Privacy Policy

This section applies when you visit codility.com or another website we operate. It does not cover the Codility platform itself, which is described in the sections for platform users and candidates.

The information we collect

Technical information sent by your browser, including your IP address, browser and device type, operating system and language settings.

• Information about your visit, including the pages you view, the links you click, the website that referred you and the time and duration of your visit.
• Cookie and similar identifiers, where you have accepted them, and the approximate location (usually city level) derived from your IP address.
• Session recordings and heatmaps of how you move through the site, with anything you type into forms masked, where you have accepted analytics cookies.

This information comes from your browser and from the analytics and advertising tools on our website. We do not ask website visitors for special categories of personal information.

How we use it and why

Who receives it

Our website hosting and content delivery providers and our analytics providers process this information on our behalf. Where you accept advertising cookies, advertising and social media platforms receive cookie identifiers and information about your visit and use them under their own privacy policies to show you our advertisements elsewhere. Analytics providers may also use some information for their own purposes under their terms.

How long we keep it

Website analytics and advertising data is kept for the periods set in each tool, generally between a few weeks and two years, after which it is deleted or retained only in aggregated form. You can change your cookie choices at any time through the cookie settings on our website; see “Cookies” below.

This section applies when you fill in a form on our website, request a demo or pricing, ask a question through our website chat, email us, or sign up for our newsletters, webinars or other content.

The information we collect

1. Your name, work email address, telephone number, job title and company.
2. The content of your enquiry, message or chat conversation, and any other information you choose to give us.
3. Where you arrived from, including the campaign, referring website or landing page that brought you to the form.
4. Your subscription preferences and, for the emails we send you, whether they were delivered, opened or clicked.

This information comes from you. Our website chat is operated by an AI assistant; what you type into it is used to answer your question and, if you ask us to contact you, is passed to our sales team. Please do not include sensitive personal information in enquiries or chat messages.

How we use it and why

You can opt out of marketing email at any time by using the unsubscribe link in any email or by contacting us. Opting out does not affect messages we need to send you about a request you have made or a service you use.

Who receives it

Providers of our website forms, chat assistant, customer relationship management and email delivery tools process this information on our behalf, as do the agencies and contractors that support our marketing and sales operations. If your enquiry leads to a business relationship, your details are handled as described in the next section.

How long we keep it

Enquiry and chat records are kept for a defined period after the matter is closed. Marketing contact records are kept for up to two years after our last meaningful contact with you. A record of your email address is kept indefinitely if you opt out, so that we can honour your choice.

This section applies to people we deal with in their professional capacity at organisations that are, or may become, Codility customers or partners, including the people who negotiate, sign and manage contracts with us and those who handle billing.

The information we collect

1. Your name, work email address, telephone number, job title, department, seniority and company.
2. Our history of contact with you, including meetings, calls, emails, proposals, quotes and contracts, and notes of our conversations.
3. Signals about your organisation’s interest in our services, such as engagement with our emails, website and advertising, and intent data about your organisation provided by third parties.
4. For billing contacts, invoice and payment records, including VAT or tax numbers and the contact and address details on invoices. Payment card details are collected and processed by our payment providers, not by us.

Where it comes from

Most of this information comes from you or from colleagues at your organisation. We also obtain and verify the work contact details and job titles of people at organisations we would like to do business with from business contact data providers and from public sources such as professional networking sites and company websites, and we use data providers to check that email addresses are current. This applies to the business contact records we hold about you in our sales and marketing systems. It does not involve the information your organisation holds in the Codility platform. Where you also have a platform account, we process your account and usage information only on your organisation’s instructions, and we do not use that information for sales prospecting or data enrichment.

Where we obtain your information from a source other than you, we provide this notice at the latest when we first contact you, and in any case within one month.

How we use it and why

Who receives it

Providers of our customer relationship management, sales engagement, contact data, email delivery, e-signature, billing and finance systems process this information on our behalf, together with the agencies and contractors that support our sales operations, marketing and finance. Business contact data providers and professional networking sites are the sources described above and are independently responsible for their own data. Our payment providers, banks, auditors and professional advisers receive billing and payment information where needed.

How long we keep it

Prospect records are kept for up to two years after our last meaningful contact. Customer contact records are kept for the life of the contract and for a defined period afterwards, and contract and financial records for the periods required by accounting and tax law. Records of people who have opted out of marketing are kept indefinitely so that we can honour their choice.

This section applies if you have an account on the Codility platform through your organisation, for example as an administrator, recruiter, hiring manager or interviewer, or if you have opened a trial or self-serve account. Codility Limited is the controller of your account information and of the information about how you use the platform. The candidates your organisation assesses are covered by the next section.

The information we collect

1. Your name, work email address, username, job role and the organisation you belong to.
2. Account and security information, including your hashed password, single sign-on identifiers, role and permissions, team membership, sign-in records, IP addresses and account settings.
3. Information about how you use the platform, including the features you use, the actions you take, in-app messages you see, and your progress through any training we provide through the Customer Academy.
4. Support requests you make, including the content of your tickets, attachments and our correspondence with you, and your responses to satisfaction and feedback surveys.
5. For self-serve accounts, billing and transaction records, and signals used to detect fraudulent accounts and payments. Payment card details are collected and processed by our payment providers, not by us.

This information comes from you, from the person at your organisation who created or administers your account, and from the platform itself as you use it. We do not ask platform users for special categories of personal information.

How we use it and why

We do not use the information in your organisation’s Codility account, or the information about candidates that your organisation processes through the platform, for sales prospecting, data enrichment or research, other than in aggregated and anonymised form or as your organisation’s contract with us permits.

Who receives it

Our cloud hosting provider, our email delivery provider, and the providers of our support, in-app messaging, training and customer success tools process this information on our behalf, together with our published platform sub-processors. Your organisation’s administrators can see the information held in your account. If your organisation uses single sign-on, its identity provider receives your sign-in information. For self-serve accounts, our payment providers process payment information and carry out their own fraud prevention and regulatory checks.

How long we keep it

Account information is kept for the life of your organisation’s contract or your account and for a short, defined period afterwards, as set out in our platform terms. Support records are kept for a defined period after the matter is closed. Financial records are kept for the periods required by accounting and tax law.

This section applies if you have been invited to take a test, assessment or live coding interview on the Codility platform by an employer or other organisation that uses our services.

Who is responsible for your information

The organisation (i.e your prospective employer) that invited you to take the assessment is the controller of your personal information. It decides whether to assess you, which assessment to use, which features to enable and what happens to your results. Codility processes your information on that organisation’s instructions as its processor, under a data processing agreement. That organisation is responsible for telling you how it uses your information and for handling your requests to exercise your rights, so please direct questions about your assessment, your results and your rights to the organisation that invited you. If you contact us instead, we will pass your request on to it or ask you to contact the organisation directly.

The information processed on the prospective employer’s behalf

1. Your name and email address, and any other details the inviting organisation includes in your invitation or asks you to provide.
2. Your work during the assessment or interview, including code you write, answers you give, files you upload, and, in live interviews, the video recording, shared whiteboard and interviewer’s notes and scores.
3. Scores and results generated by the platform, and feedback written by reviewers.
4. Assessment integrity information, including your IP address, browser details, the time taken, copy and paste activity, switching between browser tabs, typing patterns, similarity to other submissions and indicators of the use of AI assistants, which the platform uses to flag possible irregularities for the inviting organisation to review.
5. Where the inviting organisation has enabled identity verification, the result of a check that compares your identity document with a selfie. The check is carried out by a specialist identity verification provider; the document and selfie images are held by that provider and Codility receives only the outcome of the identity verification.
6. Where the inviting organisation uses AI features, such as AI-generated summaries, follow-up questions or feedback, the inputs to and outputs of those features.

All of this information is used to deliver the assessment or interview and make the results available to the inviting organisation. Decisions about your application are made by that organisation, not by Codility. We do not make decisions about you that have legal or similarly significant effects.

The limited purposes for which Codility is the controller

Codility is the controller of a limited amount of information about candidates for the following purposes of its own:

Who receives it

The inviting organisation receives your results and all the information listed above. Our cloud hosting provider, our email delivery provider, our video and identity verification providers and our other published platform sub-processors process candidate information on our behalf, under the same instructions. If you contact our support team, the provider of our support tools processes your request on our behalf.

How long we keep it

The inviting organisation decides how long your assessment information is kept and can delete it at any time. We delete or anonymise candidate information in line with that organisation’s instructions and our platform terms. Platform security logs and support records are kept for short, defined periods.

This section applies if you apply for a job or contractor role with Codility, send us your CV, or are put forward or approached for a role, whether or not your application goes any further. The Codility group company that is recruiting for the role is the controller: Codility Limited (United Kingdom), Codility Polska Sp. z o.o. (Poland), Codility Germany GmbH (Germany) or Codility Inc (United States).

The information we collect

1. Your name, contact details, CV, covering letter, application form, and the information in your professional profiles.
2. Your employment and education history, qualifications, skills, salary expectations and availability.
3. Interview notes and scores, the results of any assessments or tasks we ask you to complete, and the opinions of the people who interview you.
4. References, and the details of your referees.
5. Information needed to confirm your right to work in the country of employment, which may include your nationality and immigration status, and the outcome of any background checks we carry out.
6. Information about any disability or health condition you tell us about so that we can make adjustments to the recruitment process.
7. Equal opportunities monitoring information, where we ask for it and you choose to provide it.
8. If we make you an offer, the terms of the offer and your contract.

Nationality and immigration status, health and disability information, and equal opportunities information are special categories of personal information or otherwise protected by additional rules. We collect them only where the law requires or permits it, as set out below.

Where it comes from

Most of this information comes from you. We also receive information from recruitment agencies and the contractors who help us find candidates, from professional networking sites where we approach you about a role, from your referees, from background screening providers, and from the people who interview you.

How we use it and why

We do not make recruitment decisions based solely on automated processing. If you do not provide information we need, we may be unable to consider your application.

Who receives it

The providers of our recruitment, human resources, document and collaboration systems process this information on our behalf, as do the recruitment contractors who support our hiring. Recruitment agencies, referees and background screening providers are independently responsible for the information they hold. If you are offered a role, your information is transferred to your employment record and covered by our privacy notice for employees, workers and contractors.

How long we keep it

If your application is unsuccessful, we keep your information for six months from the date of our decision, or for up to twelve months in our talent pool if you agree to that, after which it is deleted. Unsolicited CVs that we do not take forward are deleted within the same period.

This section applies if you join the free programmer community on the Codility platform to practise coding challenges, follow lessons and training, or take part in our programmer surveys. Codility Limited is the controller.

The information we collect

1. Your name, email address and the sign-in details for your account, including any social login you use.
2. The challenges you attempt, the code you submit, your results and certificates, and your progress through lessons and training.
3. Your profile, where you choose to create one, and the information you share in it.
4. Your responses to our programmer surveys.
5. Technical information about your use of the community, including your IP address and sign-in records.

This information comes from you and from the platform as you use it. We do not ask community members for special categories of personal information.

How we use it and why

Who receives it

Our cloud hosting provider and our email delivery provider process this information on our behalf. If you use a social login, the provider of that login receives your sign-in information. Your profile is visible to other people only where you choose to share it.

How long we keep it

Your account and activity are kept while your account is active and are deleted or anonymised after a period of inactivity, or sooner if you ask us to delete your account. If we close the community, we will delete or anonymise all member information.

This section applies if you take part in a research study that we run to evaluate our assessments, or if you answer a survey or give us feedback about our platform or services. Codility Limited is the controller.

The information we collect

1. For research studies run through a research recruitment platform, a participant identifier provided by that platform, the demographic attributes you have chosen to share for the study, and your responses.
2. For surveys and feedback programmes, your responses, your opinions and any free text you write, together with your name and email address where the survey is not anonymous.

Some of our research studies ask for demographic information, which can include your ethnicity and other characteristics that are special categories of personal information. We collect this only where it is needed to evaluate whether our assessments are fair across different groups, only with your explicit consent given under the terms of the study, and we report the results in aggregate.

How we use it and why

Who receives it

The research recruitment platform through which you take part is responsible for its own participant panel under its own privacy policy. Our survey, data storage and analysis tools process your responses on our behalf. Findings are shared only in aggregate.

How long we keep it

Raw study responses are kept for a defined period after the study ends and are then anonymised or deleted. Survey and feedback responses are kept for a defined period and are then anonymised or deleted. Aggregated findings are retained.

This section applies if you join a call or meeting with us that is recorded, attend an event we run or take part in, appear in a testimonial or case study, or engage with us on social media or review sites. Codility Limited is the controller.

The information we collect

1. For recorded calls and meetings, the audio and video recording, a transcript, the names and email addresses of participants, and notes and summaries generated by AI note-taking tools.
2. For events, your registration details, attendance and, where used, a badge or sign-up list.
3. For testimonials and case studies, your name, job title, company, photograph and the words you have agreed we can publish.
4. For social media and review sites, the public profile information and content you share when you engage with our pages or review our services.

We tell you at the start of a call or meeting if it is being recorded, and where the law of your country or state requires it we ask for your agreement before recording. Please avoid sharing sensitive personal information on recorded calls.

How we use it and why

Who receives it

The providers of our conferencing, recording, transcription and call analysis tools process recordings on our behalf. Event platforms and venues receive registration details for events they help us run. Social media and review platforms are independently responsible for the information you share on them.

How long we keep it

Call recordings are kept for a short period and transcripts and summaries for somewhat longer; notes written to our customer records are kept with those records. Event attendee lists are kept for a defined period after the event. Testimonials and photographs are kept for as long as they are published and for a short period afterwards.