← Back to home

Privacy Policy

Last updated: May 2026

Who we are

Firefighter Tests (firefightertest.co.uk) is an independent practice platform for UK firefighter applicants. We are the data controller for the personal information described in this policy. You can contact us at any time via our contact page.

What data we collect and why

Account registration

When you create an account we collect your email address. We use this to log you in, send your purchase confirmation, and provide customer support. The legal basis is performance of a contract (your access to the service).

Test results

When you complete a test we record your score and session data so your results appear in your dashboard. This data is linked to your account and is not shared with employers, assessment providers, or any third party. Legal basis: performance of a contract.

Contact form

If you use our contact form we collect your name, email address, and message. We use this solely to respond to your enquiry. Legal basis: legitimate interests (responding to customer communications).

Payment

Payments are processed by Stripe. We do not see or store your card number, expiry date, or CVV. Stripe handles all payment data under their own privacy policy. We receive confirmation that a payment was made and your email address to activate your access. Legal basis: performance of a contract.

Analytics and advertising

We use Google Analytics 4 and Google Ads to understand how visitors find and use the site, and to measure the effectiveness of our advertising. These services set cookies in your browser and may transfer data to the United States under Google's Standard Contractual Clauses. We also use Vercel Analytics (cookieless, no personal data). Legal basis: legitimate interests. You can opt out — see our Cookie Policy.

How long we keep your data

Account data (email address and test results) is kept for as long as your account is active. If you request deletion we will remove your personal data within 30 days. Contact form messages are kept for up to 12 months, then deleted. Payment records are retained for 7 years to comply with UK financial regulations.

Who we share your data with

We only share data with the services necessary to run the platform:

  • ▸Supabase — database and authentication provider (EU data centres).
  • ▸Stripe — payment processing (UK/EU and US, Standard Contractual Clauses apply).
  • ▸Vercel — website hosting and edge network (US, Standard Contractual Clauses apply).
  • ▸Google — analytics and advertising (US, Standard Contractual Clauses apply).
  • ▸Email provider (Resend) — used to send transactional emails such as purchase confirmations.

We do not sell your personal data. We do not share your data with fire and rescue services or any employer.

Your rights

Under UK GDPR you have the right to:

  • ▸Access — request a copy of the personal data we hold about you.
  • ▸Rectification — ask us to correct inaccurate data.
  • ▸Erasure — ask us to delete your personal data ("right to be forgotten").
  • ▸Restriction — ask us to limit how we process your data.
  • ▸Portability — receive your data in a machine-readable format.
  • ▸Objection — object to processing based on legitimate interests.

To exercise any of these rights, please contact us. We will respond within 30 days. If you are not satisfied with our response you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Cookies

For full details of the cookies we use and how to manage them, please see our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will always reflect the most recent version. Significant changes will be notified to registered users by email.

Contact

For any privacy-related questions please get in touch.