Privacy Policy
This Privacy Policy explains how 11 Plus Practice Papers ("we", "our", "us") collects, uses, and protects information when you use our website at 11pluspracticepapers.co.uk (the "Service").
We are committed to protecting the privacy of parents and children who use our platform. This policy is written in plain English.
1. Who We Are
11 Plus Practice Papers is operated from the United Kingdom. Our contact email is hello@11pluspracticepapers.co.uk.
2. Information We Collect
We collect the minimum information needed to provide the Service:
- Account information: Your email address, a hashed (not plain-text) version of your password, and the first name(s) of the student(s) who will use the portal.
- Usage data: Questions answered, scores, time spent, topics covered, and paper attempts. This is stored locally in your browser (localStorage) and is not transmitted to our servers unless you view the progress dashboard.
- Session logs: Login timestamps and status (success/fail). Stored in a private Google Sheet accessible only to us.
- Payment information: We do not store payment card details. Payments are processed by a third-party provider (Stripe or similar) under their own privacy policy.
3. Children's Privacy
The portal is used by children preparing for the 11+ exam. We take this seriously:
- We only store children's first names (not surnames, dates of birth, or any identifying information).
- We do not display any advertising on the platform.
- We do not share children's information with any third parties.
- Accounts are created and managed by a parent or guardian, not by the child directly.
- Usage data (practice scores, questions answered) is stored locally in the browser. We do not build profiles of individual children on our servers.
4. How We Use Your Information
- To provide and maintain the Service (login, access control, progress tracking).
- To send transactional emails (account creation, password resets, subscription updates). We do not send marketing emails without your explicit consent.
- To detect and prevent fraudulent use or abuse of the Service.
- To respond to support enquiries.
5. Data Storage and Security
Account data (email, hashed password, student name) is stored in a private Google Sheet hosted on Google Drive. Access is restricted to the Service operators only.
Passwords are stored as SHA-256 hashes with a unique salt - we cannot read your password.
Practice data (scores, answers, progress) is stored in your browser's localStorage. It does not leave your device unless you access the dashboard.
6. Cookies and Local Storage
We use browser localStorage (not cookies) to:
- Maintain your login session.
- Store your child's practice progress and settings.
- Remember your preferred exam format, difficulty, and dark mode setting.
We do not use tracking cookies, advertising cookies, or any third-party analytics (unless you have consented to Google Analytics, which can be opted out of at any time).
7. Sharing Your Information
We do not sell, trade, or rent your personal information to any third party.
We may share information in the following limited circumstances:
- Legal requirement: If required by law, court order, or to protect the rights and safety of users.
- Service providers: Google (for Google Sheets/Apps Script infrastructure) and our payment processor. Both operate under their own privacy policies and are contractually prohibited from using your data for any other purpose.
8. Your Rights (UK GDPR)
Under UK data protection law, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate data.
- Erasure: Ask us to delete your account and all associated data ("right to be forgotten").
- Portability: Request your data in a machine-readable format.
- Objection: Object to certain types of processing.
To exercise any of these rights, email hello@11pluspracticepapers.co.uk. We will respond within 30 days.
9. Data Retention
We retain your account data for as long as your subscription is active. If you cancel your subscription, we delete your account data within 90 days unless you request earlier deletion.
Login session logs are retained for 12 months for security purposes, then deleted.
10. Changes to This Policy
We may update this policy occasionally. If we make significant changes, we will notify you by email. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@11pluspracticepapers.co.uk.