Privacy Notice

Naxready Solutions, trading as "NaxReady", is the data controller for the personal information described in this notice. That means we decide what personal data is collected through NaxReady and why, and we are responsible for protecting it. This notice explains what we collect, how we use it, who we share it with, and the choices you have.

1. Personal data we collect and why

Account data — name, email address, hashed password, and sign-in provider (e.g. Google). Purpose: creating and securing your account and giving you access to the service. Legal basis: performance of our contract with you.

Study activity data — exams started, answers submitted, scores, flags, time spent, readiness predictions, and study plans. Purpose: providing the service, progress analytics, and personalized recommendations. Legal basis: contract performance.

Support and communications — messages you send us and our replies. Purpose: customer support. Legal basis: contract performance and our legitimate interest in assisting you.

Usage, device, and technical data — IP address, browser and device identifiers, timestamps, pages viewed, and error logs. Purpose: security, fraud and abuse prevention, dispute/chargeback evidence, service reliability, and product improvement. Legal basis: legitimate interests and legal obligation.

Order and entitlement records — plan purchased, duration, order reference, and access granted. Purpose: providing paid access, accounting, and handling disputes. Legal basis: contract performance and legal obligation. Card and bank details are never collected or stored by us — payments are taken by Paddle, our Merchant of Record.

Referral data — if you take part in our referral programme, your referral code, referred sign-ups, and payout details. Purpose: operating the programme. Legal basis: contract performance.

Marketing preferences — where you opt in to product updates. Legal basis: consent, which you may withdraw at any time.

2. Who we share personal data with

We do not sell your personal information. We share it only with the following categories of recipients:

Service providers and subprocessors — our hosting, database, and authentication provider, and our transactional email provider, acting on our instructions under confidentiality and data-protection terms.

Merchant of Record — Paddle.com, which resells our products and handles the sale, subscription management, payment processing, tax compliance, invoicing, refunds, and related customer service.

Professional advisers — legal, accounting, and audit advisers where needed.

Authorities — regulators, courts, or law enforcement where we are legally required to disclose, or to protect our rights.

3. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

4. Retention

We keep account and study data for as long as your account is active. After account deletion we remove or anonymise your personal data within 30 days, except records we must retain for legal, tax, accounting, or dispute-defence purposes (typically up to 7 years for order records). Security and fraud logs are kept for up to 24 months.

5. Your rights

Depending on where you live, you may have the right to access your personal data, correct it, have it erased, restrict or object to processing, receive a portable copy, withdraw consent, and opt out of marketing. If you are in the UK or EEA you also have the right to complain to your supervisory authority. We respond to requests within one month. Email privacy@naxreadyprep.com or use your account settings.

6. Security

We apply appropriate technical and organisational measures, including encryption in transit, hashed passwords, row-level database access controls, role-based admin access, and audit logging. No system is perfectly secure, so please use a strong, unique password.

7. Cookies and local storage

We use essential cookies and local storage to keep you signed in, remember your exam focus and preferences, and protect the service. We use limited analytics data to understand aggregate usage and improve the product. We do not use advertising or cross-site marketing cookies. You can clear or block cookies in your browser settings, though signing in will not work without essential cookies.

8. Children

NaxReady is intended for users 16 years and older. We do not knowingly collect data from children under 16.

9. Changes

We will notify you of material changes to this notice by email or in-app notice.

10. Contact

Naxready Solutions — privacy questions or requests: privacy@naxreadyprep.com. See also our Terms & Conditions and Refund Policy.