Privacy Policy

SolvPrep is operated by [PLACEHOLDER: company legal name], [PLACEHOLDER: company registration number], with registered office at [PLACEHOLDER: registered office address]. For UK GDPR purposes, [PLACEHOLDER: company legal name] is the data controller for parent account data and child learning data processed through Victory 11+.

Privacy questions can be sent to [PLACEHOLDER: dedicated privacy email/contact]. General support can currently be sent to sales@solvprep.com.

Parent account data may include name, email address, password hash, billing status, subscription records, support messages and account settings.

Child profile data may include display name, year group, school name, target exam information, selected companion, child username, password hash, learning preferences and parent-created notes.

Learning data may include lessons viewed, questions attempted, answers, correctness, timing, confidence/reflection signals, mock results, readiness scores, review queues, missions, streaks, XP, achievements and intervention history.

Technical and usage data may include device/browser information, IP address, session identifiers, security logs, cookie identifiers, page views and product usage events needed to operate and improve the service.

Parent account creation, authentication, subscription management, billing records and service delivery are processed because they are necessary for our contract with the parent or guardian.

Child profile creation and child learning activity are processed on the basis of parental consent and, where relevant, because they are necessary to provide the parent-managed educational service requested by the parent or guardian. [PLACEHOLDER: solicitor to confirm final lawful-basis framing for child accounts].

Security logging, fraud prevention, service reliability, account protection and basic product improvement are processed for our legitimate interests, balanced against the rights and interests of parents and children.

Payment, tax, accounting and statutory record keeping may be processed because we have a legal obligation to keep certain records.

Optional analytics, non-essential cookies or marketing communications, if enabled, will rely on consent where required by law. [PLACEHOLDER: confirm analytics and marketing setup before launch].

We use data to run Victory 11+, show lessons and practice, calculate readiness, recommend missions, track progress, generate reports, protect accounts and help parents understand learning evidence.

We do not sell child learning data. We do not use child learning data to build advertising profiles. We do not require children to provide email addresses.

We may use aggregated or de-identified information to improve question quality, lesson coverage, platform reliability and educational effectiveness, provided it does not identify a child or parent.

We use carefully selected service providers to operate the platform. Current and planned processor categories include hosting/infrastructure, database hosting, payment processing, email delivery, analytics, error monitoring and customer support tools.

Processor list: hosting/infrastructure - [PLACEHOLDER: provider and location]; database - [PLACEHOLDER]; payment processing - Stripe [PLACEHOLDER: Stripe entity and role]; email delivery - [PLACEHOLDER]; analytics - [PLACEHOLDER]; error monitoring - [PLACEHOLDER]; support tools - [PLACEHOLDER]. SolvPrep does not store full payment card numbers, CVV codes or full payment credentials. Card details are entered into Stripe secure payment flow; SolvPrep stores only limited billing references such as Stripe customer/subscription identifiers, subscription status and renewal dates.

We should have appropriate data-processing terms in place with processors before paid launch. [PLACEHOLDER: confirm processor agreements and data-processing addenda].

Some providers may process data outside the UK or EEA. [PLACEHOLDER: confirm whether any personal data is transferred outside the UK/EEA].

Where international transfers occur, we will use appropriate safeguards such as UK International Data Transfer Agreements, the UK Addendum to EU Standard Contractual Clauses, adequacy regulations, or another lawful transfer mechanism as applicable. [PLACEHOLDER: confirm safeguards per processor].

We keep parent account and child learning records while the account is active so progress, recommendations, reports and subscription access continue to work.

After account closure, we will delete or anonymise child learning data within [PLACEHOLDER: retention period after closure], unless we need to keep limited records for legal, accounting, dispute-resolution or security reasons.

Billing and tax records are retained for [PLACEHOLDER: accounting/tax retention period]. Security logs are retained for [PLACEHOLDER: security log retention period]. Support records are retained for [PLACEHOLDER: support retention period]. Backups are retained for [PLACEHOLDER: backup retention period] before expiry or overwrite.

Parents and, where applicable, children have rights under UK data protection law. These may include the right of access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent where processing is based on consent.

Requests can be sent to [PLACEHOLDER: dedicated privacy email/contact]. We may need to verify the request and parent-child relationship before acting on child data requests.

You also have the right to complain to the UK Information Commissioner's Office. The ICO can be contacted at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, by helpline on 0303 123 1113, or through https://ico.org.uk/make-a-complaint/.