Privacy Policy

Last Updated: December 19, 2024

Ninja Education and Consulting Ltd, trading as "PrepForCHSE" ("we," "us," or "our"), is committed to safeguarding your personal information and respecting your right to privacy. This Privacy Policy explains how we collect, use, share, and protect your data when you use our services ("Services"), including:

  • Visiting our website at https://www.prepforchse.com or any related pages linking to this policy
  • Accessing and utilizing our question banks, study tools, and related educational resources
  • Purchasing products or services through our platform
  • Contacting us for support, inquiries, or other interactions

If you have any questions or concerns about this notice or our data practices, please contact us via our Contact Page. If you are not comfortable with any part of this policy, please discontinue using our Services.

Key Points

  • Data We Collect: We may collect personal details like your name, email, billing information, account credentials, and data relating to your study activities and usage patterns.
  • Sensitive Data: We do not knowingly process special categories of personal data.
  • Data Sources: Information is typically obtained directly from you or generated through your use of our Services. We do not regularly receive personal data from third parties unless stated.
  • Data Use: Your data helps us operate and enhance our Services, fulfill transactions, offer support, and communicate important updates.
  • Data Sharing: We may share information with our vetted service providers, in compliance with applicable laws and agreements, or as part of lawful business transitions.
  • Security Measures: We use industry-standard tools and practices to protect your information, but no online service is completely secure.
  • Your Rights: Depending on your location, you may have legal rights to access, correct, or delete your information, and to lodge complaints with regulatory bodies.

Contents

  1. Information We Collect
  2. How We Use Your Information
  3. Legal Bases for Processing (EU/UK Residents)
  4. Sharing Your Personal Information
  5. Cookies and Tracking Technologies
  6. International Data Transfers
  7. Data Retention
  8. Data Security Measures
  9. Children’s Privacy
  10. Your Privacy Rights
  11. Do-Not-Track Signals
  12. U.S. State-Specific Privacy Rights
  13. Additional Regional Rights
  14. Policy Updates
  15. Contact Us
  16. Accessing, Updating, or Deleting Your Data

1. Information We Collect

Information You Provide: We collect information you voluntarily provide, such as when you create an account, make a purchase, participate in study activities, or contact our support team. This may include:

  • Name and email address
  • Username and password
  • Billing and payment details (processed securely via a third-party payment processor)
  • Study progress, performance data, and usage preferences

Information Collected Automatically: We automatically gather technical information like your IP address, browser type, device details, pages visited, and interactions with our platform to help us improve and optimize our Services.

2. How We Use Your Information

We use collected data to:

  • Set up and maintain your user account
  • Provide and enhance our Services, including personalized learning and question bank recommendations
  • Process transactions, handle orders, and manage billing-related tasks
  • Communicate important updates regarding our terms, policies, and platform features
  • Offer customer support and respond to inquiries
  • Detect, prevent, and address fraudulent or unauthorized activities
  • Identify trends and improve our Services’ performance and usability

For individuals located in the EU, UK, or similar jurisdictions, we rely on legal grounds under applicable data protection laws, including:

  • Consent: When you have clearly agreed to our use of your personal data for a specific purpose.
  • Contractual Necessity: To deliver the Services you have requested or to take steps at your request before entering into a contract.
  • Legitimate Interests: For our reasonable business interests (e.g., improving our Services, ensuring security) balanced against your rights and freedoms.
  • Legal Obligations: To comply with applicable laws, regulations, or court orders.
  • Vital Interests: In rare cases, where it is necessary to protect someone’s life or health.

4. Sharing Your Personal Information

We may share your information with trusted third parties who provide essential functions on our behalf. These providers are carefully vetted and contractually obligated to protect your data. Our key third-party service providers include:

  • Amazon Web Services (AWS) (EU) - Data backup storage
  • Cloudflare (Global) - Content delivery network (CDN) and security services
  • DigitalOcean (UK) - Database hosting
  • Google - Authentication services
  • Hetzner (EU) - Website hosting
  • Mailgun - Email communications
  • Redis - Caching and performance optimization
  • Sentry - Error tracking and monitoring
  • Paddle - Payment processing

We may also disclose information if legally required (e.g., responding to law enforcement requests), to protect rights and safety, or in the event of a business merger, acquisition, or asset sale.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to facilitate site navigation, remember your preferences, track your progress, and analyze usage patterns. For details on managing these technologies, please see our Cookie Policy.

6. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We implement safeguards, such as Standard Contractual Clauses, to ensure that transferred data remains protected under applicable data protection laws.

7. Data Retention

We retain personal data only for as long as needed to achieve the purposes described in this policy or as required by law. When no longer necessary, we either delete or anonymize your data.

8. Data Security Measures

We employ technical and organizational measures to help protect your personal information. This includes encryption (HTTPS), secure password hashing, regular security updates, and restricted access protocols. While we strive to keep your data safe, no online system is completely secure.

9. Children’s Privacy

Our Services are not directed at individuals under 18. We do not knowingly gather information from minors. If we learn we have collected personal data from a child, we will promptly take steps to remove it.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

  • Request access to the personal data we hold about you
  • Rectify inaccurate information
  • Request deletion or limit certain processing
  • Object to processing or withdraw consent where applicable
  • Data portability (in certain jurisdictions)

EU/UK/EEA residents may also lodge complaints with their local data protection authority. For assistance in exercising these rights, please contact us.

11. Do-Not-Track Signals

Our website does not currently respond to DNT signals due to the lack of a standardized industry approach. If standards emerge, we may revisit our stance.

12. U.S. State-Specific Privacy Rights

Residents of certain U.S. states may have additional privacy rights, including the rights to access, delete, or opt out of certain data uses. Please check your state’s relevant legislation or contact us for more information.

13. Additional Regional Rights

Other regions (such as Australia, New Zealand, South Africa) may have additional data protection laws that grant you specific rights. We endeavor to comply with these laws. Please contact us for more information.

14. Policy Updates

We may modify this Privacy Policy from time to time. Changes are effective upon posting the updated notice with the revised "Last Updated" date. If changes are substantial, we may notify you more prominently.

15. Contact Us

If you have questions, concerns, or need clarification, please reach out:

Ninja Education and Consulting Ltd
20-22 Wenlock Road
London N1 7GU
United Kingdom
Contact Page

16. Accessing, Updating, or Deleting Your Data

You may request access to, correction of, or deletion of your personal data at any time by contacting us. We will respond in accordance with applicable data protection laws.