Terms & Conditions, Retention Schedule and Privacy Notice


CEM is a leading provider of assessment and monitoring systems including baseline, attitudinal, diagnostic and entrance tests. In order to carry out their activities, CEM processes personal data. Please read the privacy information below – Part 1 comprises Cambridge Assessment’s Generic Privacy Notice and Part 2 comprises privacy information specific to the activities of CEM.

Terms and Conditions

You can find the terms and conditions related to CEM products here.


Part 1 – Generic Privacy Notice

Cambridge Assessment, through its three exam boards, offers various education-related products and services, including materials to support learners and teachers, training services for teachers and examiners, and research work aimed at educators and policy makers. Cambridge Assessment’s address is The Triangle Building, Shaftesbury Road, Cambridge, CB2 8EA.

In order to provide these products and/or services we need to use personal data. That means that we may need to use information about you, for example your name, address, email address, phone number, date of birth, exam results, voice or video recording or other information by which we can tell who you are. We might collect the data from you directly or from your school or centre of learning.

Sometimes we might even need to hold special personal data about you, for example information about your health. But we would only hold this type of special information if we have a clear reason for doing so, such as to make special arrangements. Where appropriate, we would seek permission first. If you are 16 years of age or more then you would need to give us that permission, but if you are younger than that we would need to get permission from your parent or guardian.

It is important to us that we protect your privacy and any personal data that we hold about you. This Policy describes the way we use personal data so that you can know how you might be affected. If you have any questions about this, you can contact us at privacy@cambridge.org.

It is important that this notice is read together with any other privacy notice we may provide when we are collecting personal data about you. This notice supplements the other notices and is not intended to override them.

Your rights in relation to your personal data

You have the right to be provided with information about how and why we process your personal data. Where you have the choice to determine how your personal data will be used, we will ask you for consent. Where you do not have a choice (for example, where we have a legal obligation to process the personal data), we will provide you with a privacy notice. A privacy notice is a verbal or written statement that explains how we use personal data.

Whenever you give your consent for the processing of your personal data, you receive the right to withdraw that consent at any time. Where withdrawal of consent will have an impact on the services we are able to provide, this will be explained to you, so that you can determine whether it is the right decision for you.

Subject to applicable law, you may have the right to: obtain confirmation that we hold personal data about you, request access to and receive information about the personal data we maintain about you, receive copies of the personal data we maintain about you, update and correct inaccuracies in your personal data, object to the processing of your personal data, and have your personal data blocked, anonymised or deleted, as appropriate. The right to access your personal data may be limited in some circumstances by local law requirements. To exercise these rights, please contact us by emailing privacy@cambridge.org.


It is our policy to retain your personal data for the length of time required for the specific purpose or purposes for which it was collected, which are set out in this Privacy Notice. We may keep data which has been anonymised for longer than this period to allow us to carry out analysis of our products and services.

Making a Complaint

If you are unsatisfied with the way in which we process your personal data, we ask that you let us know so that we can try and put things right. If we are not able to resolve issues to your satisfaction, you can refer the matter to the Information Commissioner’s Offce (ICO).

The ICO can be contacted at:

Information Commissioner's Offce Wycliffe House
Water Lane Wilmslow Cheshire SK9 5AF

Telephone: 0303 123 1113

Website: Information Commissioner’s Offce (https://ico.org.uk/)

Part 2 – Privacy Notice for CEM

This section of the Privacy Notice provides you with the privacy information that you need to know before you provide personal data to CEM for the particular purpose(s) stated below.

Type(s) of personal data collected and held by Centre for Evaluation and Monitoring (CEM) and method of collection:

CEM System

Information collected

 Attitudinal pre-16

Mandatory; pupil name, contact details for your account liaison
Voluntary; date of birth form group, home postcode, pupil number, which language do you speak at home

 Attitudinal post-16

Mandatory; pupil name, gender, year group, contact details for your account liaison
Voluntary; date of birth, home postcode, year of course


Mandatory; pupil name, date of birth, sex, class name, year group, contact details for your account liaison
Voluntary; Looked After Child, Special Educational Needs, Special Educational Needs type, Ethnic origin, born in UK, English as an Additional Language, home postcode, Unique Pupil Number/student code

PIPS Baseline /Base /Check Together

Mandatory; pupil name, date of birth, sex, class, year group, contact details for your account liaison, Date of Entry (BASE)
Voluntary; unique pupil number/student code, ethnic origin, English as an Additional Language, Looked After Child (BASE), Special Educational Needs Type, Born in UK, home postcode, Free School Meals status, Full time/part time status (PIPS), Terms in Nursery/Preschool, Pupil Premium status (BASE)

(Year 1 – 6)

Mandatory; pupil name, date of birth, sex, class name, year group, contact details for your account liaison
Voluntary; Ethnic origin, English as an Additional Language, Born in UK, Free school meals status, Pupil ID, Special Educational Needs Type


Mandatory; pupil name, date of birth, sex, class, year group, contact details for your account liaison
Voluntary; Ethnic origin, Special Educational Needs Type, Born in UK, home postcode, English as an additional language Unique Pupil Number/student code, Free School Meals status


Mandatory; pupil name, date of birth, Year group, contact details for your account liaison
Voluntary; Unique Pupil Number, Scottish Candidate Number, Management Information System ID, Unique Learner Number, Ethnic origin, home postcode, Previous School Number, Previous School Name, Extra Time, (I)GCSE Exam results, Subject Choices (Yellis)


Mandatory; pupil name, date of birth, sex, Year group, contact details for your account liaison
Voluntary; Unique Pupil Number, Unique Learner Number, unique candidate identifier, Management Information System ID, home postcode, ethnic origin, Average (I)GCSE score or Attainment 8 score, subject choices, AS/A Level/IB Exam Results

Entrance Testing

Mandatory; pupil IDs, pupil name, date of birth, gender, pupil postcode, test date, current school, test venue, test session, also-applying-to other grammar schools information

Help Desk

Mandatory; contact details for your account liaison

Web Site

Your contact details, marketing preferences, cookies


Your Title, First Name, Last name, Job title, Company, Company address, Email, Phone Number, Mobile, Lead source (how we obtained your information)

Lead Generation Forms from LinkedIn

LinkedIn Insight Tag
LinkedIn browser cookie: metadata such as IP address, timestamp, and page events (like page views).

Assessment Trialling

Voluntary: Forename, Surname, Date of Birth, Gender, Session, Notes – pupil level, School Name, Year group and Responses

Learning the lockdown lesson research – teacher survey

Voluntary: Teacher name, teacher email address.

Mandatory: School name, teacher gender, teacher age range, responses to survey.

Learning the lockdown lesson research – student survey

Mandatory: School name, student first name, student surname, student year group, student age, responses to survey.

CPSQ (Cambridge Personal Styles Questionnaire) – privacy statement related to this questionnaire

Voluntary: Student gender, student age, student ethnicity.

Mandatory: Student school email address, student name.

Co-creation project – sharing customer ideas

Mandatory: Name, e-mail address, role, school name.

EdTech Panel

Mandatory: Name, School, Role, email address, school address, biography, picture, responses to surveys.

The Cambridge Wellbeing Check

Mandatory: Forename, Surname, Date of Birth, Gender, School name, Class name, Year group and individual responses. As the questionnaire is focused on wellbeing, the individual responses submitted may constitute sensitive personal information as they may relate to the participant’s physical or mental health.

CEM Data Insights for Middle Leaders

Voluntary: Address, Centre number.

Mandatory: Forename, Surname, School name, Email address, Job title.

Lawful Basis

Our lawful basis for processing personal data is Legitimate Interest.

How personal data is stored by CEM

Personal data is held in proprietary databases and computer file systems with access limited to CEM staff only. All personal data is held in UK Data Centres.

How personal data is processed by CEM

  • We use the information to send baseline feedback, progress feedback and value-added feedback to schools on individual pupils and at class level (monitoring systems).
  • We share entrance test information with schools which they use to allocate school places.
  • We use the information for educational research such as informing assessment development and influencing educational policy. All data for research purposes is anonymised.
  • We share some information, but not personal data, with other organisations for research purposes.
  • We use the information, when contacted by designated coordinators from the school/college through which the assessments are taken, to help them make best use of our services, reports and research.

Who CEM shares personal data with

We may share data from our Research Archive with other research partners. Personal data is never published as part of any research undertaken.

We may share personal data with a named sub-processor, who performs activity on our behalf and on behalf of your Data Controller. This is always done with the authority of your Data Controller.

Visitors to our websites/webpages

This privacy notice refers to www.cem.org and the www.cem.org/blog websites and marketing contact data only.

We collect personal information for marketing purposes through forms on our website and blog (for example, for you to request a demo of our assessments, or to sign up to receive a regular email), and through cookies.

We only send marketing information to people who have specifically said that they agree to us doing this, and we will only do so in the way(s) they have agreed to. If we contact you by email, every message we send will include a link to opt out of receiving future messages if you change your mind.

Occasionally, we will combine personal information provided to us for marketing purposes with information we hold about our current and previous customers. We will do this to help us better understand our customers and the impact of our marketing activities.

This website uses the Google remarketing service to advertise on third party websites (including Google) to previous visitors to our site.

Use of cookies by CEM

We use cookies so that we can give you a better experience when you return to our websites. Cookies cannot be used to identify you personally; they are used to improve services for you. In particular, we use cookies to:

  • estimate our audience size and patterns
  • control how often visitors see similar adverts
  • track preferences and to improve and update our websites.

This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network. Third-party vendors, including Google, use cookies to serve ads based on someone’s past visits to the CEM website.

You can opt out of Google’s use of cookies by visiting Google’s Ads Settings: https://adssettings.google.com/. Alternatively, you can opt out of a third-party vendor’s use of cookies by visiting the Network Advertising Initiative opt-out page: http://optout.networkadvertising.org/

In continuing to access and use the site, you confirm your acceptance of our use of Cookies in this way.


Links to other websites

On occasions we may link to external websites where they may collect information. We encourage you to read the privacy statements on those sites.

Document Accessibility

Many of the documents on this website were initially designed for print. This means that they do not meet web accessibility standard WCAG 2.1. For example, they may not contain text alternatives or may be structured in a way which is incompatible with screen readers. If you require any of these documents in a different format, please contact us at info@cambridgeinternational.org (with the subject heading: Digital accessibility) and we will aim to respond within 15 working days.

Changes to this privacy notice

We may make changes to this Privacy Notice and will let you know about these changes by displaying them on this website. Changes will begin to have effect at the time they are displayed. The version of the Privacy Notice that will apply to you is the one which is current at the time we contact you, you use this website or you use our services.

Further information

You can contact CEM regarding this Privacy Notice using the following details;

Email: privacy@cambridge.org