Privacy Policy

Last revised on 24 July 2023. 


Cirrus Assessment is committed to protecting your right to privacy. 


Cirrus Assessment (“Cirrus” or “We”) is a Dutch company that provides a cloud-based Software-as-a-Service product (the “Cirrus platform” or “platforms”) to exam providers for creating high-stakes exam questions and delivering exams online. The company is headquartered in Utrecht, The Netherlands. For more contact information, see below.


Security and privacy are of the utmost importance to us. This Privacy Policy explains the types of information collected and recorded on our Websites* and how we use this information.


For any additional questions or more information about our Privacy Policy, please contact us at privacy-[email protected].

* For the purposes of this Policy, ‘Websites’ refer to all public websites Cirrus operates and that link to this Policy. On these Websites, Cirrus operates as a Data Collector. ‘Websites’ does not include any ‘Cirrus platform’ or ‘platforms’ that are managed by our Customers (End Users), for which Cirrus is the Data Processor. Also see ‘Data Cirrus collects and its purpose’ below.

Cirrus’ commitment

Our company is built on the trust of exam providers and students taking high-stakes exams on Cirrus exam platforms. To maintain that trust, we are committed to ensuring transparency, providing security, and protecting the privacy of data on all our systems.


We promise:


  • We will keep your personal information personal and private.
  • We do not sell or rent your personal information to anyone.
  • We will not share or disclose your personal information except as necessary to provide our Services or as otherwise described in this Policy, without first providing you with notice and the opportunity to consent.

Cirrus as Data Controller & GDPR

Cirrus is subject to the GDPR. The GDPR differentiates between Data Controllers and Processors. Data Controllers determine the purposes and means of processing Personal Data, while Data Processors process Personal Data on behalf of the Controller.


On our Websites, Cirrus is the Data Controller of your information. When processing Personal Data as a Controller, Cirrus complies with the requirements set forth in Article 6 of the GDPR on the ‘Lawfulness of Processing’. According to the GDPR, processing is lawful if and only if at least one of the following conditions applies:


  • You have given your consent to the processing of your Personal Data for one or more specific purposes. Please refer to the ‘Consent’ section at the bottom of this Policy.
  • The processing is necessary for the performance of a contract between you and us or for taking steps at your request prior to entering into a contract.
  • The processing is necessary to comply with a legal obligation to which we are subject.
  • The processing is necessary for the performance of a task carried out in the public interest.
  • The processing is necessary for the purposes of our legitimate interests, except where such interests are overridden by your interests or fundamental rights and freedoms that require the protection of Personal Data.


If you are a resident of the European Economic Area (EEA), you have the following data protection rights:


  • The right to access, update or to delete the information We have on you
  • The right of rectification
  • The right to object
  • The right of restriction
  • The right to data portability
  • The right to withdraw consent


If you wish to be informed about the Personal Information we hold about you or want it to be removed from our systems, please contact us at [email protected].

Data Cirrus collects and its purpose

This Policy applies to the following categories of data subjects:

Website visitors:

Those who visit our Websites and


Types of information collected:

  • Standard visitor information supplied by browsers 
  • IP addresses
  • Access dates and times
Website form submitters:

Those who opt to provide a name and email address or other contact information to receive communications from Cirrus, fill out a survey, or provide feedback on our Websites.

Types of information collected (* is mandatory):


  • First and last name*
  • Organisation name*
  • Email address*
  • Phone number


  • Operation of our Websites: To monitor and improve the operation of our Websites. 
  • Statistics: To gain statistics and usage information to see how visitors interact with our Websites and how we can improve their experience.
  • Security: Elimination of errors and malfunctions, prevention of crime and improve data protection.
  • Marketing/Sales: To get a better understanding of who is interested in our services so we can further develop and improve our products and services.
    You may receive a newsletter or marketing material. We may do that either if We believe there is a legitimate interest for You to receive it. Or, in the absence of such legitimate interest, only after receiving your explicit consent via the Website form.
  • Personal Data of job applicants: If you apply for a vacancy at Cirrus, We will collect and process all the information that you voluntarily share with us in relation to a potential employment.


Deletion and retention

Cirrus will retain your personal information only for as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.


For the continuity of our company, long-term relationships are important. Prospect data is kept for a maximum of 4 years after collecting it, for audit purposes in case a cold lead is interested in our services again. If data becomes irrelevant at an earlier stage, it will be deleted.

Application data deleted no later than 4 weeks after the end of application process. Data on applicants who may be relevant in the future will be kept for one year, after obtaining permission.


This Policy does not apply to Customers and End Users on domains (Cirrus Platforms). Read the Introduction part of this Policy for more information about the difference between Website visitors and Platform users.

How information is collected

Log Files

Cirrus follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this as part of hosting services’ analytics.


The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analysing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.


Anonymous user data

In order to analyse visitor trends and improve the user experience, Cirrus also uses WP Statistics to collect anonymous visitor data on its website, including pages visited, referring/exit page, browser type, date and time stamp. These are not linked to any information that is personally identifiable, and the linked IP addresses are anonymised.


Website forms

Web forms allow Cirrus to get in contact with Website visitors. Filling out a form is voluntary and not necessary for using the Websites. It is, however, necessary if you want to get in touch with Cirrus, or if you want to sign up for services such as a newsletter or webinar. Depending on the nature of the information, We never keep it longer than necessary or until you unsubscribe. Prospect information will be kept for up to 4 years.


If you wish to be informed what Personal Information We hold about you and if you want it to be removed from our systems, please contact us at [email protected]


Cookies and Web Beacons

We use different types of cookies on our website. These are small harmless text files that track, for example, which pages you have visited. During your visit to our Websites, you will be asked for your consent to use them.


By using cookies, we may collaborate with third-party vendors and service providers to enhance our website’s functionalities. Also see our List of Sub-Processors. These partners offer specialised services, including performance monitoring, hosting, data processing, marketing, and advertising. Rest assured, we do not share your data with third parties unless they too have implemented proper privacy policies.


To gain a better understanding of how cookies are utilised on our websites, we recommend reviewing the privacy policies of the respective third-party providers listed below in the ‘Cookies and Web Beacons’ section. This will provide you with additional information about the use of cookies on our websites.


Below is an overview of the (types of) cookies that our Websites use:

How do I control my cookie preferences?

You can manage your cookies preferences by clicking on the “Settings” button and enabling or disabling the cookie categories on the popup according to your preferences.

In addition, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete cookies. To find out more out more on how to manage and delete cookies, visit,


Children’s Information


Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.


Cirrus does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, We strongly encourage you to contact us immediately and We will do our best efforts to promptly remove such information from our records.


Contact us at [email protected].


Contact & address information


If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us at [email protected].


Cirrus Assessment

House Modernes 

Lange Viestraat 2b 

3511 BK Utrecht

The Netherlands




By using our Websites, you hereby consent to our Privacy Policy and agree to its terms.


Take Cirrus for a spin!

Curious what Cirrus looks like from a test-taker perspective? 


Enter your details below to tackle our Summer Challenge and show off your Sunny Season Savvy 🏖️