Privacy Policy

1. Personal Data We Collect

We collect only the data necessary to provide and operate the Service.

1.1 Data you provide directly

• Name
• Email address
• Account credentials
• Subscription and billing status
• Exam attempts, results, and learning progress
• Writing and speaking assistant submissions
• Support communications

Payment data:
We do not store credit card numbers or bank details.
All payments are processed securely by Mollie (including iDEAL and SEPA).

1.2 Data collected automatically

• IP address
• Device and browser information
• Log and usage data
• Cookies and similar technologies
• Analytics data (e.g. Google Analytics, Vercel Analytics)

2. Legal Basis for Processing

We process personal data under the following GDPR legal bases:

• Contract – to provide access to the Service and its features
• Legitimate interest – to improve the Service, prevent fraud, and provide support
• Legal obligation – to comply with tax, accounting, and regulatory requirements
• Consent – where required (e.g. non-essential cookies)

3. How We Use Your Data

We use your data to:

• Create and manage user accounts
• Deliver exam practice and AI-assisted learning features
• Store exam progress and results
• Process subscriptions and payments
• Provide customer support
• Improve performance, usability, and content quality
• Prevent misuse, fraud, and security incidents
• Fulfill legal and accounting obligations

4. Cookies and Tracking

We use essential cookies required for the Service to function and analytics cookies to understand usage and improve the Service.
You can disable non-essential cookies through your browser settings.

5. Sharing of Personal Data

We only share personal data with trusted service providers necessary to operate the Service, including:

• Payment processors (e.g. Mollie)
• Email providers (e.g. Zoho Mail)
• Analytics providers (e.g. Google Analytics)
• Hosting and infrastructure providers (e.g. Vercel, Supabase)

We do not sell personal data.

6. Data Retention & Inactive Accounts

We retain personal data only as long as necessary for the purposes described above.

Active accounts:
Personal data is retained while your account is active and the Service is in use.

Inactive accounts:
An account may be considered inactive if there has been no login or learning activity for an extended period (e.g. 12 months).

In such cases:

• We may notify you by email before taking any action
• Your account may be deactivated (login disabled)
• All data is preserved and can be restored upon request

Deletion:
You may request deletion of your account at any time.
Certain data (e.g. billing records) may be retained longer where required by law.

7. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Correct inaccurate data
• Export your data
• Request deletion of your account
• Restrict or object to processing
• Withdraw consent (where applicable)
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise your rights, contact:

support@dutchexam.online

8. Data Security

We use appropriate technical and organizational measures to protect personal data, including encrypted connections, access controls, and secure infrastructure.

9. Children’s Privacy

The Service is not intended for users under the age of 16.
We do not knowingly collect personal data from children.

10. Contact

For privacy-related questions or requests:

support@dutchexam.online