Effective Date: August 2, 2025

1. Introduction

TestAce ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit or make purchases from our website, which offers digital student resources such as IB past papers, planners, templates, and other study materials (“Products”). We value your trust and strive to provide transparent, responsible data practices in full compliance with applicable data protection laws, including the GDPR and relevant international privacy regulations.

2. Scope and Applicability

This policy applies to all personal data collected through our website, email correspondence, social media, and any related services. It applies to visitors, customers, and users of our Products.

3. Information We Collect

3.1 Personal Information You Provide

• Account & registration: name, email address, billing address (if applicable)
• Order & payment data: payment method (e.g. credit card, PayPal), billing details
• Customer support communication: messages, inquiries, feedback

3.2 Automatically Collected Data

• Device & browser information: IP address, browser type, operating system
• Usage data: pages visited, links clicked, session duration, download history
• Analytics data: usage patterns and behavior through automated means

3.3 Cookies & Tracking Technologies

We use cookies and similar technologies to optimize user experience:

• Essential cookies: necessary for site operation
• Performance cookies: to analyze usage and improve site performance
• Functionality cookies: to remember preferences
• You may manage cookies via browser settings.

4. How We Use Your Information

We use personal data for purposes including but not limited to:

• Processing orders and delivering Products
• Communicating with you about purchases, products, updates
• Providing customer support and responding to inquiries
• Improving our Products and services based on usage data
• Sending marketing communications (where consent has been granted)
• Complying with legal obligations

5. Legal Bases for Processing (Where Applicable)

If you are in the European Economic Area or UK, we process data under the following legal bases:

• Performance of contract: to fulfil your purchase and deliver Products
• Legitimate interests: for analytics, improving services, fraud prevention
• Consent: for marketing communications
• Legal compliance: to respond to lawful requests or obligations

6. Sharing of Your Information

We may share your data with:

• Service providers: payment processors, email service providers, hosting companies
• Compliance and legal authorities: to comply with legal obligations or requests
• Business transfers: in case of sale, merger, or acquisition (subject to confidentiality protections)

We do not sell your personal information to third‑party marketers.

7. International Transfers

Your personal data may be processed on servers located outside your country for operational purposes. When we transfer data internationally, we ensure appropriate safeguards such as:

• Data transfer clauses
• Use of certified processors
• Compliance with adequacy decisions or standard contractual clauses

8. Data Retention

We retain personal data only as long as necessary to:

• Fulfil order obligations and contractual commitments
• Meet legal, tax, or accounting requirements
• Maintain security and dispute resolution
• Where applicable, retention periods are defined by law (e.g., tax law).

9. How We Protect Your Information

We implement administrative, technical, and physical safeguards to protect personal data, including:

• Secure hosting environment with firewalls and encryption
• Access controls and password protection
• Regular monitoring and security audits
• Secure transmission via TLS/SSL

10. Your Rights (EEA/UK/OTHER JURISDICTIONS)

Depending on your jurisdiction, you may have the following rights:

• Access: obtain a copy of your personal data
• Rectification: correct inaccuracies
• Erasure ("right to be forgotten")
• Restriction of processing
• Data portability
• Objection to processing or marketing
• Withdraw consent at any time (does not affect lawful prior processing)

To exercise your rights, contact us via the details below. We respond within applicable legal timeframes.

11. Marketing Communications

With your consent (where required), we may send promotional emails about new Products, updates, or special offers. You can opt out at any time via unsubscribe links or by contacting us. If you opt out, we’ll remove your email from marketing lists but may still contact you regarding orders or account issues.

12. Third‑Party Links & Integrations

Our site may include links to external websites (for customer support, blogs, or resources). We do not control the data practices of those external sites and encourage you to review their privacy policies.

13. Children’s Privacy

Our Products are intended for student use, but we do not knowingly collect personal data from children under 16 without parental consent. If you believe that we have inadvertently collected data from a minor, please contact us so that we can promptly delete it.

14. Changes to This Policy

We may update this Privacy Policy over time. When material changes occur, we’ll notify you via email or site notices, and update the “Effective Date” at the top. We encourage you to review this policy periodically.

15. Contact Information

If you have questions, requests, or concerns regarding this policy or our data practices, please contact:

Privacy Compliance Team

TestAce

Email: privacy@testace‑services.example.com (or your designated privacy email)

Address: [Insert official business address]

Optional Expansion Sections (for full 5,000‑word version)

Below are topics you can further elaborate on to reach approx. 5,000 words:

1. Detailed Definitions – define “personal data,” “processing,” “sensitive data,” etc.
2. Detailed Inventory of Processed Data – list each field captured, how and when.
3. Consent Mechanisms – how consent is collected, stored, and documented.
4. Detailed Security Measures – encryption standards, backup policies, incident response plan, audits.
5. Sub‑processor Listings – specific third‑party vendors, factors for selection, contractual commitments.
6. Cross‑border Transfers – description of specific legal frameworks used (e.g., EU‑US Data Privacy Framework, SCCs).
7. Cookie & Tracking Table – full cookie list, durations, purposes, opt‑out methods.
8. User Rights Procedures – forms, response timelines, appeal processes.
9. Data Breach Policy – notification procedures, record‑keeping, risk evaluation.
10. Privacy by Design / Impact Assessments – how Products and features incorporate privacy considerations.

Summary (Concise Overview)

TestAce collects only the personal data necessary to deliver purchased student resources, operates with transparency under applicable data‑protection laws, secures data using industry‑standard safeguards, does not sell or rent your data, provides mechanisms for your rights (access, correction, deletion, etc.), and keeps you informed of changes. Contact us anytime for questions or to exercise your privacy rights.