Privacy Policy

Last updated: 01/12/2025

This Privacy Policy explains how we collect, use and protect personal information relating to users and visitors of CivicLearn and the platform LifeInTheUKTestSupport.co.uk (referred to below as the “Platform”).

1. Data controller

The data controller is:

Testrada Pte Ltd
A’Posh Biz Hub #05-34, 1 Yishun Industrial Street 1
Singapore 768160
Email: admin@civiclearn.com

2. What data do we collect?

2.1. Data you provide to us

• Email address (for account creation, login, magic-link access, and service communication).
• Name (if voluntarily provided, for example during payment or support requests).
• Payment-related information (country, product, payment status – processed by Stripe).
• Content of messages sent via the contact form or email.

2.2. Data collected automatically

• Technical information about your device and browser (browser type, operating system, screen resolution, language settings).
• IP address and approximate location (used mainly for security and statistical purposes).
• Usage data from the Platform (pages visited, time spent, test results, learning progress – anonymised or pseudonymised where possible).

3. Purpose and legal basis

3.1. Providing the Platform’s services

• Creating and managing user accounts.
• Providing access to tests and practice materials.
• Saving progress, statistics and user preferences.

Legal basis: Performance of a contract.

3.2. Payment processing

Payments are processed by Stripe. We do not store card details; all payment data is handled directly by Stripe as an independent payment processor.

Legal basis: Performance of a contract.

3.3. Service communications

• Payment confirmations and access information.
• Magic-link login emails and other essential system messages.

Legal basis: Performance of a contract.

3.4. Support and enquiries

When you contact us via the contact form or email, we process your data to respond to your enquiry.

Legal basis: Legitimate interest in providing customer support.

3.5. Analytics and improvements

Aggregated and anonymised usage data may be used to improve the Platform’s functionality and performance.

Legal basis: Legitimate interest.

3.6. Legal obligations

Certain data may be processed to comply with accounting, tax or regulatory requirements.

Legal basis: Compliance with legal obligations.

4. Data processors and service providers

To operate the Platform, we use trusted third-party providers who may process data on our behalf, including:

• Stripe – online payment processing.
• Supabase – database hosting, authentication and backend services.
• Cloudflare – website hosting, CDN, security and performance.
• WonderPush – push notifications for users who opt in.
• Other email and IT infrastructure providers as required.

All providers are selected to ensure appropriate technical and organisational security measures. Data may be stored within the UK, the EU, or other countries with appropriate safeguards in place.

5. International data transfers

Some service providers may store or process data outside the UK or the EU. Where this occurs, we ensure that appropriate safeguards are in place to protect personal information, in accordance with applicable data protection laws.

6. Data retention

• Account and access data – for as long as the account remains active and a limited period thereafter.
• Payment data – retained for the period required by accounting and tax laws.
• Customer support correspondence – retained as long as necessary to handle the enquiry.

7. Your rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information, subject to legal obligations.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests.

To exercise your rights, please contact us at admin@civiclearn.com.

8. Complaints

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), or with the relevant supervisory authority in your country of residence.

9. Data security

We implement appropriate technical and organisational measures to protect personal information, including:

• Encrypted communications (HTTPS).
• Secure authentication mechanisms (such as magic-link login).
• Restricted access to personal data by authorised personnel only.

10. Cookies and similar technologies

The Platform may use cookies for:

• Essential functionality and session management.
• Traffic analysis and improvement of user experience.

More information is available in our Cookie Policy.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time due to changes in the Platform or legal requirements. The most recent version will always be available on this page.

Where changes are significant, we will notify users in an appropriate manner, such as via a notice on the website.