1. Introduction

Welcome to MSRA UK Question Bank ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and in using our products and services.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

2.1 Information You Provide

We may collect information that you voluntarily provide to us when you:

• Register for an account (username, email address, display name)
• Subscribe to our services (payment information processed through Stripe)
• Contact us for support or inquiries
• Participate in surveys or provide feedback

2.2 Automatically Collected Information

When you use our services, we may automatically collect certain information, including:

• Usage data (questions attempted, answers submitted, study sessions)
• Device information (browser type, operating system)
• IP address and location data (for security and service optimization)
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and manage your subscription
• Track your study progress and provide personalized learning insights
• Send you important updates about your account and our services
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Data Storage and Security

We use Cloudflare Workers and Durable Objects to store and process your data. Your data is stored securely and is only accessible to authorized personnel. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We may share information with third-party service providers who perform services on our behalf, such as Stripe (for payment processing) and Cloudflare (for hosting and infrastructure).
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the UK, you have certain data protection rights:

• Right to Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete data.
• Right to Erasure: You have the right to request that we delete your personal data under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data.
• Right to Data Portability: You have the right to request that we transfer your data to another organization or directly to you.
• Right to Object: You have the right to object to our processing of your personal data.

To exercise any of these rights, please contact us using the information provided in the Contact section below. For more details, see our Data Rights page.

7. Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal data, except where we are required to retain it for legal or regulatory purposes.

8. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Email: privacy@msra.uk

For more information, visit our Contact page.