Calybrate

1. Overview

This Privacy Policy outlines how Sandbox Consultancy Services Pvt Ltd (“Sandbox” ) collects, uses, manages, and protects personal data and information when users access the Calybrate platform. ( “Calybrate©”).

Calybrate is an assessment platform that allows users and authorised company representatives, including HR officers, to launch and manage assessments for their organisations based on their specific requirements. The available assessment solutions may inclu de Calybrate Me, Calybrate 180, Calybrate 360, and Calybrate Culture Assessments.

By accessing or using Calybrate© , users consent to the collection and use of information as described in this Privacy Policy.

2. Legal Basis for Data Processing

We process your personal data under the following legal bases:

Contractual Necessity: Processing is needed to deliver the assessment services you've contracted for.
Legitimate Interests: Platform operation, security, analytics, and improvement.
Legal Compliance: To meet applicable laws and regulations.

3. Information We Collect

We collect only the information required to deliver, manage, and improve assessment experience effectively. This may include:

Personal details, such as name, email address, designation, organisation, department, reporting structure, and user role
Assessment - related data, such as assessment participation, responses, ratings, feedback, scores, reports, and completion status
Organisation - related data required to configure and launch assessments according to client requirements
System data, such as login activity, timestamps, usage data, and platform activity records

4. Purpose of Use

Information is used strictly for the following purposes:

Creating, launching, and managing assessments within the Calybrate platform
Allowing authorised users or company HR officers to administer Calybrate Me, 180, and 360 Assessments
Supporting Culture Assessments where Sandbox’ s consulting involvement is required
Tracking assessment participation, completion, and response status
Generating individual, team - level, cohort - level, and organisation - level insights
Producing assessment reports, dashboards, and analytics based on agreed requirements
Communicating assessment - related updates, reminders, invitations, and support information
Maintaining, securing, and improving the platform

5. Data Sharing

Personal data is not sold or shared with third parties for commercial purposes.

Relevant data may be shared only with authorised parties, including:

Internal Sandbox teams responsible for platform administration, assessment management, analytics, reporting, or consulting support
Client organisations, in aggregated, anonymised, individual - level, or otherwise agreed reporting formats, depending on the assessment type and agreed scope
Approved technical service providers (such as cloud hosting providers, email services, and analytics tools) who support platform hosting, maintenance, security, or operations, and whose standard terms include appropriate data protection and confidentiality clauses.

For Culture Assessments, relevant organisational and assessment data may be reviewed by Sandbox consultants to provide consulting support, interpretation, and recommendations.

6. Data Security

Sandbox implements appropriate technical, administrative, and organisational safeguards to protect data from unauthorised access, misuse, loss, alteration, or disclosure.

These safeguards may include access controls, restricted permissions, secure storage, system monitoring, and other reasonable security measures appropriate to the nature of the data being processed.

7. Data Retention

Data is retained only for as long as necessary to fulfil assessment, reporting, consulting, operational, legal, or agreed contractual purposes.

After the required retention period, data may be securely archived, anonymised, or deleted in accordance with applicable internal procedures and client requirements.

8. Data Subject Rights

Under GDPR and data protection laws, you have the right to:

Request access to your personal data
Request correction of inaccurate data
Request deletion of your data
Request your data in a portable format
Withdraw consent at any time

9. User Responsibility

Users are responsible for:

Maintaining the confidentiality of their login credentials
Using the platform only for authorised assessment - related purposes
Ensuring that information submitted through the platform is accurate and appropriate
Ensuring that submitted content does not violate confidentiality, organisational policies, intellectual property rights, or legal obligations
Informing Sandbox through official channels if they suspect unauthorised access or misuse of their account

10. Data Management and Updates

For Calybrate Me, 180, and 360 Assessments, authorised organisation HR administrators can manage, update, edit, or delete relevant user and assessment - related information directly through the platform, subject to their assigned permissions.

For Calybrate Culture Assessments, any requests relating to data updates, corrections, or changes should be directed to Sandbox through the designated support channels, as these assessments involve Sandbox’s consulting support and administration.

11. Cookies And Tracking

Calybrate may use cookies, pixels, and tracking technologies to:

Keep you logged in securely
Understand how users interact with the Platform
Detect security threats and fraud
You can control cookies in your browser settings.

12. Updates to Policy

Sandbox reserves the right to update this Privacy Policy as required to reflect changes to the platform, assessment services, operational processes, legal requirements, or data protection practices.

Continued use of Calybrate after any updates constitutes acceptance of the revised Privacy Policy.

13. Contact

For any privacy - related queries, concerns, or requests regarding Calybrate, users may contact Sandbox through the designated platform, assessment, or support channels.

Privacy Policy - CALYBRATE PLATFORM