Privacy Policy | Examinotion

1. Introduction

Examinotion ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website examinotion.com and use our Microsoft AI certification practice exam services.

We are a UK-based company and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

When you register for an account or make a purchase, we collect:

Email address
First and last name
Payment information (processed securely via Stripe)
Account credentials (passwords are encrypted)

2.2 Usage Data

We automatically collect certain information when you use our services:

Practice exam attempts and progress
Question responses and scores
Time spent on practice sessions
Browser type and device information
IP address and approximate location

3. How We Use Your Information

We use your information to:

Provide and maintain our practice exam services
Process payments and manage your account
Track your progress and provide personalised recommendations
Send important updates about your account or purchases
Improve our services and develop new features
Respond to customer support enquiries
Comply with legal obligations

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

Contract: Processing necessary to provide our services to you
Legitimate Interests: Improving our services and preventing fraud
Legal Obligation: Complying with applicable laws and regulations
Consent: Where you have given explicit consent for marketing communications

5. Data Sharing

We do not sell your personal information. We may share your data with:

Payment Processors: Stripe for secure payment processing
Hosting Providers: For website and database hosting
Analytics Services: To understand how our services are used
Legal Authorities: When required by law or to protect our rights

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. After account deletion, we may retain certain information for up to 7 years for legal and accounting purposes.

7. Your Rights

Under UK GDPR, you have the following rights:

Access: Request a copy of your personal data
Rectification: Correct inaccurate personal data
Erasure: Request deletion of your personal data
Restriction: Limit how we use your data
Portability: Receive your data in a portable format
Object: Object to processing based on legitimate interests

To exercise these rights, please contact us.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

HTTPS encryption for all data in transit
Encrypted password storage using industry-standard hashing
Regular security audits and updates
Access controls and authentication for our systems

9. Cookies

We use essential cookies to provide our services and maintain your login session. We may also use analytics cookies to understand how our website is used. You can control cookie settings in your browser.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our website or sending you an email.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.