Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your information.
Last Updated: 30 December 2024
1. Introduction
GCSE Past Papers ("we", "us", or "our") operates gcsepastpapers.co.uk (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website.
By using our Website, you consent to the data practices described in this policy. If you do not agree with this policy, please discontinue use of the Website.
2. Data Controller
For the purposes of the UK General Data Protection Regulation (UK GDPR), the data controller is:
3. Information We Collect
3.1 Personal Data You Provide
We may collect personal information that you voluntarily provide when you:
- Subscribe to our newsletter (email address)
- Download the exam timetable (email address)
- Contact us via email (name, email, message content)
3.2 Automatically Collected Information
When you visit our Website, we automatically collect certain information about your device and browsing behavior, including:
- Usage Data: Pages viewed, time spent on pages, links clicked, search queries
- Device Information: Browser type, operating system, device type, screen resolution
- Technical Data: IP address (anonymized), referring website, access times
3.3 Google Analytics
We use Google Analytics to analyze how visitors use our Website. Google Analytics collects information such as how often users visit the site, what pages they visit, and what other sites they used prior to coming to our site.
Google Analytics uses cookies (small text files stored on your device) to collect this information. The data collected is anonymous and cannot be used to identify you personally.
Learn more about Google Analytics privacy practices: Google Privacy Policy
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our Website. A cookie is a small text file stored on your device that helps us recognize you and remember your preferences.
4.1 Types of Cookies We Use
Essential Cookies
Required for the Website to function properly. These cookies remember your cookie consent preferences.
Analytics Cookies
Help us understand how visitors interact with our Website by collecting and reporting information anonymously (Google Analytics).
Advertising Cookies (Future Implementation)
When we implement Google AdSense, these cookies will be used to display relevant advertisements based on your interests. You can opt-out of personalized advertising via our cookie banner.
4.2 Managing Cookies
You can control cookies through:
- Cookie Banner: Accept or reject non-essential cookies when you first visit our site
- Browser Settings: Most browsers allow you to refuse cookies or delete existing cookies
- Opt-Out Tools: Use Google's opt-out browser add-on
Note: Blocking essential cookies may affect Website functionality.
5. Google AdSense and Advertising
We plan to use Google AdSense to display advertisements on our Website. When implemented, Google will use cookies to serve ads based on your prior visits to our Website and other websites on the Internet.
5.1 Third-Party Advertising Partners
Google and other advertising partners may use cookies, web beacons, and similar technologies to collect or receive information from our Website and use that information to provide measurement services and target ads.
You can opt-out of personalized advertising by visiting:
5.2 Amazon Associates
We participate in the Amazon Services LLC Associates Program, an affiliate advertising program. When you click on Amazon links and make a purchase, we may earn a small commission at no extra cost to you. Amazon uses cookies to track referred sales.
6. How We Use Your Information
We use the information we collect for the following purposes:
- Website Operation: To provide, maintain, and improve our services
- Communications: To send you newsletters, exam timetable updates, and respond to inquiries
- Analytics: To understand how visitors use our Website and improve user experience
- Personalization: To remember your preferences and customize content
- Security: To detect, prevent, and address technical issues or fraudulent activity
- Legal Compliance: To comply with applicable laws and regulations
6.1 Legal Basis for Processing (UK GDPR)
Under UK GDPR, we process your personal data based on:
- Consent: You have given explicit consent for specific purposes (e.g., newsletter signup)
- Legitimate Interests: Processing is necessary for our legitimate interests (e.g., analytics, security)
- Legal Obligation: Processing is required by law
7. Data Sharing and Third Parties
We do not sell, trade, or rent your personal information to third parties. We may share your data with trusted service providers who assist us in operating our Website:
Google Analytics
Analyzes website usage and visitor behavior. Data is anonymized.
Google AdSense (Future)
Serves advertisements. May collect data for personalized ads (with your consent).
Amazon Associates
Tracks referral sales through affiliate links. Amazon's privacy policy applies.
Email Service Provider
Stores newsletter email addresses securely. Used only for sending updates.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Newsletter Emails: Until you unsubscribe or request deletion
- Analytics Data: Google Analytics retains data for 26 months (default setting)
- Contact Inquiries: Up to 2 years for record-keeping purposes
- Cookie Data: Varies by cookie type (see cookie details in your browser)
9. Your Data Protection Rights (UK GDPR)
Under UK GDPR, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data under certain circumstances.
Right to Restrict Processing
Request that we limit how we use your data.
Right to Data Portability
Request a copy of your data in a machine-readable format.
Right to Object
Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Secure HTTPS encryption for data transmission
- Regular security updates and monitoring
- Limited access to personal data (only authorized personnel)
- Secure database storage with access controls
However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
11. Children's Privacy
Our Website is designed for students aged 14-16 (typical GCSE age). We do not knowingly collect personal information from children under 13 without parental consent. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
12. International Data Transfers
Some of our service providers (e.g., Google) may process data outside the UK. When data is transferred internationally, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by UK authorities
- Adequacy decisions by the UK government
- Service providers' compliance with UK GDPR standards
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Updating the "Last Updated" date at the top of this page
- Displaying a prominent notice on our Website
- Sending an email to newsletter subscribers (for significant changes)
We encourage you to review this policy periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
15. Complaints to the ICO
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK's supervisory authority: