OnlinePrep is a practice site used by families preparing for school assessments, so we keep the amount of personal data we hold deliberately small. This notice explains what we collect, why, and what you can ask us to do about it.
OnlinePrep operates onlineprep.co.uk and is the data controller for the information described here. Contact us about anything on this page at privacy@onlineprep.co.uk.
A practice identifier. When you first visit we set a cookie holding a random identifier. It is what links your practice sessions to your account. It contains no personal information in itself.
Your email address, when you register. We use it to sign you in — we email a one-time link rather than using passwords — and to contact you about the service.
Optional details you choose to give at registration, such as the child's school year and type of school. These are optional, used to understand how questions perform across age groups, and can be left blank.
Practice results. Which sections were attempted, how many questions were answered correctly, and the difficulty tier reached. We keep this so you can see progress over time and so we can tell which questions are working.
Basic technical information, namely the page that referred you and a one-way hash of your browser's user-agent string. We store the hash rather than the value itself, and we do not store your IP address.
We do not collect the child's name, date of birth, address, or school name, and we ask you not to enter them anywhere on the site.
The practice is designed to be worked through by a child, but accounts are intended to be created and held by a parent or guardian aged 18 or over, and the email address we hold should be an adult's. We do not knowingly create accounts for children. We collect the minimum we need, we do not profile children for marketing, we do not show advertising on this site, and we do not sell your personal data. We do advertise OnlinePrep elsewhere, and we measure whether those adverts worked — see Cookies below. If you believe a child has registered without a parent's involvement, email us and we will delete the account.
For running the service and improving the questions, our lawful basis is legitimate interests — we cannot provide adaptive practice or keep your results without it, and the data involved is limited. For marketing emails our basis is your consent, which is optional, separate, and can be withdrawn at any time without affecting your use of the site. We keep a record of the consents you give or withdraw. When paid packs launch, processing your purchase will be necessary for the performance of a contract.
We use a small number of providers to run the service: Vercel (hosting and privacy-friendly, cookieless analytics), Neon (the database), and Resend (sending sign-in emails). When test packs go on sale, Paddle will handle payments as merchant of record and will hold your payment details under their own privacy notice — we never see your card number. We also use Google Ads conversion tracking, which tells us whether an advert we paid for led to someone actually using OnlinePrep. It is used to measure our own advertising, not to show you adverts here and not to build a profile of you; Google receives data about your visit for that purpose, under its own privacy policy. We do not sell your data.
We keep your account and results for as long as the account is in use, and delete them after 24 months of inactivity or sooner if you ask. If you unsubscribe from emails we stop sending them immediately and record that you did. Records relating to a purchase are kept for as long as tax and accounting rules require.
We use one essential cookie to identify your account between visits, and — if you use the admin area — one to keep you signed in there. Our analytics do not set cookies or follow you across other sites.
We also use Google Ads conversion tracking, which sets a cookie when you arrive from one of our adverts so that we can tell whether that advert led to someone using the site. It measures our own advertising. We do not show adverts on OnlinePrep, we do not use it to build a profile of you, and we do not use it to target advertising at you elsewhere. You can prevent it by blocking third-party cookies in your browser, or through Google's own ad settings; nothing on the site depends on it, so blocking it changes nothing about how OnlinePrep works for you.
You can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, object to our use of it, or withdraw marketing consent. Email privacy@onlineprep.co.uk and we will respond within one month. Deleting your account removes your email address, profile details and results.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to put it right first.
Last updated: 30 September 2026.