Privacy notice
Effective date: 25 July 2026
In simple terms
- If you make an account, we save your email address and the practice answers, scores and progress you create, so you can see them again.
- We save this to run the website and keep your progress on your devices. We do not sell your information and we do not use it for adverts.
- Supabase, Vercel and SMTP2GO help us run the website, store data and send sign-in emails.
- You can ask us to show or delete your information at any time by emailing info@786infinite.com.
Who is responsible for your information
Assessments Aced is a service operated by 786 Infinite Ltd, company number 12533644, registered office 128 City Road, London, EC1v 2NX, registered in England and Wales. 786 Infinite Ltd is the data controller for the personal information described in this notice.
Information we process
- Your email address and the Supabase account identifier created for your account.
- Authentication information, such as sign-in status and the tokens used to keep you signed in.
- Assessment answers you submit for marking.
- Scores, estimated ranges and marking feedback produced for your answers.
- Attempts and progress history, including repair attempts and timestamps.
- Technical information generated when you use the site, including IP address and security or error logs where a provider processes them.
- Support correspondence if you contact us.
- Strictly necessary authentication and security cookies, and functional first-party local storage used to keep permitted browser state.
Please do not submit confidential, special-category or unnecessary personal information inside a practice answer.
How we use your information and our lawful basis
We rely on the following lawful bases under UK GDPR for each purpose.
- A. Creating and operating accounts. Lawful basis: performance of a contract, or taking steps at your request before entering into one.
- B. Delivering assessments, calculating results and saving progress. Lawful basis: performance of a contract.
- C. Authentication, service security, abuse prevention and troubleshooting. Lawful basis: legitimate interests. Our legitimate interests are protecting accounts, preventing misuse and maintaining a reliable service.
- D. Responding to support enquiries. Lawful basis: performance of a contract where the enquiry relates to your use of the service, and otherwise our legitimate interest in helping users.
- E. Complying with legal obligations. Lawful basis: legal obligation.
We do not treat your acceptance of this notice as consent.
Your right to object to legitimate-interests processing
Where we rely on legitimate interests (purpose C above, and part of D), you have the right to object to that processing based on your particular situation. If you object, we will stop unless we have compelling legitimate grounds that override your interests, or we need to continue to establish, exercise or defend legal claims. Contact us using the details below to object.
Who processes information for us
- Supabase — authentication and database services.
- Vercel — website hosting and application delivery.
- SMTP2GO — transactional authentication email delivery, such as confirmation and password-reset emails.
These providers act as our processors and only process information on our instructions to provide their service.
International transfers
Some of these providers may process information outside the United Kingdom. Where that happens, we rely on lawful transfer mechanisms as required by UK data protection law. You can request further information about the safeguards that apply to a specific transfer by contacting us using the details below.
How long we keep information
- Account and assessment information is retained while your account remains active and while it is needed to provide the service.
- Information is deleted or anonymised when it is no longer required, subject to legal, security and backup requirements.
- Support and legal records may be retained where reasonably needed to resolve disputes or meet legal obligations.
- Provider backup copies may remain temporarily until they are overwritten through normal backup cycles.
Cookies and local storage
The site uses only strictly necessary authentication and security cookies and functional first-party local storage. It does not use advertising cookies or cross-site tracking. See the Cookie and Local Storage Policy for the full list.
Your rights
Subject to the conditions in UK data protection law, you have the right to:
- access the personal information we hold about you;
- ask us to correct inaccurate information;
- ask us to delete information;
- ask us to restrict processing;
- object to processing based on legitimate interests, as explained above;
- data portability where applicable;
- withdraw consent where a specific processing activity actually relies on consent.
Automated decisions, selling and advertising
- We do not sell personal information.
- We do not use behavioural or cross-site advertising.
- We do not make solely automated decisions that produce legal or similarly significant effects about you. The marking engine produces formative practice estimates only.
Complaints and the ICO
If you have a concern, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk. Contacting the ICO does not mean it will decide every complaint, but it can review how your information has been handled.
Children’s information
The service is intended for users aged 16 and over. Users aged 16 or 17 may use the service but should review this notice and the Terms with a parent or guardian. Users under 16 must not create an account. Because the service may be accessed by 16 and 17-year-olds, we treat it as likely to be accessed by children and apply data minimisation, high default privacy and no behavioural advertising or advertising profiling.
Changes to this notice
If we make a significant change, we will update the effective date at the top of this page and, where appropriate, provide additional notice within the service.
Contact
For any privacy request or question, contact 786 Infinite Ltd at info@786infinite.com.