Privacy Policy

1. Who we are

ESAT Camp is operated by Anson Chan, trading as ESAT Camp. For privacy enquiries, contact support@esatcamp.com.

ESAT Camp is designed for students preparing for university admissions, including some users under 18, and we take this into account when deciding how personal information is used.

2. What we collect and why

Depending on how you use ESAT Camp, we may collect:

• email, account ID and chosen username;
• optional study and onboarding preferences such as exam preference, ESAT subjects, target universities and referral source;
• question attempts, answers, scores, mock results and progress;
• subscription, access and payment-status information;
• marketing preferences; and
• technical information such as IP address, device/browser details, security logs, website usage and attribution data.

We use this information to provide accounts and ESAT Camp features, save progress, manage access and subscriptions, keep the service secure and improve it, measure analytics and advertising where consent is required, send opted-in marketing, and meet legal or accounting obligations.

Our lawful bases are performance of a contract with you, our legitimate interests in running a secure and useful service, consent where required (for example optional cookies or marketing), and legal obligation where the law requires us to keep or disclose information.

3. Who we share data with

We use trusted providers to run ESAT Camp: Supabase (database and authentication), Vercel (hosting and delivery), Stripe (payments), Google (sign-in, analytics and advertising conversion measurement), and Resend (email delivery).

Google sign-in provides the email and account identifiers needed for authentication. Payments are processed by Stripe. ESAT Camp does not store full card numbers or CVC details.

Partner organisations such as schools or charities may receive anonymous or aggregated usage figures, but not identifiable student accounts, answers or scores.

Some providers may process information outside the UK. Where required, we use appropriate UK data-transfer safeguards.

We do not sell personal information.

4. Public information, cookies and marketing

Leaderboards may show your chosen username together with score, accuracy, timing or rank where relevant. Avoid a username that reveals personal information you do not want others to see.

We use necessary technologies to operate ESAT Camp and optional analytics/advertising technologies such as Google Analytics and Google Ads. Where consent is required, these are not used until you give permission. Change your choice anytime via Cookie preferences below, or see our Cookie Policy.

Creating an account does not subscribe you to marketing. Marketing is opt-in and you can unsubscribe at any time.

5. Retention and deletion

We keep personal information only for as long as reasonably necessary to provide ESAT Camp and meet legal, accounting, security or fraud-prevention requirements. Account and practice information is generally retained while an account remains active. If you request deletion, we delete or anonymise information where appropriate, except where information must reasonably be retained.

To ask us to delete your information, contact support@esatcamp.com.

6. Your rights

Depending on the circumstances, UK data-protection law may give you rights of access, correction, deletion, restriction, objection, data portability where applicable, and withdrawal of consent.

You have the right to object to processing based on our legitimate interests in certain circumstances.

To exercise your rights, contact support@esatcamp.com.

You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.