Privacy Policy

1. Who We Are

For the purposes of applicable data protection law, DN46 Labs Ltd (trading as STPprep) is the organisation responsible for processing your personal data in connection with the STPprep platform.

In this Privacy Policy, references to "we", "us", or "our" mean DN46 Labs Ltd (trading as STPprep).

References to "you" or "your" mean the individual accessing or using our website, platform, or services.

2. Personal Data We Collect

Depending on how you interact with STPprep, we may collect and process different types of personal data. This may include:

• Your name, username, or other account identification details
• Your email address and other contact information
• Account and login information
• Purchase and transaction information, including details of products or services purchased and payment status
• Communications and correspondence you send to us, including customer support enquiries
• Information relating to your use of the STPprep platform, including practice activity, progress, scores, and results
• Technical information, such as your IP address, browser type, device information, operating system, and general usage data
• Information collected through cookies and similar technologies, where applicable

We do not generally require you to provide special category personal data, such as information about your health, racial or ethnic origin, religious beliefs, or sexual orientation, to use STPprep. Please do not provide sensitive personal information unless it is necessary and specifically requested by us.

3. How We Collect Your Personal Data

We may collect personal data directly from you when you create an account, purchase access to STPprep, use our platform, contact us, submit a support request, or otherwise communicate with us.

We may also receive certain information from third-party service providers that support the operation of our platform, such as payment processing, hosting, authentication, analytics, or communications providers.

Some information may also be collected automatically when you use our website or platform, including through cookies, server logs, and similar technologies.

4. How We Use Your Personal Data

We may use your personal data for the following purposes:

• To create, manage, and maintain your account
• To provide access to STPprep and our educational preparation resources
• To process and manage purchases and transactions
• To provide customer support and respond to enquiries
• To communicate with you about your account, purchases, or services
• To monitor and improve the performance and functionality of our platform
• To maintain the security and integrity of our website and platform
• To detect, prevent, and investigate fraud, misuse, abuse, or security incidents
• To maintain appropriate business, financial, and transaction records
• To comply with applicable legal and regulatory requirements
• To establish, exercise, or defend our legal rights where necessary

5. Our Lawful Bases for Processing

Under applicable data protection law, we must have a lawful basis for processing your personal data. Depending on the circumstances, we may rely on one or more of the following lawful bases:

• Contract: where processing is necessary to provide services you have requested or to perform our contractual obligations to you.
• Legal obligation: where processing is necessary for us to comply with a legal or regulatory requirement.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
• Consent: where we have asked for and obtained your consent to process your personal data for a specific purpose.

Where we rely on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

6. Payment Information

Payments for STPprep services may be processed by third-party payment providers. Depending on the payment method used, your payment information may be collected and processed directly by the relevant payment provider.

We may receive information relating to your transaction, such as payment confirmation, transaction status, purchase details, or limited payment-related information necessary to provide our services and maintain accurate business records.

Where payment processing is handled by a third-party payment provider, we do not intend to store full payment card details on our own systems.

7. Sharing Your Personal Data

We do not sell or rent your personal data to third parties.

We may share personal data with trusted third-party service providers where reasonably necessary to operate our business and provide STPprep services. These providers may assist with payment processing, website hosting, cloud infrastructure, authentication, email communications, customer support, security, analytics, or other technical services.

We may also disclose personal data where necessary to comply with a legal obligation, respond to a lawful request from a competent authority, protect our rights or property, investigate suspected fraud or misuse, or protect the safety and security of our users or services.

Where we use third-party service providers to process personal data on our behalf, we take reasonable steps to ensure that appropriate contractual and security arrangements are in place as required by applicable data protection law.

8. International Data Transfers

Some third-party service providers we use may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law. This may include relying on an adequacy decision or using appropriate safeguards, such as approved contractual protections, where required.

9. Cookies and Similar Technologies

We may use cookies and similar technologies on our website and platform.

Some cookies may be necessary for the website or platform to function, provide security, maintain user sessions, or remember essential preferences.

We may also use non-essential cookies or similar technologies for purposes such as analytics, understanding platform usage, and improving our services. Where required by applicable law, we will request your consent before using non-essential cookies.

You may be able to manage or disable cookies through your browser settings or, where available, through our cookie preference tools. Disabling certain cookies may affect the functionality of our website or platform.

10. Data Security

We take reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.

Access to personal data is limited to individuals and service providers who have a legitimate need to access it and, where appropriate, are subject to confidentiality obligations.

However, no method of transmitting or storing information electronically is completely secure. While we take reasonable steps to protect your personal data, we cannot guarantee the absolute security of information transmitted to or stored by our services.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide our services, maintain business and financial records, resolve disputes, enforce agreements, prevent fraud, and comply with legal or regulatory obligations.

The appropriate retention period will depend on the nature of the information and the purpose for which it is processed. When personal data is no longer required, we will take reasonable steps to delete, securely dispose of, or anonymise it where appropriate.

12. Your Data Protection Rights

Subject to applicable law and certain legal exceptions, you may have the following rights in relation to your personal data:

• The right to request access to the personal data we hold about you
• The right to request correction of inaccurate or incomplete personal data
• The right to request deletion of your personal data in certain circumstances
• The right to request restriction of processing in certain circumstances
• The right to object to certain processing of your personal data
• The right to receive certain personal data in a structured, commonly used, and machine-readable format where the right to data portability applies
• The right to withdraw consent where we rely on consent as our lawful basis for processing

These rights are not absolute and may be subject to legal conditions and exemptions. We may need to verify your identity before responding to a request.

If you wish to exercise any of these rights, please contact us using the details provided in the Contact Us section below.

13. Marketing Communications

We may send service-related communications that are necessary to administer your account, process your purchases, or provide services you have requested.

Where we send direct marketing communications, we will do so in accordance with applicable privacy and electronic communications laws.

Where applicable, you can opt out of receiving marketing communications at any time by following the unsubscribe instructions included in the relevant communication or by contacting us.

14. Third-Party Websites and Services

Our website or platform may contain links to third-party websites, services, or resources.

These third parties may operate under their own privacy policies and terms of use. We are not responsible for the privacy practices, security, or content of third-party websites or services that we do not control.

We encourage you to review the relevant privacy policies before providing personal information to any third-party service.

15. Children's Privacy

Our services are intended for individuals preparing for professional training and recruitment processes. We do not knowingly seek to collect personal data from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal data in circumstances where it should not have been collected, please contact us so that we can review the situation and take appropriate action.

16. Automated Decision-Making and Profiling

We do not intend to use your personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on you, unless we are legally permitted to do so and provide any rights or safeguards required by applicable law.

17. Personal Data Breaches

We maintain procedures designed to identify, manage, and respond to personal data breaches where appropriate.

Where applicable, we will notify the Information Commissioner's Office (ICO) and affected individuals of a personal data breach when required to do so by applicable data protection law.

18. Complaints

If you have concerns about how we process your personal data, we encourage you to contact us first so that we can try to resolve your concern.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection, if you believe that your personal data has been processed in breach of applicable data protection law.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements, or data protection practices.

When we make changes, we will publish the updated Privacy Policy on this page and update the effective date where appropriate.

We encourage you to review this Privacy Policy periodically to remain informed about how we collect, use, and protect personal data.

20. Contact Us

If you have any questions about this Privacy Policy, how we process your personal data, or wish to exercise your data protection rights, please contact us using the details below.

DN46 Labs Ltd (trading as STPprep)
Registered in England and Wales
Company number: 17273426
Registered address: 82A James Carter Road, Mildenhall, IP28 7DE, United Kingdom
Email: support@stpprep.co.uk