PRIVACY

How information is handled at the current stage

This policy describes the current public guidance website and internal administration environment. It will be expanded before student registration or institution accounts are released.

Last updated: 16 July 2026

Information currently processed

The public website does not currently offer student registration, saved profiles, payment collection or public document uploads. The hosting environment may process standard technical information such as requested URL, time, IP address, browser/user-agent, response status and application errors for operation and security.

The protected internal administration area uses authentication cookies for authorised administrators.

How technical information is used

  • Operate, secure and troubleshoot the website.
  • Diagnose failed requests and database/runtime errors.
  • Understand basic performance and reliability.
  • Prevent abuse and unauthorised administration access.

Children and student information

The guidance may be read by school students, including minors. We do not currently ask public users to create profiles or submit personal academic records. Before personalised accounts launch, we will define age-appropriate consent, data minimisation, parent/guardian controls where required, retention and deletion procedures.

Cookies and external links

Authentication cookies are used for the protected internal admin area. Other cookies or analytics may be introduced later only with an updated notice and suitable controls. Links to official exam authorities and other third parties are governed by those websitesโ€™ own privacy practices.

Retention, access and deletion

Operational logs should be retained only as long as reasonably needed for security and troubleshooting. A verified privacy-contact channel and procedures for access, correction and deletion requests will be published before public account registration begins.

Pre-launch review required

This operational policy is not a substitute for legal review. It must be reviewed against the final hosting, analytics, registration, minorsโ€™ data, social-login and institution-portal design before public launch.