Privacy Policy

WizardTeacher is operated as a sole trader business based in Sheffield, United Kingdom. Our website is wizardteacher.com. When this policy refers to "we", "us" or "our", it means WizardTeacher.

We are registered with the Information Commissioner's Office (ICO) as a data controller under UK GDPR. If you have any questions about how we handle your data, contact us at support@wizardteacher.com.

We collect information in the following ways:

Information you give us directly:

• Your name, email address and date of birth when you create an account
• Your nationality and native language during onboarding
• Your test choice, target score and exam date
• Your answers during diagnostic tests and practice sessions
• Payment information when you subscribe (processed by Stripe, we never see your full card details)
• Any messages you send us by email

If you use the University + Career service, we also collect:

• Your full name as it appears on official documents, and your date of birth
• Your contact telephone number, and your city and country of residence
• Your nationality, and your work authorisation or visa status for the country you are targeting
• Your education history, qualifications, grades and any test scores you give us
• Your employment history, CV content, projects, achievements and any existing drafts you paste or upload
• Links you choose to share, such as a LinkedIn or portfolio address
• The universities, courses, employers or roles you are applying to, and your deadlines
• Any files you upload, and the documents we prepare and deliver to you

You choose what to share here, and we ask for it only so we can prepare your documents accurately. Some of this information, such as your visa or immigration status, is sensitive, so we handle it with particular care and only our own team can access it.

Information collected automatically:

• Your IP address and general location
• The device and browser you use
• Pages you visit and how long you spend on them
• Your study activity, session history and progress data
• Cookies and similar tracking technologies (see our Cookie Policy for details)

Under UK GDPR, we must have a lawful reason to process your personal data. Here is what we rely on:

Contract performance:

• To create and manage your account
• To deliver the study plan, practice sessions and feedback you signed up for
• To process your subscription payments
• To send you transactional emails (account confirmation, password reset, billing receipts)

Legitimate interests:

• To improve the platform based on how it is used
• To detect and prevent fraud or misuse
• To monitor technical performance and fix bugs

Consent:

• To send you marketing emails about new features or offers, you can withdraw consent at any time by unsubscribing
• To place non-essential cookies on your device

• To create your personalised study plan based on your level, test and deadline
• To give you AI-generated feedback on your writing and speaking practice
• To track your progress and show you how your scores are improving
• To manage your subscription and billing
• To send you important account and service emails
• To respond to your support enquiries
• To improve the platform and fix issues
• To comply with our legal obligations

We do not sell your personal data. We share it only with the third-party services that power the platform. Each of these acts as a data processor under our instruction:

• Supabase, database, authentication and secure file storage for University + Career documents (data stored in the EU)
• Stripe, payment processing (United States, covered by Standard Contractual Clauses)
• Vercel, website hosting and deployment (United States, covered by Standard Contractual Clauses)
• Resend, transactional email delivery (United States, covered by Standard Contractual Clauses)
• Amazon Web Services (Bedrock), AI-generated feedback on your written and spoken answers, using Anthropic's Claude models hosted by AWS. We use the European endpoint, so this processing stays inside the European Economic Area
• OpenAI (Whisper), speech-to-text processing for speaking practice (United States, covered by Standard Contractual Clauses)
• Google Cloud, text-to-speech for listening practice (United States, covered by Standard Contractual Clauses)
• DeepL, translation services for native language support (Germany, EU)

We may also share your information if required by law, court order or to protect our legal rights.

Some of our third-party processors are based outside the UK and European Economic Area, primarily in the United States. Where this is the case, we ensure the transfer is protected by appropriate safeguards, typically Standard Contractual Clauses approved by the UK ICO or the European Commission. You can request details of these safeguards by contacting us.

• Account and profile data, kept for as long as your account is active, plus 2 years after deletion in case of disputes
• Study and practice data, kept for as long as your account is active
• Payment records, kept for 7 years to comply with UK tax law
• Email correspondence, kept for 3 years
• University + Career information, requests and delivered documents, kept for as long as your account is active so you can return to them, and deleted within 90 days of you deleting your account or asking us to remove them
• Anonymised usage analytics, kept indefinitely (cannot be linked back to you)

When we no longer have a lawful reason to keep your data, we delete or anonymise it securely.

Under UK GDPR you have the following rights. You can exercise any of them by emailing us at support@wizardteacher.com. We will respond within 30 days.

• Right of access, you can ask for a copy of the personal data we hold about you
• Right to rectification, you can ask us to correct inaccurate or incomplete data
• Right to erasure, you can ask us to delete your data (subject to legal retention obligations)
• Right to restrict processing, you can ask us to limit how we use your data in certain circumstances
• Right to data portability, you can ask for your data in a machine-readable format
• Right to object, you can object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent, where processing is based on consent, you can withdraw it at any time

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

We use cookies and similar technologies on our website. Please read our Cookie Policy for full details of what we use and why.

Some of the exams we support, particularly the SAT and ACT, are usually taken by students who are still at school, so we expect some of our users to be under 18. We design for that rather than pretend otherwise.

• You must be at least 13 to create an account
• If you are under 18, we ask that a parent or guardian reads and agrees to our Terms of Use with you
• We ask for your date of birth when you sign up. This is so we know which accounts belong to under-18s and can treat that data with extra care. It is never shown publicly
• We do not use children's data to build marketing profiles, and we do not sell or share it for advertising
• We collect the minimum we need to run your study plan, and nothing extra because of your age

We follow the UK Information Commissioner's Age Appropriate Design Code, which sets standards for online services likely to be used by under-18s. If you are a parent or guardian and want to see, correct or delete your child's data, contact us at support@wizardteacher.com and we will help. If you believe a child under 13 has created an account, tell us and we will remove it promptly.

We may update this policy from time to time. When we do, we will update the date at the top of this page. If the changes are significant, we will notify you by email. Continuing to use WizardTeacher after changes are published means you accept the updated policy.

If you have any questions about this privacy policy or how we handle your data:

• Email: support@wizardteacher.com
• Business: WizardTeacher (sole trader)
• Location: Sheffield, United Kingdom