Who is responsible
GO internetworks, B.V., De Cordesstraat 101, 3151BK, Hoek van Holland, The Netherlands, registration number 24368097 (“we”) is the controller of your personal data on prepkiwi.com. Contact: [email protected].
What data we collect and why
- Account and order data (name, email address, country, optional company name, VAT number, business address and purchase order number, order history, language): to create your account, deliver your exams, process payment, issue invoices and send order emails. Basis: performance of the contract.
- Country evidence (the country of your IP address and the country of your payment card, stored with your order next to the billing country you entered; the IP address itself is not kept for this): to determine in which country VAT is due and to prove it, as tax rules require. Kept with the order records. Basis: legal obligation.
- Consent record (your confirmation of instant access, with date): to show that you asked for immediate delivery. Basis: legal obligation and our legitimate interest in proving it.
- Exam data (answers, scores, progress, flagged questions): to run the exams, save your progress and show your results. Basis: performance of the contract.
- Question reports (the question you reported, the type of problem, your message and your account): to find and correct mistakes in our exams. Reports are private feedback to PrepKiwi and are never shown to other users. A question you only marked, without adding details, is deleted after 30 days. Reports are kept for 2 years after the report was made. Basis: our legitimate interest in the quality of our exams.
- Ratings (your star rating of an exam, optional scores for the questions and explanations, your view on the difficulty, an optional note, and your account): to improve our exams and to show an average star score. Only customers who bought an exam can rate it. Other visitors see only the average and the number of ratings, never your name, your other answers or your note. Ratings are kept while your account exists or until you ask us to delete them. Basis: our legitimate interest in the quality of our exams and in honest information for other buyers.
- Explanation feedback (a thumbs up or down on the explanation of a question, and your account): to find explanations that need work. It is private and never shown to other users. Kept while your account exists. Basis: our legitimate interest in the quality of our exams.
- Watermarking of exam content (a personal code derived from your account, shown faintly behind the questions on the review screen and embedded invisibly in the question text): to protect our exams against copying and to identify the source of leaked content. The code does not reveal your identity to others; only we can link it to your account. Basis: our legitimate interest in protecting our content.
- Support messages: to answer your questions. Basis: performance of the contract or our legitimate interest.
- Technical data (IP address, browser, requests, security logs): to deliver the website securely and prevent abuse. Basis: legitimate interest.
- Visitor statistics (which pages are viewed and how visitors arrive, as totals): to see which pages are used and to improve the website. We count page views with Koko Analytics, which runs on our own server, sets no cookies and shares nothing with third parties. To count a visitor once a day it uses a temporary code derived from your IP address and browser type; that code is deleted every day, and no IP address is kept in the statistics. Basis: legitimate interest.
We do not sell your data and do not use it for automated decisions with legal effect.
Who receives your data
We use service providers that process data on our behalf:
- Cloudflare, for DNS, content delivery and security of the website;
- Hetzner Online GmbH (Germany), our hosting provider: the website and database run on a server in Nuremberg, Germany;
- Stripe, for payments (Stripe handles your payment details; we receive the payment status);
- Brevo, for sending order and account emails;
- the European Commission’s VIES service, to check a VAT number you enter at checkout (only the VAT number is sent).
Some providers are located outside the European Economic Area. Where that is the case, the transfer relies on an adequacy decision or on standard contractual clauses.
How long we keep data
We keep account and exam data while your account exists. Order records are kept for the period required by accounting and tax law (10 years). Security logs are kept for 14 days: server logs are overwritten automatically once they reach a fixed size, normally within a few weeks. You can ask us to delete your account at any time; we then delete or anonymize data we are not required to keep.
Cookies
We use only necessary cookies (for example for your shopping cart, login and payment security with Stripe). We do not use cookies for advertising or tracking. Details are in our Cookie Policy.
Your rights
You have the right to access, correct, delete and receive a copy of your data, to restrict or object to processing based on legitimate interest, and to withdraw consent at any time (withdrawal does not affect earlier processing). Contact us at [email protected]. You can also complain to your data protection authority.
Security
The website is served over HTTPS and protected by Cloudflare. Access to the administration area is restricted. No system is completely secure; we will inform you and the authorities where the law requires after a data breach.
Changes
We may update this policy. The date at the top of the page shows when it last changed.