Privacy notice
Last updated 12 November 2026
This notice explains what personal data Enprep collects when you use the site, why, who else handles it, how long it is kept and what your rights are. Enprep Ltd, which runs Enprep, is the controller of that data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What we collect
We collect only what we need to run the practice tests and your account:
- Account details: your name and email address, and how you sign in.
- Profile: your country, target test date and target score, which you give at the start.
- Test data: your answers, the time you spend, your Speaking recordings and their transcripts, and your scores and feedback, including any comment a teacher adds when reviewing a score.
- Survey: your ratings and any comment in the short survey after a test.
- Purchases: what you bought, the amount and the date. Card details go to Stripe, our payment provider, and never reach us.
- Waitlist: the email address you give to hear when IELTS or Linguiskill tests open.
- Security data: a scrambled form of your internet address, used for an hour to stop abuse of the forms and then deleted at the next routine clean-up. We never store the address itself. Clerk also records your internet address and device for your sign-in sessions, and Vercel's server logs record internet addresses, both for us and to keep the site secure.
Why we use it, and our lawful basis
- To give you the tests you signed up for or bought, score them and show your reports: this is needed to perform our contract with you.
- To keep the site secure and working, and to prevent fraud and abuse: our legitimate interests.
- To keep records of purchases for tax and accounting: a legal obligation.
- To email you when a waitlisted test opens: your consent, which you can withdraw at any time.
Who else handles it
We use trusted providers who process data for us under contract and only on our instructions. Stripe is in part an exception: it also decides for itself how it uses payment data, for example to prevent fraud, under its own privacy notice.
- Clerk, for sign-in and accounts.
- Vercel, which hosts the site, stores Speaking recordings and passes answers to the AI services below.
- Neon, which hosts the database.
- Stripe, which takes payments and keeps its own record of them.
- Anthropic, whose Claude models score Writing answers and Speaking transcripts. Your name and email address are not sent with them.
- A speech-to-text service, which turns Speaking recordings into text for scoring.
- Resend, which sends our emails, such as "your scores are ready".
Transfers outside the UK
Some of these providers store or process data in the United States or the European Union. Where they do, the transfer is covered by UK adequacy regulations or by the UK International Data Transfer Addendum to the standard contractual clauses.
How long we keep it
- Your account, answers, recordings and scores: until you delete your account.
- Purchase records: six years from the end of the financial year they belong to, as UK tax law requires. After you delete your account they are kept without your name or email address.
- Waitlist addresses: until the test you asked about opens and we have told you, or until you ask us to remove yours.
- Security data in our database: an hour, until the next routine clean-up. Clerk's session records and Vercel's logs: for the periods those providers set.
Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to limit or stop using it, and ask for it in a form you can take elsewhere. You can delete your account yourself, from "Your account" on your dashboard: that removes your recordings and personal data at once, and your address from the waitlist.
To use any other right, contact us using the details below. We answer within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk). We would like the chance to put it right first.
Cookies
Enprep uses only cookies that the site needs to work: the ones that keep you signed in. Your choice of light or dark theme is kept in your browser. There are no advertising or tracking cookies, so there is nothing to accept.
Changes to this notice
If we change how we use your data, we will update this page and its date, and tell you by email when the change matters to you.
Who we are
Enprep is run by Enprep Ltd, a company registered in England and Wales, company number 17332349. You can reach us at its registered office:
Enprep LtdOffice 141285 Dunstall HillWolverhamptonWV6 0SRUnited Kingdom