Privacy policy
Effective date: October 13, 2026.
Who holds your data
Sava Labs Ltd, company number 16124943, Unit 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole BH16 6FA, United Kingdom. Write to [email protected] about anything on this page.
What we collect
- Your email address. We need it to send the code that signs you in, your receipt, and an answer when you write to us.
- The state and the licence you chose, and the language you read the site in.
- The exam date, if you tell us one. We use it to help you plan your study. It never shortens or lengthens your access.
- Your answers, your scores and your progress per topic. This is what makes your results page.
- Your purchase. The amount, the date, the option you bought and your access window. Stripe holds the payment details. We never see or hold your card number.
- Technical records. The pages you asked for, the time, your internet address, your browser type and the errors the site hit. Our server keeps these to run the site and to find faults.
- How you used the site, and a recording of your session on our pages, but only if you switch on "Analytics and session recordings" in the cookie banner. The section below names the two tools that do this and what each one collects.
We do not ask for your name, your postal address, your phone number, your date of birth, your licence number or your school. We do not ask for anything about your health or your race, and we do not want it. Do not put personal details into a message to support that we do not need.
Why we use it
To sign you in, to give you the access you paid for, to show you your results, to send your receipt, to answer your support message, to fix faults, to stop fraud and abuse, and to count how many people use the site so we can make it better. Nothing else.
Our legal ground for using it
Sava Labs Ltd is a UK company, so UK data protection law covers your data as well as any US law that also applies. We use your data to perform the sale when you buy a pass or take the free test, because the law requires it when we keep a record of your purchase for tax, or because we have a legitimate interest in running the site safely, such as stopping fraud and fixing faults. We do not use your data on the ground of consent, except for three things you switch on yourself: a marketing email, which you can refuse at any time, and the two measuring tools named below, which do not start until you say yes and stop when you take the yes back.
Who we share it with
We share only what each one needs to do its job. These are the categories, with the role of each.
| Who | Why | What they get |
|---|---|---|
| Our payment company, Stripe | It takes the card payment for us and keeps the record of it | Your email address and the purchase |
| Our email sender | It delivers the sign-in code, the receipt and the few emails you asked for | Your email address and the text of that email |
| Our hosting company | It runs the server and the database | Everything we hold, as the host of it |
| Google Analytics | It counts how the site is used, only after you say yes | What you did on this site, and the technical records above |
| Microsoft Clarity | It records sessions on our pages, only after you say yes | The recording of your session on this site, with typed text masked |
| A professional adviser, an auditor, or an authority | Only when the law makes us, or to defend a legal claim | Only what is asked for |
We do not sell your data. We do not give it to an advertising company, a data broker or anybody who wants to market to you.
What measures how the site is used, and only after you say yes
Two tools measure how the site is used. Neither of them starts until you switch on "Analytics and session recordings" in the cookie banner. Before you answer the banner, and if you decline it, neither one runs and neither one sets a cookie.
- Google Analytics counts visits and records what happened on the site: the pages you opened, the buttons you pressed, the language you read in, and whether you bought. It sets a cookie so a second visit from the same browser counts as the same visitor and not a new one.
- Microsoft Clarity records your session on our pages: where you moved the pointer, what you pressed, how far you scrolled, and which pages you went through. The text you type is masked, so what you write into a box is not in the recording. We watch these recordings to find the places where the site confuses people, and we change those places.
Neither of these two tools follows you to other websites, and neither one is an advertising tool.
To change your answer at any time, press "Cookie settings" at the bottom of any page. Switch "Analytics and session recordings" off and save, and both tools stop.
No advertising tool runs here
We put no advertising pixel, no advertising cookie and no social network tracker on this site. No advertising company gets a record of your visit from us. There is no chat box from another company, because a chat box reads what you write into it. Support is email, and the email comes to us.
We did not give anyone else personal information about you for their own direct marketing, and we will not. This answers California Civil Code 1798.83.
That matters under California's bigger privacy law, the California Consumer Privacy Act as amended, Civil Code 1798.100 and following. That law uses the words "sell" and "share" for giving personal information to another business for money or for cross-context behavioural advertising. We do neither. We also fall below the size at which that law applies to a business at all, which Civil Code 1798.140(d) sets by annual gross revenue, by the number of California consumers whose data is bought, sold or shared, and by how much revenue comes from selling or sharing data. Even so, the rules in the two sections below are how we behave, not a favour.
How we answer a "do not track" signal
Your browser can send a "do not track" signal. We do not track you across other websites at all, so there is nothing for that signal to switch off, and we treat it as already satisfied. We change nothing when we see it, because there is nothing to change. This answers Business and Professions Code 22575(b)(5).
Whether other parties track you across sites here
No. No other party collects information about what you do on OTHER websites through this site. We load no advertising or social tracker at all. The two tools in the section above measure this site only, they start only after you say yes, and neither one builds a profile of you across other websites. This answers Business and Professions Code 22575(b)(6).
How to see, change or delete your data
Write to [email protected] from the email address on your account. You can ask us to
- send you a copy of what we hold about you,
- correct something that is wrong,
- delete your account and your data.
We answer within 30 days. We do not charge for it. If you ask us to delete your account while you have paid access left, the access goes with it, so tell us if you would rather wait until it runs out. We have to keep a record of the purchase itself for our tax and accounting duties even after the account is gone. This answers Business and Professions Code 22575(b)(2).
Because we are a UK company, you can also complain to the UK Information Commissioner's Office, the authority that oversees how we handle data: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom, or ico.org.uk. We would rather you wrote to us first, so we can put it right.
How we tell you about a change to this policy
We post the new policy on this page with a new effective date at the top. If the change matters to you, we also email you at the address on your account at least 14 days before it starts. This answers Business and Professions Code 22575(b)(3).
Children
This site is for people getting ready for a professional licence exam. It is not for children. We do not knowingly collect anything from a child under 13, which is what the Children's Online Privacy Protection Act, 15 U.S.C. 6501 to 6506, and the Federal Trade Commission rule at 16 CFR Part 312 protect. If you believe a child under 13 gave us data, write to [email protected] and we delete it.
Where your data is kept
On a server in Germany, run for us by a hosting company there. Our payment company and our email sender may handle your email address in the United States and in other countries. By using the site you accept that your data travels this way.
How long we keep it
Your account and your results stay while your account exists. If you have not signed in for 24 months, we delete the account and the results. The record of a purchase stays for seven years because tax and company law make us keep it. Technical records stay for 90 days.
If a breach happens
If a breach exposes your personal information, we will tell you by email as the law of your state requires.
Cookies
We always set the cookies the site needs to work: the one that keeps you signed in, the one that remembers your language, and the one that remembers your answer to the cookie banner. Those three cannot be switched off, because the site does not work without them.
If you switch on "Analytics and session recordings", Google Analytics and Microsoft Clarity each set their own cookies so a second page or a second visit counts as the same visitor. Switch the category off and those cookies are not set.
We set no advertising cookie, ever.
How to reach us
[email protected], or Sava Labs Ltd, Unit 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole BH16 6FA, United Kingdom.