Verbench Privacy Policy
Last updated: 16 October 2026
This policy explains how Verbench handles personal data. It covers three groups of people: clients (organisations that use Verbench and their staff), candidates (people invited to take a test) and website visitors (including people who join our waitlist).
1. Who we are
Verbench is a trading name of Sugar Social Networks Ltd, registered in England and Wales (company number 12497429), 17 Green Lanes, London N16 9BS. We are registered with the Information Commissioner's Office (ICO), reference ZC257586.
For any privacy question or request, email privacy@verbench.com.
2. Candidates
Who is responsible for your data
The organisation that invited you is responsible for your data (the "controller"). We process it on their behalf, to deliver the test and report to them. For questions about how they use your results, contact them. You can also contact us, and we will pass your request on.
What we collect
- Your name and email address, given to us by the organisation that invited you.
- The role or roles you are tested for, and any extra time the organisation has allowed (as a percentage only, never with a reason).
- Your answers, the time taken for each question, and your scores.
- Test-integrity records: for example, how often and for how long you left the test window, and attempts to copy or highlight questions. These are recorded as facts. They do not change your score.
We do not ask for, and do not need, information about your health, ethnicity, religion or other sensitive matters.
How it is used
- To run your test and produce a report for the organisation that invited you.
- To send you emails about your test: the invite, and a short summary of your result if the organisation has chosen to share it.
The organisation decides whether to interview or hire you. A person makes that decision. Verbench does not make hiring decisions, and results are not a qualification.
Lawful basis
The organisation that invited you relies on its legitimate interest in assessing candidates for a role. Ask them for details.
How long it is kept
Your test data is deleted automatically 12 months after your test, or after the invite expires if you never took the test. The organisation can delete it sooner.
3. Clients
What we collect
- Your name, work email address and organisation name, and whether you are a recruitment agency or an employer.
- Purchase records: what you bought, when, prices and VAT. Card details are handled by Stripe; we never see or store your full card number.
- Information about how you use your account, such as invites sent, and technical information needed to keep the service secure.
How it is used and lawful basis
| Use | Lawful basis |
|---|---|
| Providing your account and the service | Contract |
| Taking payment and issuing VAT invoices | Contract and legal obligation |
| Keeping accounting records | Legal obligation |
| Keeping the service secure and preventing misuse, including one free test per company email domain | Legitimate interests |
| Telling you about important changes to the service | Contract and legitimate interests |
How long it is kept
Account details are kept while your account is open and for up to 12 months after it closes. Invoices and payment records are kept for 6 years, as UK tax law requires.
4. Website visitors and waitlist
If you join our waitlist, we collect your name, work email address and company, and use them to tell you about Verbench's launch. Our lawful basis is your consent, which you can withdraw at any time by emailing privacy@verbench.com. Unconfirmed sign-ups are deleted after 30 days.
5. Who we share data with
We do not sell personal data. We use these service providers (sub-processors) to run Verbench:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database | UK (London) |
| Vercel | Website hosting | UK (London); Vercel is a US company and may process data in the USA |
| Stripe | Payments and invoices | UK, EU and USA |
| Resend | Sending emails | EU (Ireland); Resend is a US company |
| A2 Hosting | verbench.com website and waitlist | Netherlands |
Where a provider processes data outside the UK, we make sure an approved safeguard is in place, such as UK adequacy regulations or the UK International Data Transfer Addendum.
We may also share data where the law requires it, or with a buyer if our business is sold, in which case this policy continues to apply.
6. Security
We protect data with encryption in transit, access controls that keep each organisation's data separate, and private, unguessable links for tests and reports. No system is perfectly secure, but we work to keep data safe and will act quickly if something goes wrong.
7. Cookies
The Verbench app uses only cookies that are strictly necessary, for example to keep you signed in. We do not use advertising cookies.
8. Your rights
You have the right to ask for a copy of your data, to have it corrected or deleted, to object to or restrict its use, and to ask for it to be transferred. Where we rely on consent, you can withdraw it at any time.
Email privacy@verbench.com. We will respond within one month. If you are a candidate, we may need to pass your request to the organisation that invited you.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
9. Changes to this policy
We may update this policy. The date at the top shows when it was last changed. We will tell clients about important changes by email or in the dashboard.