Policies
Privacy notice
Version privacy-parent-ro-2026-10.1Applies from 19 October 2026Last reviewed 18 October 2026
Draft for review
This describes ExamKind as it works today, while accounts and some other features are switched off. It is waiting for a final read by our solicitors, and the wording may change.
In short
ExamKind helps parents and carers with the 11+ and grammar school admissions. This notice explains what personal information we collect, why we use it, and the choices and rights you have. The short version:
- For now, ExamKind is an information website with free tools. There are no accounts, email alerts or community yet, so you can use everything without giving us any personal information.
- We collect personal information only when you send us something, such as an error report, a complaint or a request about your information, and the technical details any website receives when you visit.
- We never sell personal information, show adverts or let advertisers track you.
- We keep personal information in the UK and the EU.
- Our website statistics use no cookies and store nothing on your device, and you can object to them at any time.
- You can see, correct or delete your information, and complain to us or to the Information Commissioner's Office (ICO).
Who we are
ExamKind is run by a company registered in England and Wales. We decide why and how your personal information is used, which makes us the controller under UK data protection law. If you need our company details, ask us through our help and contact page.
Our Data Protection Officer (DPO) advises us independently and is your contact for anything in this notice: dpo@examkind.com, or use our help and contact page.
What information we collect
| Type of information | Examples | Where it comes from |
|---|---|---|
| Messages you send us | Error reports, complaints, requests about your information and accessibility reports, including anything you write in them, your email address, and your name if you give it. An email address is optional when you report an error | You |
| Emails we send you | Which emails we sent you about your report, complaint or request, and when | Our email system |
| Security and misuse protection | Your IP address, held for a short time in counters that limit how often our forms can be used, and records of how we handled each complaint or request | Your browser and our systems |
| Visiting the website | What your browser sends when you visit any website, such as your IP address and browser type, which our hosting provider uses to deliver pages and protect the site | Your browser |
| Your choices | Any objection to website statistics | You |
| Website statistics | Pages viewed, a visitor code that changes every day, country and UK nation, device type and browser family. No cookies, no IP address, no full browser details | Your browser |
We don't ask for sensitive information such as health details, and please don't send it. If you mention your child's special educational needs in a message, we use it only to deal with that message.
Children's information
- ExamKind is written for parents and carers. There are no child profiles, and we don't ask children for any information.
- Please don't include your child's name or other personal details when you send us a message.
- There are no adverts and no third-party tracking anywhere on ExamKind.
We have written a version of this notice for children: Your privacy: a guide for children.
How we use your information and our lawful bases
Data protection law says we need a lawful basis for each way we use personal information. These are ours.
| What we do | Information used | Lawful basis |
|---|---|---|
| Check and correct our pages when you report an error, and reply if you gave an email address | Messages you send us, emails we send you | Legitimate interests: keeping our information accurate and telling you what we did |
| Keep the website and our forms secure and stop misuse, such as automated form submissions | Security and misuse protection, visiting the website | Legitimate interests: protecting you, other users and our service |
| Understand how the website is used so we can improve it | Website statistics | Legitimate interests. No information is stored on your device, and you can object at any time |
| Deal with complaints and requests about your information | Messages you send us, emails we send you | Legal obligation |
| Keep records of your choices and of how we handled requests | Your choices, security and audit records | Legal obligation, and legitimate interests in showing that we follow the law |
| Meet our legal duties and set up or defend legal claims | Whatever is relevant | Legal obligation, or legitimate interests |
Where we rely on legitimate interests, we have weighed our interests against yours. You can ask the DPO for that assessment, and you can object (see Your rights).
We don't make any decision about you that has a legal or similarly significant effect using only automated means.
International transfers
We keep personal information in the UK and the European Union. We do not transfer it to any other country.
Some of our providers belong to groups based outside the UK. Our contracts require them to process our information in the UK or EU locations we choose. If that ever has to change, we will put the safeguards the law requires in place, such as the UK International Data Transfer Agreement, and update this notice first.
How long we keep it
| Information | How long we keep it |
|---|---|
| Error reports | 3 years after we close the report. If you gave an email address, we remove it 90 days after we have dealt with your report. |
| Complaints and requests about your information | 3 years after we close them |
| Counters that protect our forms | Deleted automatically within 2 days |
| Security and audit records | 13 months in our live systems, then kept in secure archive storage for up to 6 years |
| Website statistics | 13 months in a form that does not identify you; after that only totals |
| Backups | Encrypted. Deleted information drops out of our backups within 35 days, and we never restore it from them. |
Where the law makes us keep something for longer, we keep only that, for only as long as required.
Your rights
- Access: ask for a copy of the personal information we hold about you.
- Correction (rectification): ask us to fix information that is wrong or incomplete.
- Deletion (erasure): ask us to delete your information.
- Restriction: ask us to limit how we use your information while a concern is sorted out.
- Objection: object to how we use information on the basis of legitimate interests, including website statistics.
- Portability: get information you gave us in a reusable, machine-readable format.
- Not to be subject to decisions made only by automated means that significantly affect you.
To use any of these rights, use our request form or email dpo@examkind.com. You can object to website statistics yourself on our cookies page.
It's free. We reply within one month. If a request is complex, the law allows us up to two more months; if we need them, we will tell you why within the first month. We may need to confirm who you are first.
Complaints
If you are unhappy with how we have handled your personal information, please tell us using our complaints form or by emailing dpo@examkind.com. We acknowledge every complaint straight away, and always within 30 days, and give you a reference number so you can check progress.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection: ico.org.uk/make-a-complaint or 0303 123 1113. The ICO usually expects you to raise your concern with us first.
How we keep information secure
- Information is encrypted when it travels over the internet and when it is stored.
- Only staff who need access have it. They sign in with a second factor, and their access is recorded.
- Especially sensitive fields, such as the text of complaints, are encrypted separately.
- If a data breach is likely to put you at risk, we will tell the ICO within 72 hours where the law requires, and tell you without undue delay if the risk to you is high.
Features that are not available yet
Accounts, email alerts, the parent community, saved plans and child profiles are not available yet, so we don't collect any information for them. Before any of them launches, we will publish a new version of this notice that explains what changes.
Changes to this notice
We review this notice at least every six months. We publish every new version on this page before it takes effect, and every version has a number.
| Version | Date | What changed |
|---|---|---|
| privacy-parent-ro-2026-10.1 | 18 October 2026 | Version for our first public launch, with accounts, alerts and the community switched off. It covers only error reports, complaints, data requests, website statistics, security and our three service providers. |
Spotted something wrong? Report an error on this page