1. Who is responsible for your data
The operator of ExamsAce is the controller of personal data used to provide this service. Questions about privacy, requests, and complaints can be sent to support@examsace.com.
2. Data we collect
- Account details such as name, email, password credentials, intended course, target universities, TMUA preparedness, and whether you already have a tutor.
- Learning data such as answers, uploaded working, marks, feedback, practice history, and topic progress.
- Tutoring data such as allocation, lesson bookings, attendance, notes, and remaining hours.
- Transaction records such as plan, amount, payment status, and access dates. We do not store full card details.
- Support, security, device, and usage information needed to operate and protect the service.
- Your email address and newsletter consent if you choose to subscribe.
Referrals and business contacts
We record referral codes, attribution, qualifying payments, credits and reward requests to operate the referral agreement and prevent abuse. Referrers and partners can see reward status and amounts but cannot see another learner's answers or diagnostic results. Administrators use the account email to deliver requested rewards.
For business partnerships, we may collect a business name, public contact email, website and company information from the business website, search providers and company registers. We research relevant businesses worldwide. We use legitimate interests to approach relevant UK corporate subscribers about working with us. Where consent is required, including for sole traders without another permitted basis, we require it before outreach. You can ask us to stop contacting you at any time by replying to our email or contacting support@examsace.com.
We retain a minimal suppression record to respect opt-outs. Our CRM stores relevant correspondence and the source of contact information. We review inactive leads for deletion and retain financial records where needed for accounting and legal duties. Automated qualification and email experiments support this business process; they do not determine student access or admissions outcomes. We do not use email tracking pixels.
3. Why we use it
- To perform our contract: create your account, provide questions, mark work, show analytics, take payment, and arrange tutoring.
- For legitimate interests: secure the service, prevent abuse, fix faults, and improve learning features in ways that do not override your rights.
- With consent: use optional product analytics, measure advertising conversions, or send non-essential communications. You may withdraw consent at any time.
- To meet legal duties: keep necessary financial records, respond to lawful requests, and protect learners.
4. Automated feedback and personalisation
Software may analyse answers and learning history to generate marks, explanations, hints, topic trends, and recommended practice. This is educational support, not a decision about university admission or another similarly significant matter. It can be wrong. You may ask us to review a concern and can compare feedback with reviewed solutions or a tutor.
5. Who receives data
We use carefully selected service providers for hosting, account security, payment processing, learning assistance, communications, customer support, and optional analytics. They may process only what is needed for their task under contractual and security controls. Tutors see only allocated learners and the progress needed to provide lessons. We may disclose information where law requires it or to protect people and the service. We do not sell personal data.
Newsletter emails
If you subscribe to our newsletter, we store your email address and consent in Supabase for practice tips, updates and offers. Homepage signup displays a discount code but does not send an email. When you finish the diagnostic, we email your results to the address you entered, with an offer to start a trial. Resend delivers that email for us. The diagnostic also adds you to the newsletter unless you tick the box to opt out. We rely on legitimate interests for this. Creating an account does not subscribe you. Every newsletter email has a link that stops them, and you can also contact support@examsace.com. We retain a minimal suppression record to respect your choice.
Account emails
If you create an account and do not finish checkout, we send up to two reminder emails about your trial. The second may include a discount code. Signup tells you about these emails and lets you opt out, and every reminder has a link that stops them. We rely on legitimate interests for these reminders. We also email notice of an upcoming charge before a trial ends. That notice is part of the service, so opting out of reminders does not stop it. Resend delivers these emails for us and receives your name and email address. We keep a record of each email sent and of your opt-out. These emails have no tracking pixels.
6. International transfers
Some service providers may process data outside the UK. Where this happens, we use a lawful transfer mechanism and appropriate safeguards, and assess the protection available for the data.
7. How long we keep data
We keep data only for as long as it is needed for the purpose collected. Typical periods are:
- account and learning records while your account is active, followed by a limited period for recovery and disputes;
- payment and contractual records for up to six years where needed for tax, accounting, or legal claims;
- support records for up to two years after the issue closes;
- shorter periods for security and technical logs unless an incident requires longer retention.
We may anonymise information so it can no longer identify you and use that anonymous information for statistics.
8. Storage on your device
Essential cookies or local storage keep you signed in, protect payments, remember privacy choices, and make the service work. Optional analytics storage is used only after you allow analytics. Google Ads loads only after you allow advertising measurement, separately from analytics. It uses advertising cookies and checkout conversion events to measure which ads lead to completed checkouts, including trial signups. Ad personalisation stays disabled. We do not send your answers, uploaded working, name, or email in conversion events. Choosing "Essential only" does not reduce the learning features you can use. You can change either choice below.
We also remember when you dismiss the newsletter offer so it does not keep reopening. This storage contains no email address.
Analytics: not set
Advertising measurement: disabled
9. Children and young people
Admissions-test learners may be under 18, so we use privacy-protective defaults, limit collection to what the service needs, and avoid using learning data for targeted advertising. If you are under 18, ask a parent or guardian to help if any part of this policy is unclear. A parent or guardian may contact us where legally appropriate.
10. Your rights
Depending on the circumstances, UK data protection law gives you rights to access, correct, erase, restrict, or transfer your personal data; object to some uses; withdraw consent; and ask for human review of a solely automated significant decision. Email support@examsace.com. We may need to verify your identity and normally respond within one month. You may also complain to the UK data protection regulator.
11. Security and changes
We use access controls, encryption in transit, private storage, monitoring, and least-privilege administration. No online service can be completely risk free. We will post important policy changes here and give additional notice where the change materially affects you.