1. Who We Are

QBT Revision ("we", "us", "our") is an online educational revision platform designed for GCSE and A-Level students in the United Kingdom. We are committed to protecting the privacy and personal data of our users, including students under the age of 18, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We collect and process the following personal data:

Account information: Your name and email address, provided when you sign in via our authentication provider.
Quiz and revision data: Your answers, scores, progress, topic preferences, and revision history, used to personalise your learning experience.
Subscription data: Payment-related identifiers processed securely through Stripe. We do not store your full card details.
Usage data: Pages visited, features used, and session duration, collected to improve the platform.

3. Lawful Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

Contract: To provide you with the revision services you have signed up for.
Legitimate interests: To improve our platform, ensure security, and provide personalised revision recommendations.
Consent: Where required, such as for optional analytics or marketing communications.

4. How We Use Your Data

Your data is used to:

Provide and personalise your revision experience (spaced repetition, recommended topics, progress tracking).
Process payments and manage subscriptions securely via Stripe.
Generate AI-powered feedback on your quiz answers.
Improve the platform through aggregated, anonymised usage analytics.
Communicate important service updates.

5. Data Sharing

We do not sell your personal data. We share data only with trusted third-party processors necessary to operate the platform:

Stripe: For secure payment processing.
Cloud hosting providers: For data storage and platform infrastructure.
AI services: To generate personalised feedback (your answers may be processed by AI models; no personal identifiers are sent).

All third-party processors are bound by data processing agreements and are required to handle your data in compliance with UK GDPR.

6. Children's Privacy

QBT Revision is designed for students aged 13 and above. If you are under 13, you must have parental or guardian consent to use this platform. We take additional care to minimise data collection for younger users and do not use their data for marketing purposes. Parents and guardians can contact us at any time to review, amend, or delete their child's data.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain certain records. Anonymised, aggregated data may be retained indefinitely for analytics purposes.

8. Your Rights

Under UK GDPR, you have the following rights:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate data.
Right to erasure: Request deletion of your personal data ("right to be forgotten").
Right to restrict processing: Request that we limit how we use your data.
Right to data portability: Request your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, please contact us at the email address below.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS/TLS), secure authentication, and access controls. While no system is completely secure, we take reasonable steps to safeguard your information.

10. Cookies

We use essential cookies to maintain your login session and preferences. We do not use third-party advertising cookies. Analytics cookies, where used, collect anonymised data to help us understand how the platform is used and improve the experience.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

[email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.