Privacy Policy

Bespoke IELTS ("we," "us," or "our") is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable EU data protection laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website (bespokeielts.com) and services. By using our site, you consent to these practices.

1. Information We Collect

We collect the following types of personal data:

• Account Information: Email address, full name, and password when you create an account.
• Usage Data: Practice responses, progress scores, and session timings (e.g., time spent on tasks).
• Technical Data: IP address, browser type, device information, and cookies for analytics and functionality.
• Communication Data: Messages or feedback submitted via forms.

We do not collect sensitive personal data (e.g., health or financial information) unless voluntarily provided in progress notes.

2. How We Use Your Data

We use your data to:

• Provide and improve services (e.g., personalized practice feedback).
• Send updates or promotional emails (with opt-out).
• Analyze usage for site enhancements.
• Comply with legal obligations.

Data is processed only for these purposes and retained as long as necessary (e.g., account data until deletion request).

3. Legal Basis for Processing

Under GDPR:

• Consent: For marketing emails.
• Contract: For account and practice features.
• Legitimate Interests: For analytics and site security.
• Legal Obligation: For compliance.

4. Sharing Your Data

We do not sell your data. We may share it with:

• Service providers (e.g., Supabase for hosting, email tools like SendGrid) under strict agreements.
• Legal authorities if required.

No international transfers outside the EEA without safeguards (e.g., Standard Contractual Clauses).

5. Your Rights

As an EU resident, you have:

• Access: Request your data.
• Rectification: Correct inaccuracies.
• Erasure: Delete your data ("right to be forgotten").
• Restriction/Objection: Limit processing.
• Portability: Receive data in machine-readable format.
• Withdraw Consent: Anytime, without affecting prior processing.

To exercise rights, email support@bespokeielts.com. We respond within 1 month.

6. Cookies and Tracking

We use essential cookies for functionality and analytics cookies (Google Analytics) for improvement. You can manage preferences via browser settings. For details, see our Cookie Policy (linked on site).

7. Data Security

We use encryption, access controls, and regular audits to protect data. In case of a breach, we notify affected users and authorities within 72 hours per GDPR.

8. Children's Privacy

Our site is not for children under 16. We do not knowingly collect their data.

9. Changes to This Policy

We may update this policy; changes are posted here with the new effective date. Continued use constitutes acceptance.

10. Contact Us

Questions? Email support@bespokeielts.com.