Privacy Policy

1. Who We Are

Bell the UCAT is an online UCAT preparation service providing video courses, apps and study tools to students in the United Kingdom, Australia and New Zealand. Our website is belltheucat.co.uk.

For any privacy-related enquiries, please contact us at: hi@belltheucat.co.uk

2. What Information We Collect

Information you provide to us

• Account registration: your name, email address and password when you create an account
• Purchase information: your name, email address and billing address when you buy a product
• Contact form submissions: your name, email, phone number, city and country when you contact us
• Email newsletter: your email address if you choose to subscribe

Information collected automatically

• IP address and browser type (for security and spam prevention)
• Pages visited and time spent on the site (via analytics)
• Cookies (see Section 7)

Payment information

We do not store your payment card details. All payments are processed securely by Stripe, a PCI-DSS compliant payment processor. Please refer to Stripe’s privacy policy at stripe.com/gb/privacy for details of how they handle your payment data.

3. How We Use Your Information

We use your personal information to:

• Create and manage your Bell the UCAT account
• Process your purchases and deliver access to products you have bought
• Send you order confirmations and receipts by email
• Provide access to your purchased courses, apps and tools (including UCAT Buddy, NumSprint, VR Dribble and the UCAT Question Bank)
• Respond to your enquiries and provide customer support
• Send you course updates, new content notifications and relevant communications (you can opt out at any time)
• Improve our website and services using anonymous analytics data
• Meet our legal and regulatory obligations

4. Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

• Contract performance: to fulfil your purchase and deliver the products you have bought
• Legitimate interests: to improve our services and communicate relevant updates to existing customers
• Consent: for marketing emails where you have opted in — you may withdraw consent at any time
• Legal obligation: where we are required to process data to comply with applicable law

5. Who We Share Your Data With

We do not sell, rent or trade your personal information. We share data only with trusted third-party services strictly necessary to operate our business:

• Stripe — payment processing
• WordPress / WooCommerce — website and e-commerce platform
• Hostinger — web hosting provider
• YouTube (Google) — video delivery for course content
• Rank Math — SEO analytics (anonymised data only)

All third-party providers are contractually required to keep your data secure and use it only for the purposes we have specified.

6. How Long We Keep Your Data

• Account data: retained for as long as your account is active, plus 2 years after the last login
• Purchase records: retained for 7 years to comply with UK financial record-keeping requirements
• Contact form submissions: retained for 2 years
• Marketing preferences: until you unsubscribe or withdraw consent

7. Cookies

Our website uses cookies — small text files stored on your device — to make the site work correctly and to improve your experience. The cookies we use include:

• Essential cookies: required for the website to function, including login sessions and shopping cart. Cannot be disabled.
• Analytics cookies: used to understand how visitors use our site (anonymised data). You can opt out via our cookie banner.
• YouTube cookies: set when you play course preview videos embedded from YouTube. Please refer to Google’s cookie policy for details.

You can manage your cookie preferences at any time through your browser settings or our cookie banner.

8. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectification — correct any inaccurate data
• Erasure — request deletion of your personal data (“right to be forgotten”)
• Restriction — request that we limit how we process your data
• Data portability — receive a copy of your data in a machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time for any processing based on consent (e.g. marketing emails)

To exercise any of these rights, please email us at hi@belltheucat.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

9. App Access & Account Policy

All Bell the UCAT products — including NumSprint, VR Dribble, the UCAT Question Bank and UCAT Buddy — require you to be logged into your Bell the UCAT account at belltheucat.co.uk to access them. Access is personal, non-transferable and may not be shared.

Access to certain products (including NumSprint) is time-limited and expires on 30 November of the year of purchase, regardless of the date of purchase. This is clearly stated at the point of sale.

10. International Users (Australia & New Zealand)

If you are accessing Bell the UCAT from Australia or New Zealand, your data is processed and stored in accordance with UK GDPR, which provides a standard of data protection comparable to the Australian Privacy Act 1988 and the New Zealand Privacy Act 2020. By purchasing our products, you consent to your data being transferred to and processed in the United Kingdom.

11. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. These include SSL encryption, secure password hashing, and restricted access to personal data by staff and systems. However, no internet transmission is completely secure, and we cannot guarantee the absolute security of data transmitted to our website.

12. Children

Our products are intended for students aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, please contact us immediately at hi@belltheucat.co.uk and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify registered users of any material changes by email. The “Last updated” date at the top of this page shows when it was last revised. Continued use of our website or products after changes are posted constitutes your acceptance of the updated policy.