Legal
Privacy policy
How OLL collects, uses, shares and protects information when you use our platform, take an assessment, or nominate someone else to take one.
Draft for legal review This policy is written to match how the platform actually works, but it has not been reviewed by counsel. Items in square brackets need your legal entity details before publication.
1. Who we are
This policy is issued by [Registered entity name] ("OLL", "we", "us"), registered at [registered address], Bengaluru, India. We operate the OLL platform, the OLL Research library and this website.
Where your employer nominates you for an assessment, that employer is the party deciding to run the assessment and we process your information to deliver it. Where you sign up on your own, we decide how your information is processed for that purpose.
2. What we collect
Information you give us
- Account details: name, work email, password, organization name.
- Role context: current job role, function, department, industry and sub-industry, the role you are developing towards, and any profiling answers the assessment needs.
- Assessment responses: your answers to scenario, multiple-choice, ranking and task questions.
- Goals and development inputs: priorities you set, progress you record, and anything you submit in the course of a development activity.
- Contact and enquiry information: what you send us by form, email or phone.
Information generated by use
- Results and outputs: competency scores, gap bands, capability signatures and your Development Action Plan.
- Usage data: pages and features used, time taken, device and browser type, approximate location derived from IP address, and log data needed to keep the service secure.
We collect what the diagnostic requires and no more. We do not ask for special category data such as health, religion or biometric information, and you should not submit it.
3. Why we use it
- To create and administer your account and deliver the assessment relevant to your role and industry.
- To produce your results and Development Action Plan, and to support you in interpreting them.
- To report progress and completion to the organization that nominated you, where it has authorized the assessment.
- To produce aggregated capability and readiness insight for that organization, as described in section 5.
- To improve the assessment architecture, our research and the platform itself.
- To keep the service secure, prevent misuse and meet our legal obligations.
Where the law requires a legal basis, we rely on the performance of a contract with you or your organization, our legitimate interests in operating and improving the service, your consent where we ask for it, and compliance with legal obligations.
4. Who sees assessment results
An individual's full results and Development Action Plan are not shared with an employer automatically. Sharing them requires the participant's consent and follows the organization's own policy.
- The participant sees their full results and their Development Action Plan.
- OLL assessment staff access results where needed to deliver, support and quality-assure the assessment.
- The nominating organization receives progress and completion updates where it has authorized the assessment, and aggregated insight as described below.
A single participant's result is an individual-level perspective. It is not a measure of the whole organization and we do not present it as one.
5. Aggregated insight
Department and organization views are built from authorized, aggregated results. We design these views so that individual results cannot reasonably be identified from them, including by applying a minimum group size before a breakdown is shown. Where a group is too small to aggregate safely, the view is withheld rather than published.
6. Sharing and processors
We do not sell personal information and we do not share it for advertising. We share it only:
- with the organization that nominated you, to the extent described in section 4;
- with service providers who process information on our instructions, under contract, for hosting, email, analytics, support and payments: [list of current processors];
- where required by law, regulation or valid legal process, or to protect the rights and safety of users and the public;
- in connection with a corporate transaction, where the recipient is bound by terms no less protective than these.
7. Cookies
We use cookies and similar technologies that are strictly necessary to run the service, to remember your preferences, and to understand how the platform is used so we can improve it. You can control non-essential cookies through your browser or, where offered, our cookie banner. Confirm the analytics and marketing tools in use before publication
8. Retention
We keep account and assessment information for as long as your account is active and for [retention period] after it closes, so that development progress remains meaningful over time and so we can meet legal and contractual obligations. Aggregated and de-identified information may be kept for longer for research purposes. You may ask us to delete your information as set out in section 10.
9. Security
We use access controls, encryption in transit, segregation of assessment content and results, and internal review of who may view identifiable results. No system is completely secure, but we work to limit both the likelihood and the impact of an incident, and we will notify affected users and authorities where the law requires it.
10. Your rights
Depending on where you are, you may have the right to access the information we hold about you, to correct it, to ask for it to be deleted, to withdraw a consent you previously gave, to object to or restrict certain processing, and to receive a copy in a portable form.
Under India's Digital Personal Data Protection Act, 2023 you may also nominate another person to exercise your rights in the event of death or incapacity, and you may raise a grievance with us using the contact details below. Where the General Data Protection Regulation applies to you, you may also lodge a complaint with your supervisory authority.
To exercise any of these, write to us at [privacy email]. Where your employer nominated you for an assessment, we may direct part of your request to them.
11. International transfers
We operate from India and may use service providers located elsewhere. Where information moves across borders, we put appropriate safeguards in place, including contractual protections with those providers. Confirm hosting regions and transfer mechanism
12. Age
The platform is intended for working professionals and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information, contact us and we will delete it.
13. Changes
We may update this policy as the platform changes. We will post the revised version here with a new date and, where the change is significant, notify account holders directly.
14. Contact and grievances
For any question about this policy, or to raise a grievance about how your information has been handled:
- Email: [privacy email]
- Grievance officer: [name and designation]
- Phone: +91 76766 46518
- Post: [registered address], Bengaluru, India
We aim to acknowledge a grievance within [x] working days and to resolve it within the period required by applicable law.