Privacy Policy

Last Modified: August 15, 2025

Thank you for using HighMatch. We are committed to protecting the privacy of individuals who use the Service. This policy explains how we collect, use, disclose, secure, and otherwise process personal information in connection with the Service and the rights and choices available to individuals with respect to their personal information. 

HighMatch, LLC, a Georgia limited liability company (“we,” or “us”) offers  a collection of products and services that allow you to assess people and view insights about people (“Service). The Service is made available online by us, via the applicable login link and other electronic means designated by us. You  are either a customer purchasing the Service or a customer’s employee, contractor, agent, licensor, representative or other end user who is authorized by the customer to use the Service.

1. Information We Collect
When you register to use, or express interest in obtaining additional information about, the Service, we may collect information from you and about you (collectively “Personal Information”) as follows:

1. Information you provide to us: When you express interest in obtaining additional information about the Service or you register to use the Service, you may give us personal contact information such as your name, job title, company name, address, phone number, email address, and number of employees in your organization, (“Contact Information”). When you purchase the Service, you may give us financial and billing information, such as billing name, address, and credit card number (“Billing Information”). 
2. Information about your use of the Service: When you use the Service, we may gather information about how and when you use the Service. This information may include time, date, the pages you view, and details about the actions you take when using the Service. From time-to-time, we engage third parties to track and analyze usage and volume statistical information about individuals who visit our websites.
3. Required Cookies: When you use the Service, we store “cookies”, which are strings of code, on your computer. Required cookies enable you to navigate the Service and use its features. We use cookies to collect information about you when you visit the Service, when you use the Service, what pages you view, your browser type, your operating system, your IP address and other similar information. These cookies are required to use the Service. If you turn off cookies that have been placed on your computer by us, the Service will not function properly.
4. Targeting Cookies: We may use third parties that place cookies on your computer so we can provide promotional material and advertisements to you on third party websites.
5. Web Beacons: Web beacons are clear electronic images placed in an email that allow us to collect information about when you open an email, your IP address, your browser or email client type, and other similar details. When we send emails, we sometimes use web beacons to track if the email was opened and if links in the email were clicked. We use web beacons to improve the way we communicate with you and to improve the way the Service works.
6. Information from Other Sources: We may collect more information about you, like name, age, job title, and email address by searching the internet or querying third parties. We only collect data that’s publicly available or provided by a third party according to its terms of service.

2. Information You Add to Your Account
When you use the Service, you may add additional information to your account (collectively, “Customer Data”) as follows:

1. Job Data: When you use the Service, you may add information to your account such as job descriptions, job questionnaires, and employee performance information (“Job Data”).
2. Candidate Data: When you invite someone to take an assessment, a questionnaire, a skills test, or similar offering (collectively, “Assessment”), you may provide us with information such as the person’s name and email address. The person taking the Assessment may provide additional information such as contact information and answers to questions posed in an Assessment. We collectively call this information “Candidate Data.”
3. Custom Assessment Data: When you use the Service, you may be granted the option to add custom assessment tests, custom candidate questions, custom skills tests and custom report content. We collectively call this information “Custom Assessment Data.”
4. Other Data: When you use the Service, you may add materials to your account such as logos, branding materials, customer messaging, and other information. All other information you add to your account that is not Job Data, Candidate Data, or Custom Assessment Data is considered “Other Data”.

3. How We Use Personal Information and Customer Data
We may use or disclose your Personal Information and Customer Data as follows:

1. To deliver the Service to you. We may use any and all of your Personal Information and Customer Data to deliver the Service to you.
2. To improve the Service. We may, for example, study your Assessment Data and Job Data along with that of other customers to create features and better experiences for all customers and all people who complete Assessments.
3. To communicate with you about the Service or  the use of the Service. For example, if you provide us with your Contact Information, we may email you to share information about the Service or call you to answer questions you may have about the Service.
4. To bill and collect money owed to us. This includes sending you emails, invoices, receipts, notices of delinquency, and alerting you if we need a different credit card number. We use third parties for accounting and secure credit card transaction processing, and we send Billing Information to those third parties to process your orders and credit card payments.
5. To provide customer support to you or to someone who has been invited to take an Assessment.
6. To meet legal requirements like complying with court orders and valid subpoenas.
7. To secure and protect the Services and comply with legal, accounting, or security requirements, including investigation of security incidents.
8. To market and promote the Service and our other offerings. Where required by law, we will only send marketing communications with your consent. Otherwise, we will market and advertise our products and services on the basis of our legitimate business interests. 
9. For other purposes if we obtain your consent. 
10. Legal Basis for Processing Personal Data (EEA and UK customers only). Our legal basis for collecting and using the Personal Information described above will depend on the Personal Information concerned and the specific context in which we collect it. However, we will normally collect Personal Information from you only where we have your consent to do so, where we need the Personal Information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect Personal Information from you. If we ask you to provide Personal Information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your Personal Information is mandatory or not (as well as of the possible consequences if you do not provide your Personal Information). Similarly, if we collect and use your Personal Information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.

4. How We Share Personal Information

1. Service Providers. We may share Personal Information with our third party service providers to support our websites, products, and services. For example, we use service providers for data hosting, application development, marketing, sales support and customer support. We may need to share your Personal Information with service providers to provide information about products or services to you. These service providers are prohibited from using your Personal Information except for these purposes, and they are required to maintain the confidentiality of your information. In all cases where we share your information in this way, we explicitly require the third-party service providers to acknowledge and adhere to our privacy and data protection policies and standards.
2. Partners. We may share Personal Information with trusted HighMatch partners to: (i) contact you based on your communication preferences, (ii) help us perform statistical analysis, (iii) provide sales support, (iv) provide customer support; and (v) to improve our partner programs and the Service. Partners are prohibited from using your Personal Information except for these purposes, and they are required to maintain the confidentiality of your Personal Information.
3. Corporate Events. If we (or our assets) are acquired by another company, whether by merger, acquisition, bankruptcy or otherwise, that company would receive all information gathered by HighMatch in the Service. In this event, you will be notified via email and/or a prominent notice on our website, of any change in ownership, uses of your Personal Information, and choices you may have regarding your Personal Information. 
4. Compelled Disclosure. We reserve the right to use or disclose your Personal Information if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a law, court order, or legal process. If you use the Service, Customer Data is considered Confidential Information and you should review the Confidentiality terms in the Master Services Agreement for more information. 
5. Affiliates. We may share your Personal Information with our current and future parent companies, subsidiaries, affiliates, and other entities under common control and ownership to the extent necessary to fulfill your request or for other purposes permitted under this Privacy Policy.

5. How We Share Personal Information Internationally

Some of the third parties described in this Privacy Policy, which provide services to us under contract, are based in other countries that may not have equivalent privacy and data protection laws to the country in which you reside. When we share Personal Information of individuals in the EEA, Switzerland or UK with third parties, we use a variety of legal mechanisms to safeguard the transfer, including the applicable Standard Contractual Clauses, as well as additional safeguards where appropriate. For transfers to or from the United Kingdom, we make use of the UK Addendum. Please contact us if you need more information about the legal mechanisms we rely on to transfer personal data outside the EEA, Switzerland, and UK.

6. How We Store and Secure Personal Information.

1. Data Storage and Security. We use a variety of industry-standard technical, contractual, administrative and physical security measures and procedures to help protect Personal Information and Customer Data from unauthorized access, use, alteration or disclosure. When you use the Service, we use secure socket layer technology (SSL) to encrypt information. Please note that despite our best efforts, we can’t guarantee the security of your information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of the Service at any time. If you have questions about our security measures in place, please contact us.
2. Retention of Personal Information. How long we keep information we collect about you depends on the type of information and how we collect and store it. After a reasonable period of time, we will either delete or anonymize your information or, if this is not possible, then we will securely store your information and isolate it from any further use until deletion is possible. We retain Personal Information that you provide to us where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations, resolve disputes and enforce our agreements).

When we have no ongoing legitimate business need to process your Personal Information, we securely delete the information or anonymize it or, if this is not possible, securely store your Personal Information and isolate it from any further processing until deletion is possible. We will delete this information at an earlier date if you so request, as described in the section “Privacy Rights and Choices” below.

If you have elected to receive marketing communications from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our content, products, or services, such as when you last opened an email from us or ceased using your HighMatch account.  We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created. 

Customer Data is retained according to the Master Subscription Agreement and Data Processing Agreement.

7. Your Privacy Rights and Choices

1. Personal Information Requests. Depending on your location and applicable laws, you may have the following data protection rights:

• Access, Correction or Deletion. You can request access, correction, updates or deletion of your Personal Information.

• Objection or Restriction. You can object to our processing of your Personal Information, ask us to restrict processing of your Personal Information, ask us to restrict processing of your Personal Information, or request portability of your Personal Information. 
• Withdraw Consent. If we have collected and processed your Personal Information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.
• Complaint. You have the right to complain to a data protection authority about our collection and use of your Personal Information.  Contact details for data protection authorities in the EEA are available here.

To exercise any of these rights, please contact us at: support@highmatch.com or call us at 888 220-7611. 

Please note that to protect personal information, we may verify your identity by a method appropriate to the type of request you are making. Depending on where you reside, you may be entitled to empower an “authorized agent” to submit requests on your behalf. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws. You are entitled to exercise the rights described above free from discrimination.

We will respond to your request to change, correct, or delete your data within a reasonable timeframe and notify you of the action we have taken. In some instances, your rights may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights.

1. To Unsubscribe From Our Communications. You may unsubscribe from our marketing communications through one of the following methods:

• by clicking on the “unsubscribe” link on the bottom of our marketing e-mails;
• updating your communication preferences in your account;
• by contacting us at support@highmatch.com

Customers cannot opt out of receiving transactional emails related to their account with us or the Service.

8. California Privacy Rights

1. Applicability. This section applies only to California consumers. For purposes of this section “Personal Information” has the meaning given in the California Consumer Privacy Act (“CCPA”). It describes how we collect, use, and share California consumers’ Personal Information in our role as a business, and the rights applicable to such residents. The CCPA requires businesses to disclose whether they sell Personal Information. HighMatch is a business, and does not sell Personal Information. We may share Personal Information with authorized service providers or business partners who have agreed to our contractual limitations as to their retention, use, and disclosure of such Personal Information. 
2. How We Collect, Use, and Share Your Personal Information. We have collected the following statutory categories of Personal Information in the past twelve (12) months:

1. Identifiers, such as name, e-mail address, mailing address, and phone number. We collect this information directly from you or from third party sources. 
2. Commercial information, such as subscription records. We collect this information directly from you. 
3. Internet or network information, such as browsing and search history. We collect this information directly from your device. 
4. Geolocation data, such as IP address. We collect this information from your device.
5. Financial information, such as Billing Information or financial account numbers in the process of providing you with a subscription. We collect this information from you. 
6. Professional data, such as your job title and company.
7. Other Personal Information, in instances when you interact with us online, by phone or mail in the context of receiving help through our help desks or other support channels; participation in customer surveys or contests; or in providing the Service. 
8. Inferences drawn from any of the above categories, alone or in combination.

The business and commercial purposes for which we collect this information are described in this Privacy Policy. The categories of third parties to whom we “disclose” this information for a business purpose are described in the “How We Share Personal Information” section of this Privacy Policy. The period of time for which we retain this information is described in the “How We Store and Secure Personal Data” section of this Privacy Policy.

3. Your California Rights. You have certain rights regarding the Personal Information we collect or maintain about you. Please note these rights are not absolute, and there may be cases when we decline your request as permitted by law. These rights include:

1. The right of access means that you have the right to request that we disclose what Personal Information we have collected, used and disclosed about you in the past 12 months. 
2. The right of deletion means that you have the right to request that we delete Personal Information collected or maintained by us, subject to certain exceptions. 
3. The right of correction means that you have the right to request that we correct any inaccurate personal information that we maintain about you.
4. The right to request information concerning the categories of Personal Data (if any) that we disclose to third parties or affiliates for their direct marketing purposes.
5. The right to limit the use of sensitive personal information means that you have the right to direct businesses to only use your sensitive personal information for limited purposes. We only collect sensitive personal information (such as your payment information), as defined by applicable laws for the purposes allowed by law or with your consent. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.
6. The right to appeal means that you can appeal any decision by us to deny your privacy rights under applicable laws.
7. The right to non-discrimination means that you will not receive any discriminatory treatment when you exercise one of your privacy rights. 

d. How to Exercise your California Rights. You can exercise your rights yourself or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your Personal Information, we will verify your identity by a method appropriate to the type of request you are making. Depending on your request, we will ask for information such as your name and your email address. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent’s identity to protect your Personal Information. We may deny a request from an agent that does not submit proof that they have been authorized to act on your behalf. We will respond within the time frame permitted by applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

Please use the contact details below if you would like to: 

• Access this policy in an alternative format;
• Exercise your rights;
• Learn more about your rights or our privacy practices; or
• Designate an authorized agent to make a request on your behalf.

9. Other Important Privacy Information 

1. Sale of Personal Information. We will never sell your Personal Information to any third party.
2. Information About Children. The Service is not intended for or targeted at children under 13, and we do not knowingly or intentionally collect Personal Information about children under 13. If you believe that we have collected Personal Information about a child under 13, please contact us at support@highmatch.com so that we may delete the information.

10. Changes to this Privacy Policy

We may change this Privacy Policy at any time. If we make material changes, we will provide notification of the material changes to this Privacy Policy through our website at http://highmatch.com at least thirty (30) days prior to the change taking effect.

11. Contact

If you have questions regarding this Privacy Policy or our privacy practices, or if you have a disability and need to access this notice in a different format, contact us by email at: support@highmatch.com or by mailing: HighMatch, LLC, Attn: Privacy, 2970 Peachtree Rd NW, Suite 300, Atlanta, GA 30305.

Thanks for taking time to learn about HighMatch’s Privacy Policy, and thanks for trusting us to handle your assessment service.