Privacy Policy

Last updated: December 2025

1. Introduction

Sharp Test is committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, store, and protect personal information.

Sharp Test is operated by Talha (trading as "Sharp Test"), a sole trader based in the United Kingdom. We are committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Parent Information

When you create an account, we collect:

  • Email address (for login and communication)
  • Name (optional, for personalization)
  • Password (encrypted and securely stored)

2.2 Child Information

We do NOT collect:

  • Children's names
  • Children's dates of birth or ages
  • School names or locations
  • Any other personally identifiable information about children

Important: Parents supervise and control all aspects of their child's use of Sharp Test. Test results and progress data are associated with the parent's account only.

2.3 Automatically Collected Information

We collect minimal technical information necessary for the Service to function:

  • Browser type and version
  • Device type (desktop, mobile, tablet)
  • IP address (for security purposes only)
  • Session data (to maintain your login)

We do NOT use cookies for tracking, analytics, or advertising. See our Cookie Policy for details.

3. How We Use Your Information

We use your information only for the following purposes:

  • Account Management: To create and manage your account
  • Service Delivery: To provide practice tests and track progress
  • Communication: To send important service updates or respond to your inquiries
  • Security: To protect against unauthorized access and abuse
  • Legal Compliance: To comply with legal obligations

We do NOT:

  • Sell or share your data with third parties
  • Use your data for marketing or advertising
  • Track your behavior across other websites
  • Profile children or target them with content

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contractual Necessity: To provide the Service you've requested
  • Consent: Where you have explicitly agreed (e.g., optional communications)
  • Legitimate Interest: To maintain security and prevent fraud
  • Legal Obligation: To comply with UK law

5. Data Storage and Security

5.1 Where We Store Data

All personal data is stored and processed within the United Kingdom and European Economic Area (EEA). We do not transfer data outside the UK/EEA.

5.2 How We Protect Data

We implement appropriate security measures including:

  • SSL/TLS encryption for data in transit (256-bit encryption)
  • Encrypted password storage (hashed using industry-standard algorithms)
  • Secure hosting infrastructure
  • Regular security assessments
  • Access controls limiting who can view data

5.3 Data Retention

We retain your data only as long as necessary:

  • Active Accounts: Data is retained while your account is active
  • Closed Accounts: Data is deleted within 30 days of account closure, except where legal obligations require longer retention
  • Inactive Accounts: Accounts inactive for 3 years may be deleted after notice to the registered email

6. Third-Party Services

Sharp Test uses minimal third-party services:

  • Hosting Provider: Our hosting provider stores data on UK/EEA-based servers with strict security standards
  • Payment Processor: If you subscribe, payment processing is handled by a secure third-party processor (e.g., Stripe) that complies with PCI-DSS standards. We do not store credit card information.
  • Email Service: We may use an email service provider to send account-related emails (not marketing)

All third-party providers are carefully selected and contractually required to protect your data.

7. Children's Privacy

Sharp Test is designed with children's safety as a top priority:

  • We do not knowingly collect personal information from children
  • All accounts are parent-controlled
  • Children are never marketed to or tracked
  • No social features or public profiles exist
  • Parents can delete all data at any time

See our Safeguarding Policy for more information on how we protect children.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of Access: Request a copy of the data we hold about you
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restriction: Limit how we process your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to certain types of processing
  • Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us through our contact page. We will respond within 30 days.

9. Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

  • Notify you via email within 72 hours of discovering the breach
  • Report the breach to the Information Commissioner's Office (ICO) as required
  • Take immediate steps to secure data and prevent further breaches
  • Provide clear information about what happened and what you should do

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or through a prominent notice on the Service.

Continued use of Sharp Test after changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at: our contact page.

12. Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

ICO Website: https://ico.org.uk
ICO Helpline: 0303 123 1113