1. Who is responsible for your data
Marazion Ventures Ltd operates TaraPrep and is the controller of the personal data described in this notice. TaraPrep is intended for people in the United Kingdom.
For privacy requests or questions, email [email protected]. Please include enough information for us to identify your account safely.
2. Personal data we collect
We collect the following categories of data, depending on how you use TaraPrep:
- Account and profile data: name, email address, login method, account identifiers, email-verification status and any target course or test-sitting information you choose to provide.
- Practice and learning data: question selections, timings, results, mock-paper progress, saved work, feedback and mental-maths performance.
- Writing submissions: the essay text, prompt, word count and AI-generated feedback for any writing task you submit.
- Transaction data: the fact that access was purchased and the related Stripe checkout reference. Card, PayPal and other payment credentials are handled by Stripe, not stored by TaraPrep.
- Technical and usage data: session and security information, IP address, browser or device information, pages visited, referral information, error reports and event data used to understand how the site is used.
- Communications: messages and information you send when you contact us.
Please do not include special-category data, sensitive personal information, or information about other people in an essay or support message unless it is genuinely necessary. TaraPrep is not designed to collect that information.
3. Why we use your data and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Create and secure accounts, provide practice tools, save progress, provide paid access and answer support requests. | Performance of a contract with you, or steps taken at your request before entering one. |
| Send an essay you submit for marking to OpenAI and return feedback to you. | Performance of a contract; the processing is initiated by your request for the feature. |
| Prevent fraud, protect accounts and content, investigate faults and maintain service security. | Our legitimate interests in operating a secure and reliable service. |
| Keep records required for tax, accounting, legal claims or regulatory obligations. | Compliance with a legal obligation, or our legitimate interests in establishing, exercising or defending legal claims. |
| Use optional analytics or similar technologies that are not strictly necessary. | Your consent, where required by law. You can withdraw it at any time through the relevant controls. |
We do not use your data to make solely automated decisions that have legal or similarly significant effects on you. AI essay feedback is educational support only; it is not an admissions decision or professional advice.
4. Who we share data with
We use carefully selected service providers to run TaraPrep. Depending on the services enabled and the way you use the site, these can include:
- payment provider Stripe, to process payments and prevent payment fraud;
- email provider Resend, to deliver account and transaction emails;
- Google or Microsoft, if you choose to sign in through one of those providers;
- OpenAI, when you request AI essay marking;
- error-monitoring provider Sentry, if enabled, to help diagnose technical problems; and
- analytics providers, including Google Analytics, only where enabled and used in accordance with the applicable consent requirements.
We may also share data with hosting, database, security and professional-service providers, or where required by law, a regulator, court or law-enforcement authority. We do not sell your personal data or allow third parties to use it for their own direct marketing.
5. International transfers
Some providers may process personal data outside the United Kingdom. Where this happens, we will use a transfer mechanism recognised by UK data-protection law and, where needed, supplementary safeguards intended to protect the data.
6. Cookies, local storage and analytics
TaraPrep uses cookies and similar browser storage for functions such as keeping you signed in, protecting the service, remembering limited preferences and maintaining a practice session. The site may also use a locally stored anonymous identifier and optional analytics to understand aggregate use of the service.
We will ask for consent before placing or reading non-essential cookies or similar technologies where the law requires it. Strictly necessary technologies may operate without consent because they are needed to provide the service you request. You can also manage cookies through your browser settings, though blocking necessary cookies can prevent sign-in or other features from working.
7. How long we keep data
We keep account, profile and learning data while your account is active and for as long as needed to provide the service, resolve a query or protect the service. We keep payment and other business records for the periods required by tax, accounting and other applicable law. Security and technical logs are retained for a shorter period where possible.
When data is no longer needed, we delete it or anonymise it. If you ask us to close your account, we will assess the request and remove or anonymise data unless we need to keep it for a lawful reason, such as a legal obligation or a dispute.
8. Your rights
Subject to the conditions and limits in UK data-protection law, you may have the right to:
- ask for access to your personal data;
- ask us to correct inaccurate or incomplete data;
- ask us to erase data, or restrict or object to certain processing;
- ask for a portable copy of data you provided to us; and
- withdraw consent at any time where we rely on consent.
To exercise a right, contact us at [email protected]. We may need to verify your identity. You also have the right to complain to the Information Commissioner's Office.
9. Children and young people
TaraPrep may be used by applicants under 18. We aim to use a high-privacy approach: we do not make student profiles public, we do not use practice results for advertising to other users, and we ask users not to include unnecessary sensitive personal information in their work.
If you are a parent or guardian and have a question about a child's account or data, contact us at [email protected]. We may ask for information to verify the relationship before discussing an account.
10. Security and changes to this notice
We use reasonable technical and organisational measures designed to protect personal data. No online service can guarantee absolute security, so please keep your login credentials private and contact us promptly if you think your account has been compromised.
We may update this notice when the service, law or our processing changes. We will publish the new version here and update the date above. For material changes, we will take appropriate steps to bring them to your attention.