your rights
Under UK data protection law you have the right to:
- be informed about how we use your data — this notice
- access the personal data we hold about you
- rectification of data that is inaccurate or incomplete
- erasure in certain circumstances
- restrict our processing in certain circumstances
- data portability for data you gave us, where processing is by consent or contract
- object to processing based on legitimate interests, and to direct marketing at any time
- withdraw consent at any time where consent is our basis — this does not affect processing already carried out
To exercise any of these, email admin@testassurance.co.uk. We will respond within one month. We may ask you to confirm your identity first.
9. Assessment scoring
Our Readiness Checks and similar assessments calculate scores from the answers you give. Those scores are indicative. They exist to structure a conversation, not to make a decision about you. No decision producing legal or similarly significant effects is made automatically, and any recommendation we give is reviewed by a person before it reaches you.
10. Complaints
If you are unhappy with how we have handled your personal data, please contact us first at admin@testassurance.co.uk so that we can try to put it right.
You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 — ico.org.uk
11. Changes to this notice
We may update this notice as our services or our providers change. The date at the top shows when it was last revised. Where changes are significant, we will bring them to your attention.