Privacy Policy
This policy explains what personal information ExamCleared (operated by F.H. Dawo, ul. Jana Sabały 49, 31-479 Kraków, Poland (EU VAT/NIP 6791530280)) collects and how we use it. We collect as little as possible.
Information we collect
- Purchases: when you pay, Stripe (our payment processor) collects your name, email address, billing country/ZIP and payment details. We receive your email, the product bought, the amount and the last four digits of your card. We use them to deliver access, help you recover a lost code, issue refunds and keep legally required records.
- Practice data: your answers, results by topic and access code are stored only in your own browser (local storage). We do not receive them.
- Visit statistics without cookies: for each page view we record the date, page address, country (derived from the network location; the IP address itself is not stored in our statistics), the website you came from and whether you use a phone or a computer. We do not use advertising or tracking cookies.
- Security logs: our hosting provider (Netlify) processes technical data such as IP addresses to deliver the site and prevent abuse; we use temporary hashed counters to limit excessive requests.
- Email: if you write to us, we use your message to reply.
How we share information
We share data only with service providers that run the service for us: Stripe (payments), Netlify (hosting) and our email provider. We do not sell or share personal information for cross-context behavioral advertising, and we do not use it for profiling.
Retention
- Accounting records (invoice data: amount, date, product, country) are kept for the period required by Polish tax law — 5 years from the end of the year in which the tax arose.
- Purchase data used to deliver and recover access (email, product, last four card digits) are kept in Stripe for the access period plus up to 2 years, for refunds, disputes and support.
- Emails are kept for up to 2 years after the matter is closed.
- Request-limit counters contain only hashed identifiers and timestamps and are deleted after 24 hours (15 minutes for code recovery).
- Refund and dispute records: to deactivate refunded access we keep the Stripe payment identifier and a short purchase reference for 200 days after the payment.
- Visit statistics contain no personal identifiers.
Legal bases (EU/UK GDPR)
We are established in Poland, so the EU General Data Protection Regulation applies to our processing. We process purchase data to perform our contract with you (Art. 6(1)(b)), accounting records to meet legal obligations (Art. 6(1)(c)), and security data and visit statistics on the basis of our legitimate interests in running a safe, working service (Art. 6(1)(f)).
Your rights
You may ask us to access, correct, delete or restrict your personal information, to receive it in a portable format, and you may object to processing based on legitimate interests. Residents of US states with privacy laws (for example California, Colorado, Virginia or Texas) have similar rights to know, access, correct and delete, and to opt out of sale, sharing or targeted advertising — we do none of these.
How to make a request: email f.h.dawo@gmail.com from the address you used at checkout (or include your Stripe receipt). We verify your identity by matching the purchase email and, if needed, the last four card digits. You may use an authorized agent with your signed permission. We respond within one month (GDPR) or 45 days (US state laws), and will tell you if we need an extension allowed by law. If we decline a request, you may appeal by replying to our decision; we answer appeals within 45 days. We will not discriminate against you for using your rights.
You also have the right to lodge a complaint with a data protection authority — in Poland, the President of the Personal Data Protection Office (UODO, uodo.gov.pl) — or with your state Attorney General.
Children
The service is intended for adults preparing for professional licensing exams; purchasers must be 18 or older. It is not directed to children under 13, and we do not knowingly collect information from children.
International transfers
We are based in the European Union. Stripe and Netlify may process data in the United States. These transfers rely on the providers’ certification under the EU-U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses included in their data processing terms.
Contact
F.H. Dawo, ul. Jana Sabały 49, 31-479 Kraków, Poland (EU VAT/NIP 6791530280). Email: f.h.dawo@gmail.com.