Last updated: 1 May 2026
Exam Ladder ("we", "us") operates the GCSE Maths revision platform at examladder.co.uk. We are the data controller for personal data processed through this service. This policy explains what data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
Contact our data team: privacy@examladder.co.uk
Account data:
Email address, date of birth, display name (optional), exam board, and tier selection provided when you register. We collect date of birth solely to confirm you are old enough to use Exam Ladder.
Usage and learning data:
Practice session results, topic mastery scores, mock exam grades, time-on-task, streak data, and XP. This data powers your personalised revision recommendations.
Technical data:
IP address (used for rate limiting and fraud prevention), browser type, and device type (collected via standard web server logs). We do not use third-party advertising or tracking cookies; first-party product analytics are recorded only if you choose "Accept all" in the cookie banner (see Cookies below).
Payment data:
Subscription status and billing history. Raw card details are processed exclusively by Stripe Inc. and are never stored on our servers.
We process your data under the following lawful bases (UK GDPR Article 6):
Exam Ladder is intended for users aged 13 and over. UK GDPR Article 8 sets the age of consent for online services at 13; we ask for date of birth at sign-up and do not knowingly create accounts for under-13s.
We do not sell your personal data to third parties. We do not use your data to train third-party AI models.
We share data only with processors who contractually agree to handle it securely and only for stated purposes:
We retain your account and learning data for as long as your account is active. Billing records are retained for 7 years as required by UK tax law. Anonymised, aggregated analytics may be retained indefinitely.
If you delete your account via Settings > Delete Account, your account and learning data are removed immediately and cannot be recovered. Deleting your account also cancels any active subscription.
You have the following rights, exercisable by emailing privacy@examladder.co.uk:
We will respond to all requests within 30 days. If you are unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We take the privacy of users under 18 seriously and design the service in line with the UK Children's Code. Exam Ladder is intended for students aged 13 and over; we ask for date of birth at sign-up and do not knowingly create accounts for under-13s. To deliver the revision service we carry out educational personalisation — adaptive question difficulty, per-topic mastery and predicted-grade tracking, spaced-repetition scheduling, and an AI Study Coach that retains brief notes about a student's learning so it can help more effectively over time. This personalisation (profiling) is used only to deliver and improve the learning service — never for advertising or ad targeting, and we never sell children's data or share it with advertisers. A student or parent can request deletion of this data, including the AI Study Coach notes, at any time by contacting privacy@examladder.co.uk.
We use strictly necessary storage for authentication (Supabase session) and to remember your cookie choice. We do not use advertising cookies and never share data with advertisers. Only if you choose "Accept all" do we record first-party, privacy-respecting product analytics (e.g. which features are used) to improve the service; choosing "Necessary only" disables these. You can change your choice at any time via the cookie banner.
We will notify you of material changes to this policy by email or prominent in-app notice at least 14 days before they take effect.
Data protection enquiries: privacy@examladder.co.uk
Exam Ladder