Privacy Policy

Last updated: 20 March 2026

1. Data Controller

SQE1 Prep is operated by SoftNext Solutions, with its registered address at SoftNext Solutions, Pune, Maharashtra, India. For all data protection matters, please contact us at support@sqe1prep.com.

2. Data We Collect

Identity Data

Your name and email address, provided when you register an account.

Technical Data

IP address, browser type and version, device type, operating system, and timezone.

Usage Data

Drill history, question responses, scores, session duration, pages visited, and feature interactions.

Financial Data

Subscription plan, billing history, and payment status. Full payment card details are processed and stored exclusively by Stripe; we never have access to your full card number.

3. Legal Basis for Processing

  • Contract performance — to provide the SQE1 Prep service you signed up for, manage your account, and process subscriptions.
  • Legitimate interests — to improve our service, detect fraud, ensure security, and conduct analytics.
  • Consent — for non-essential cookies and analytics tracking (PostHog). You may withdraw consent at any time via our Cookie Policy settings.

4. Data Sharing

We share personal data only with the following categories of processors, each under appropriate data processing agreements:

ProviderPurposeData Shared
StripePayment processingEmail, subscription plan, billing events
PostHogProduct analyticsUsage data, anonymised identifiers (with consent)
Microsoft AzureCloud hosting & infrastructureAll data stored on our servers
Keycloak (self-hosted)Authentication & identityName, email, password hash
Azure OpenAIAI-powered features (question generation, tutor)Question context, anonymised usage prompts

We do not sell your personal data to any third party.

5. International Transfers

Your data may be processed outside the UK and EEA, including in the United States (PostHog, Stripe) and India (SoftNext Solutions). Where transfers occur, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent safeguards, to ensure your data receives an adequate level of protection.

6. Data Retention

  • Account data — retained while your account is active. Deleted upon request or after 24 months of inactivity.
  • Usage data — retained while your account is active and deleted with your account.
  • Billing and transaction data — retained for 7 years after the transaction date, as required for tax and accounting obligations.
  • Analytics data — aggregated and anonymised data may be retained indefinitely for service improvement.

7. Your Rights Under GDPR

Under the UK GDPR and EU GDPR, you have the following rights:

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — request correction of inaccurate or incomplete data.
  • Right to erasure — request deletion of your personal data where there is no compelling reason for continued processing.
  • Right to restrict processing — request that we limit the processing of your data in certain circumstances.
  • Right to data portability — receive your data in a structured, commonly used, and machine-readable format.
  • Right to object — object to processing based on legitimate interests, including profiling.
  • Right to withdraw consent — withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, please visit our Data Access Request page or email support@sqe1prep.com.

8. Cookies

We use cookies and similar technologies to operate and improve our service. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

10. Contact Us

For any questions about this Privacy Policy or our data practices, please contact:
SoftNext Solutions
Pune, Maharashtra, India
support@sqe1prep.com