Privacy Policy

1Who is responsible

The data controller is PassGoat Ltd, a company registered in England and Wales, with its registered office at International House, St Katharine's Way, London, E1W 1UN, United Kingdom. For any privacy question or request, email support@passgoat.com.

We process personal data in line with the UK GDPR and the Data Protection Act 2018 and, for users in the European Economic Area, the EU GDPR.

2What we collect and why

• Visiting the website. Our host, Cloudflare, processes your IP address and request details to deliver pages, stop abuse and rate-limit downloads. We use Cloudflare Web Analytics, which counts visits without cookies or personal profiles.
• Buying a PDF pack. Stripe collects your email, payment details and billing country or address to take payment and calculate tax. We receive your email, country, the amount and the product, and use your email to send your download link.
• Your PassGoat Study account. Clerk handles sign-up and sign-in and stores your email address, your sign-in details and security logs. We use your email to identify your account.
• Subscriptions and passes. We store your email, your Stripe customer ID, your plan or pass and its status (for example active, expired or refunded) so we know which question banks you can open. Stripe handles the payment details.
• Studying. To let you continue on any device, we store your study progress for each question bank with your account: which questions you studied, your answers and confidence, review schedule, notes, saved questions and daily activity. When you check an answer, your chosen option is sent to our server to be marked. On the free plan we also record which exams you started and how many answers you checked, to apply its limits.
• Product usage. We record a few steps you take in PassGoat Study with your account (for example starting a free sample, completing it, viewing the plans or starting checkout) and the site that sent you to sign up, if the link said so, to understand and improve the service. We do not use cookies or third-party trackers for this.
• Optional details. If you give us your exam date, we use it to pace your study plan. We send you study reminders by email only if you tick the box to agree, and every email has a one-click unsubscribe link.
• Question reports. If you report an issue with a question, we keep your report with your account to fix the content.
• Support. If you email us, we keep the conversation to help you.

3Legal bases

• Contract: to deliver your purchase, run your account and subscription, and answer support requests.
• Legal obligation: to keep tax and accounting records.
• Legitimate interests: to keep the service secure, prevent fraud and scraping, understand overall site usage, and improve PassGoat Study from the product usage steps described above.
• Consent: study reminder emails, which you can stop at any time with the unsubscribe link or by emailing us.

We do not use your data for advertising, we do not sell it, and we do not make automated decisions that have legal effects on you.

4Cookies and local storage

• passgoat.com sets no cookies.
• study.passgoat.com uses cookies set by Clerk that are strictly necessary to keep you signed in, and keeps a copy of your study progress in local storage so the app stays fast and works briefly offline. Neither is used for tracking, so they do not need consent.
• Stripe Checkout may use its own cookies for fraud prevention; see Stripe's privacy policy.

5Who processes your data

We share data only with providers that help us run PassGoat, under data processing agreements:

• Stripe: payments, tax and subscription billing.
• Cloudflare: hosting, storage, security and cookieless analytics.
• Clerk: account sign-up and sign-in for PassGoat Study.
• Resend: sending purchase and download-link emails, and study reminders if you agreed to them.

Some of these providers process data outside the UK and the EEA. Where they do, transfers are covered by appropriate safeguards such as the UK International Data Transfer Addendum, the EU Standard Contractual Clauses or the UK-US data bridge / EU-US Data Privacy Framework.

6How long we keep it

• Purchase and billing records: as long as tax and accounting law requires.
• Your PassGoat Study account, study progress, subscription or pass status, free-plan usage, product usage steps and question reports: while your account exists. When you ask us to delete it, we delete it within 30 days, except records we must keep by law.
• Support emails: until the matter is resolved and no longer needed.
• Server and security logs: for a short period, then deleted automatically.

7Security

All traffic is encrypted (HTTPS). Payment details are handled only by Stripe. Study content and downloads are served only to signed-in or paying users, and answers are checked on the server rather than sent to your browser. Access to our systems is restricted to what each task needs.

8Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. Email support@passgoat.com from the address linked to your purchase or account; we reply within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or, in the EEA, to your local data protection authority.

9Children

PassGoat is meant for adults and professionals preparing for certification exams. It is not directed at children under 16, and we do not knowingly collect their data.

10Changes to this policy

If we change how we use personal data, we will update this page and its date. For significant changes affecting account holders or subscribers, we will tell you by email.