Privacy Policy
ExamQA LTD | examqa.com
Last updated: 16 July 2026
This Privacy Policy applies to data collected through examqa.com. It does not apply to information collected offline or through other channels. Please read it carefully before using our website.
1. Who We Are
ExamQA LTD (“ExamQA”, “we”, “us”, or “our”) is a company registered in England and Wales. We operate examqa.com, an online education and exam preparation platform.
For the purposes of UK data protection law, ExamQA LTD is the Data Controller — we determine how and why your personal data is processed.
Contact details: ExamQA LTD, United Kingdom. Email: support@examqa.com
2. Our Lawful Basis for Processing
Under UK GDPR, we are required to have a lawful basis for processing your personal data. The table below summarises the basis we rely on for each type of processing we carry out.
| Type of Processing | Lawful Basis |
| Account registration and login | Contract |
| Purchases and payment processing | Contract; Legal obligation (financial records) |
| Membership and subscriptions | Contract |
| Course and learning activity | Contract |
| Marketing and promotional emails | Consent |
| Affiliate programme management | Contract |
| Website analytics and tracking | Legitimate interests |
| Contact and support enquiries | Legitimate interests |
| Security and fraud prevention | Legitimate interests |
3. Data We Collect and How We Use It
We collect personal data in the following circumstances:
3.1 Account Registration
- Full name and email address — to create and manage your account
- Password (stored in encrypted form) — to authenticate you
- Optional: phone number and billing address for paid accounts
3.2 Purchases and Payments
- Order details, product selections, and transaction history
- Billing name and address
- Payment card details — handled directly by Stripe and WooPayments; ExamQA never stores your full card number
3.3 Membership and Subscriptions
- Membership plan and status
- Subscription renewal dates and payment history
- Team or group membership details if applicable
3.4 Course and Learning Activity
- Courses enrolled in, progress, and completion status
- Quiz and exam results
- Forum posts and comments made on the platform (bbPress)
3.5 Marketing Communications
- Email address for newsletters and promotional emails
- Email engagement data (opens, clicks) via Brevo and MailPoet
- You can withdraw consent at any time by clicking “unsubscribe” in any email or contacting us directly
3.6 Affiliate Programme
- Name, email, and payment details of affiliates registered through AffiliateWP
- Referral activity, commission earnings, and payout history
3.7 Website Analytics and Tracking
- IP address, browser type, device type, and pages visited
- Heatmap and click behaviour data via Crazy Egg
- Advertising and remarketing data sent to Meta Platforms via Meta Pixel
- Product feed data sent to Meta and other advertising platforms
3.8 Contact and Support
- Name, email address, and message content when you contact us
- Support ticket history
3.9 Technical and Security Data
- Log files including IP addresses, timestamps, and browser information
- Spam and fraud detection data processed by Akismet
- Security event logs collected by WP Cerber
4. Cookies
We use cookies and similar tracking technologies on examqa.com. Cookies are small text files stored on your device that help us provide and improve our services.
We use the following types of cookies:
- Essential cookies — required for the website to function (login sessions, shopping cart, security)
- Analytics cookies — to understand how visitors use our site (Crazy Egg, Google Analytics via GTM)
- Marketing cookies — to serve and measure relevant advertising (Meta Pixel, Google Ads)
- Preference cookies — to remember your settings and personalise your experience
You can manage or withdraw your consent to non-essential cookies at any time via our cookie consent banner, or through your browser settings. Please note that disabling certain cookies may affect the functionality of this website.
5. How Long We Keep Your Data
- Account data — retained for as long as your account is active, plus 2 years after closure
- Transaction and financial records — 7 years (required by UK tax law)
- Course and learning records — retained for the duration of your membership plus 2 years
- Marketing data — until you withdraw consent or unsubscribe
- Support correspondence — 3 years from the date of last contact
- Server log files — 90 days
- Affiliate records — 7 years (for tax and payment purposes)
When data is no longer required, it is securely deleted or anonymised.
6. Your Rights Under UK GDPR
As a UK resident, you have the following rights regarding your personal data:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate or incomplete data
- Right to erasure (“right to be forgotten”) — to request deletion of your data in certain circumstances
- Right to restrict processing — to request we limit how we use your data
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests or for direct marketing
- Rights related to automated decision-making — to request human review of automated decisions
To exercise any of these rights, please contact us at support@examqa.com. We will respond within one month. There is no charge for making a request, although we may charge a reasonable fee for manifestly unfounded or excessive requests.
7. Data Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures, including:
- SSL/TLS encryption for all data transmitted to and from our website
- Encrypted password storage
- Firewall and malware scanning via WP Cerber Security
- Access controls limiting who within our organisation can access personal data
- Regular software updates and security monitoring
However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or by displaying a prominent notice on our website.
The date at the top of this policy indicates when it was last updated. We encourage you to review it periodically.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: contact@examqa.com
- Website: https://examqa.com/
- Company: ExamQA LTD, registered in England and Wales
Note: This Privacy Policy was drafted based on your current website setup and UK GDPR requirements. We recommend having it reviewed by a qualified data protection or legal professional before publishing.