Privacy notice

1. Controller and contact details

Quiz & Rise Ltd, trading as InterpretLink, is a private limited company registered in Scotland under company number SC848141. Our registered office is Sicily Road, Inverness, IV2 3YL, Scotland, United Kingdom. Our ICO registration number is ZB989670.

Privacy and data-rights enquiries: privacy@quizandrise.com. General support: support@quizandrise.com.

2. Information we process

Depending on how you use InterpretLink, we may process:

• name, account, email and business contact details;
• telephone routing information needed to establish and protect calls;
• language pair, scheduling and limited request-routing information;
• customer, interpreter, assignment and request identifiers;
• interpreter eligibility, verification and approved language-pair status;
• package purchases, payment references, balances and connected-time ledger entries;
• call state, timestamps, connection status and connected seconds;
• interpreter earnings, payout and reconciliation references;
• IP address, device, authentication, security and privacy-minimised audit information;
• complaint, support and data-rights correspondence where you contact us.

InterpretLink is designed not to create or retain call recordings, transcripts or interpreted conversation content as part of the launch service. Raw identity documents are not intended to be stored in the application database; the service uses verification status and protected evidence references instead.

3. Why we process information and our lawful bases

• Contract: to create and administer customer accounts, activate purchased packages, route requested services, connect eligible interpreters, measure connected time and maintain package balances.
• Contract and legitimate interests: to administer interpreter eligibility, assignments, earnings and service quality under the applicable interpreter agreement.
• Legal obligation: to keep records or make disclosures required by tax, accounting, company, court or other applicable law.
• Legitimate interests: to secure the platform, prevent fraud and abuse, protect customers and interpreters, maintain audit trails, investigate billing or operational incidents and defend legal claims, where those interests are not overridden by individual rights.

We document the applicable lawful basis for each processing purpose and do not rely on consent where another lawful basis is more appropriate. Where consent is legally required for a separate optional activity, it will be requested separately and can be withdrawn as provided by law.

4. Sensitive and special-category information

Interpreting can involve sensitive subjects, including health, ethnicity, religion or other special-category information. We do not ask customers to enter detailed sensitive case information into routine routing fields. Customers and organisations should provide only what is necessary to select and deliver the interpreting service.

Where an organisation determines the purpose and content of an underlying appointment or case, that organisation may be the controller of the case information and Quiz & Rise Ltd may act as its processor for the limited transmission and interpreting service, subject to the applicable agreement. That organisation remains responsible for its own lawful basis and, where relevant, Article 9 condition.

Where Quiz & Rise Ltd itself determines the purpose of processing special-category information, we will identify and document an Article 6 lawful basis and an applicable Article 9 condition before that processing is undertaken. Where required, we will also meet any applicable Data Protection Act 2018 Schedule 1 requirement and complete a DPIA for processing likely to result in high risk.

5. Telephone privacy and call content

InterpretLink uses platform routing intended to prevent customers and interpreters from seeing each other’s personal telephone numbers. Telephone providers necessarily process signalling and routing information to establish and carry the call. We minimise telephone data retained in application records and do not use caller ID as account authentication.

Launch calls are not recorded or transcribed by InterpretLink. Because no recording or transcript is created by the service, we do not maintain a recording archive.

6. Who we share information with

We share only information reasonably necessary to operate and protect the service. Recipient categories may include hosting and cloud infrastructure, database and security providers, payment processors, telephone and communications providers, email or notification providers, professional advisers and public authorities where disclosure is required by law.

Providers acting as processors are required to handle personal information under appropriate contractual, confidentiality and security obligations. We maintain an internal record of production processors and subprocessors and review it when providers change.

7. International transfers

Some service providers may process personal information outside the United Kingdom. Where a transfer is a restricted transfer under UK data-protection law, we use an available lawful transfer mechanism appropriate to the destination and provider, such as UK adequacy regulations or approved contractual safeguards, together with any required transfer-risk assessment. We do not claim that all service data remains in the UK unless that has been verified for the relevant processing activity.

8. Retention

We keep personal information only for as long as necessary for the purpose for which it was collected, taking account of legal, tax, accounting, contractual, security and dispute-resolution requirements. We maintain an internal retention schedule and review or delete information when it is no longer needed.

• Account and profile data is retained while needed to operate the account and then reviewed for deletion or restricted retention after closure.
• Payment, invoice, VAT, package and ledger records are retained for the period required for accounting, tax, dispute and legal obligations.
• Interpreter eligibility and audit records are retained only for as long as needed for verification, service integrity, disputes and legal obligations.
• Security logs are retained on a risk-based schedule and are not kept indefinitely.
• Access codes are short-lived, stored in protected form, and cease to function after expiry or consumption.
• No call-recording or transcript retention period applies because InterpretLink does not create them for the launch service.

9. Your rights

Subject to applicable law, you may have rights to access, correct, erase or restrict personal information, object to certain processing, receive data in a portable format where applicable, and complain about our handling of your information. Requests should be sent to privacy@quizandrise.com.

10. Complaints to the ICO

You may complain to the UK Information Commissioner’s Office if you believe your personal information has been handled unlawfully. We encourage you to contact us first so that we can try to resolve the issue promptly.

11. Security

We use technical and organisational measures intended to protect personal information, including controlled access, authentication, audit controls, data minimisation and fail-closed service boundaries. No online system can be guaranteed to be completely secure.

12. Children

InterpretLink is not designed to allow children to independently enter paid service contracts. Where interpreting involves a child as a participant, the responsible adult or organisation should manage the request and provide only the information necessary for the service.

13. Cookies and analytics

We use strictly necessary technologies required for security, authentication and service operation. If we introduce non-essential analytics, advertising or similar technologies that require consent, we will provide appropriate information and consent controls before using them.

14. Updates

This notice should be read together with the Terms of Service and Acceptable Use Policy. We may update it when our processing changes. Material changes will be communicated where appropriate, and the effective date will be updated.