Privacy Policy

Last updated: June 2026

Who we are

PrepTicks (“we”, “our”, “us”) operates this website to provide 11+ exam preparation services for children in the UK. We are registered with the Information Commissioner's Office (ICO).

Information we collect

We collect the following data:

• Account information: Parent/guardian name, email address, password (encrypted)
• Child's first name: Used to personalise the learning experience
• Exam performance data: Answers, scores, time taken — used to track progress and identify areas for improvement
• Payment information: Processed securely by Stripe. We do not store card details.

Children's data

Our service is designed for children aged 9-11. We take extra care with children's data in compliance with the UK GDPR and the ICO's Age Appropriate Design Code:

• We require verifiable parental consent before creating any account
• We collect only the minimum data needed to provide the service
• We do not use children's data for marketing or behavioural advertising
• We do not share children's data with third parties for their own purposes
• We do not use nudge techniques or addictive design patterns

How we use your data

• To provide and personalise the exam preparation service
• To track learning progress and generate performance insights
• To send account-related emails (verification, password reset)
• To process payments (via Stripe)

Who we share data with

• Supabase — database hosting (EU servers)
• OpenAI — AI question generation (no personal data sent)
• Stripe — payment processing
• Resend — transactional emails
• Vercel — website hosting

All processors have appropriate Data Processing Agreements in place.

Data retention

We retain account data for as long as the account is active. Upon account deletion, all personal data and exam history is permanently removed within 30 days.

Your rights

Under UK GDPR, you have the right to:

• Access your data (request a copy)
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise any of these rights, email us at privacy@prepticks.co.uk.

Cookies

We use only essential cookies required for the service to function (session cookies). We do not use tracking cookies, analytics cookies, or advertising cookies.

Security

We protect your data with:

• Encrypted passwords (bcrypt hashing)
• HTTPS encryption on all connections
• Secure session management
• Regular security reviews

Changes to this policy

We will notify registered users by email of any material changes to this policy.

Contact

For privacy queries: privacy@prepticks.co.uk

ICO registration number: [To be added]