Skip to main content
+90 216 428 1075

Privacy policy

What this site collects, who processes it and how to get it removed. Written to be specific rather than to cover every eventuality vaguely.

Last revised 18 October 2026.

Who the data controller is

The controller is TestPrep LLC., 777 NW 72nd Ave STE 1075, Miami, FL 33126, United States. It is the company that contracts with you and it is the entity to name in any request about your data.

Teaching is delivered online; there are no premises. Enquiries and lessons are handled by the teaching team, and the contracting entity above is the controller.

What is collected, and why

  • Analytics. Google Analytics 4 records pages viewed, approximate location at city level, device type and referrer. This is used to see which pages are worth keeping. It is loaded after the page and can be blocked without breaking anything.
  • What you send us. If you message us by WhatsApp, email or phone we hold what you wrote and what we replied, so we can answer you and so the next person who picks up the thread knows what was already said.
  • If you enrol. Name, contact details, the exam and package chosen, lesson attendance, and — where you use the question bank or a practice test — your answers and scores. Answers are held because the point of the question bank is not handing you back questions you already solved.
  • AP practice tests. While you take an AP practice test, your answers are kept in your browser until the test ends, so that they are not lost if the page reloads; they are deleted when you hand the test in.
  • Payment. Card details are entered on Stripe’s own form and never reach this site. We receive the last four digits, the card brand and whether the charge succeeded.
  • Account security: to keep each account to one session at a time and to prevent account sharing and bulk copying of our content, when you sign in we record one-way hashed digests of your browser's user agent and of your network block (the first three parts of your IP address), your session identifier, the site you signed in on, and when a session was closed because of a sign-in on another of our sites or another device. A new sign-in to your account closes all your other sessions. We do not store your IP address or browser string themselves for this purpose and we do not use device fingerprinting. These records are deleted 90 days after last use. Legal basis: performance of our contract with you and our legitimate interest in keeping accounts secure.

The leaderboard in your dashboard shows your points and place. Your name (first name and surname initial) appears only if you turn this on yourself; otherwise other students see only a number in place of your name.

Processors

  • Google (Analytics), United States.
  • Stripe (payments), United States and Ireland.
  • Supabase (database and accounts), hosted in the European Union.
  • Vercel (site hosting and logs), United States.
  • Resend (transactional email), United States.

Because the controller is a US entity and several processors are in the United States, data about you may be processed outside your country. Where you are in the EEA, the UK or Türkiye, transfers rely on the processors’ standard contractual clauses.

How long it is kept

Enquiries that do not lead to an enrolment are deleted after twelve months. Enrolment and payment records are kept for seven years, because tax law requires it. Question bank and practice test results are kept while your account is open and deleted with it. TestPrep AI Tutor lessons are not recorded as audio; the lesson's written transcript and a short note per question (the type of mistake, the hints given) are kept with your account and deleted when your account is deleted.

When an account is deleted, we keep a record of the deletion (the email address; the dates the account was opened, last used and deleted; the number of practice tests deleted with it) for 2 years, then erase it.

Your rights

You can ask for a copy of what we hold, ask for it corrected, or ask for it deleted. Email info@testprepeurope.com and say which. We will reply within thirty days, and we will not ask you to explain why. If you are in the EEA or the UK you can also complain to your data protection authority; if you are in Türkiye, to the KVKK.

What this site does not do

It carries no advertising pixels, no third-party remarketing tags and no session recording. Nothing on this site is sold or shared with a data broker.