Privacy policy

Draft template — replace the bracketed details and have it reviewed before launch.

Who we are

PreflightCert is a trading name of Helix Infinity Ltd, a company registered in England and Wales (company no. [company number]). Helix Infinity Ltd is the data controller for your personal data. Contact: support@example.com. ICO registration number: [number].

What we collect

Account details: email address, display name and a securely hashed password.
Study data: the mock exams you take, your answers, scores and hint use.
Billing: a Stripe customer reference and subscription status. Card details are collected and held by Stripe, never by us.
Security logs: failed login attempts (email and IP address), kept for up to 15 minutes to prevent abuse.

Why, and our lawful basis

To provide the service you signed up for (contract).
To take payment and keep financial records (contract and legal obligation).
To keep accounts secure (legitimate interests).
To support you, investigate problems and improve our questions (legitimate interests). Staff with admin access can view your account details, subscription status and exam results when there is a reason to, such as a support request. We also look at overall figures, such as sign-ups and pass rates.

We do not sell your data or use it for advertising.

Who we share it with

Stripe Payments Europe Ltd — payment processing.
Fly.io and Neon — hosting, under data processing agreements.

How long we keep it

For as long as your account is open. When you delete your account, your account and study data are deleted immediately. Billing records are kept by us and Stripe for 6 years where UK tax law requires.

Your rights

You can access, correct, export or delete your data. Export and deletion are available from your Account page; for anything else email support@example.com. You can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use one strictly necessary cookie to keep you logged in. We do not use analytics or advertising cookies.