Privacy Policy
1. Who We Are
OREPass ("we", "us", "our") operates the website orepass.co.uk and the associated candidate revision portal. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For any privacy-related enquiries, contact us at hello@orepass.co.uk.
2. Data We Collect
We collect the following categories of personal data:
- Account data — name, email address, and password (hashed) provided at registration.
- Payment data — billing information processed securely via Stripe. We do not store card details.
- Usage data — exam attempts, scores, topic performance, study streaks, and session activity within the portal.
- Technical data — IP address, browser type, device type, and pages visited, collected via server logs and cookies.
3. How We Use Your Data
- To create and manage your account.
- To process subscription payments and manage access.
- To provide personalised analytics and revision insights.
- To send important account notifications (e.g. subscription renewal).
- To improve the platform through aggregated, anonymised usage analysis.
4. Legal Basis for Processing
We process your data on the following legal bases: contract performance (to deliver the service you subscribed to), legitimate interests (to improve and secure the platform), and consent (for optional marketing communications, which you may withdraw at any time).
5. Data Retention
Account and usage data is retained for as long as your account is active. If you close your account, your personal data is deleted within 90 days unless we are required to retain it by law.
6. Your Rights
Under UK GDPR you have the right to access, rectify, erase, restrict processing of, and port your personal data. You may also object to certain processing. To exercise these rights, email hello@orepass.co.uk. You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Third-Party Services
We use the following third-party processors:
- Stripe — payment processing (stripe.com/privacy)
- SiteGround — web hosting (siteground.com/privacy)
8. Cookies
We use essential cookies to maintain your login session. See our Cookie Policy for full details.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated by email or via a notice on the platform.