Privacy Policy

This policy explains how we handle your personal data under the UK GDPR and the Data Protection Act 2018. It is provided in good faith; if you need formal legal certainty you should seek your own advice.

1. Who We Are (Data Controller)

Get My Test Score is a trading name of Adam Simmons-Spaans, a sole trader registered in the United Kingdom. We are the "data controller" for the personal data described in this policy.

• Controller: Adam Simmons-Spaans, trading as Get My Test Score
• Address: Suite 656, 80A Ruskin Ave, Welling, DA16 3QQ, United Kingdom
• Contact: info@getmytestscore.co.uk or via our contact page
• ICO registration: Registered with the UK Information Commissioner's Office, reference ZC178635

Our website is hosted on Cloudflare's network. We are a free, unaccredited online learning platform offering courses, quizzes, puzzles and cognitive tests for personal development.

2. What Data We Collect

When you create an account, we collect:

• Name — the display name you choose
• Email address — for authentication and account recovery
• Password — stored securely (hashed) by our authentication provider; we never see your plain-text password

When you use the platform while signed in, we also store:

• Course enrolments and completions, including module results
• Test results — scores, percentages and category breakdowns
• Quiz scores — scores, time taken and leaderboard statistics

If you sign up to our newsletter, we store the email address you provide. If you use our contact form, we store the name, email, subject and message you submit so we can reply. We also receive a limited amount of technical data (such as your IP address) that our hosting and security providers process to deliver and protect the site.

3. How We Use Your Data and Our Lawful Bases

Under Article 6 of the UK GDPR we rely on the following lawful bases:

• Performance of a contract / our legitimate interests — to create and maintain your account, show your results and progress, and operate the public quiz leaderboard (your display name and score are visible to other users).
• Consent — to send you newsletter emails (where you have subscribed) and to set non-essential advertising cookies (where you have accepted them). You can withdraw consent at any time.
• Legitimate interests — to respond to your enquiries, keep the site secure, prevent abuse and improve our content. We balance these against your rights.
• Legal obligation — where we must retain or disclose data to comply with the law.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Cookies & Similar Technologies

We use a small number of cookies and browser storage:

• Strictly necessary — for sign-in/sessions and for our security check (Cloudflare Turnstile). These do not require consent.
• Advertising (Google AdSense) — non-essential. Because our content is likely to be accessed by under-18s, we have configured AdSense to serve non-personalised ads only — we never use advertising profiling. An ad cookie is only set after you click "Accept" on our cookie banner; if you reject, no advertising cookie is set. We use Google Consent Mode so your choice is respected.
• Local storage — we store some preferences and progress (e.g. puzzle state, your cookie choice) directly in your browser; this is not shared with us as cookies.

You can change your cookie choice at any time using the "Cookie settings" link in the footer, or opt out of personalised Google advertising at Google Ad Settings. We do not use analytics cookies; our privacy-friendly traffic measurement (Cloudflare Web Analytics) is cookieless and does not track you across sites. Google Fonts may log your IP address when fonts are loaded.

5. Who We Share Data With (Processors)

We use trusted third-party providers who process data on our behalf under contract:

• Cloudflare — website hosting, content delivery, and the Turnstile security check
• Supabase — secure database and authentication for accounts, scores and the newsletter list (with row-level security)
• Resend — sending newsletter and transactional emails
• Google — AdSense advertising (only with your consent) and Google Fonts

6. International Transfers

Some of our providers are based outside the UK, or may process data outside the UK (for example in the United States or the EU). Where personal data is transferred outside the UK, we rely on appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, as offered by the relevant provider.

7. Data Security & Retention

We use providers that apply industry-standard security measures, including encryption in transit, hashed passwords and access controls. We retain your account data for as long as your account is active. If you request deletion, we remove your personal data within 30 days (except where we must keep limited records to meet a legal obligation). Newsletter data is kept until you unsubscribe.

8. Your Rights

Under the UK GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data (you can update your name or email on your profile page)
• Erase your data ("right to be forgotten")
• Restrict or object to certain processing
• Data portability — receive your data in a portable format
• Withdraw consent at any time (for newsletters and advertising cookies)

To exercise any of these rights, contact us via our contact page or at info@getmytestscore.co.uk. We will respond within one month.

9. Complaints

If you are unhappy with how we have handled your data, you have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or call 0303 123 1113. We are registered with the ICO under reference ZC178635. We would appreciate the chance to address your concerns first.

10. Children & Younger Users (UK Children's Code)

Our content (tests, quizzes and puzzles) is likely to be used by people under 18, so we follow the ICO's Age-Appropriate Design Code and treat the best interests of the child as a primary consideration. We design for high privacy by default.

Accounts are intended for users aged 13 and over, and the site is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it. Parents or guardians can contact us at any time at info@getmytestscore.co.uk to access or delete a child's data.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be reflected here; please check back periodically.

12. Contact

For any questions about this policy or your data, contact us at info@getmytestscore.co.uk or via our contact page.