Privacy Policy

Last updated: May 2026

Summary

Who we are

study.and.travel is an online exam-practice platform that helps students revise for GCSE and A-Level exams and helps teachers track that revision.

Minimum age

Are you under 13 years old? Please ask your parent or guardian for permission to use study.and.travel, to open the website for you and to provide any information on your behalf.

Data Controller

For the purposes of UK and EU data-protection law, the data controller is study.and.travel. When we say "study.and.travel", "we", "us" or "our" in this Privacy Policy, we are referring to the operator of the Site responsible for processing your data.

Introduction & General Terms

At study.and.travel, we are committed to protecting the personal information we hold about our members, website users, and any other data subject whose personal information we hold. Personal information as outlined in this policy is being collected, stored, used, and/or shared ("processed") by us.

This may happen when you interact with us in the following ways ("Services"), including when you:

  • visit our website at study.and.travel (the "Site"), or access any resources on the Site;
  • purchase a subscription with our payment provider and create an account with us;
  • request support, send us an email or contact us through the Site;
  • interact with our Site, including when you upload or share user-generated content with us;
  • provide feedback to us or complete a survey.

Our commitment to you

We are committed to managing and safeguarding your personal information in accordance with current legislation and best practice. Our aim is to be responsible, relevant and secure when using your data. Whenever you provide personal information we will treat that information in accordance with this Privacy Policy.

Table of contents

  • What information we process
  • How we process your Personal Information
  • What Personal Information we share with other parties
  • How we keep your Personal Information safe
  • How we respect your privacy
  • Use of this website by children
  • Links to other websites
  • Do-not-track features
  • Your rights
  • Right to complain
  • Updates to this Privacy & Cookies Policy

What information we process

Device Information

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about how long you stay on the Site, the individual web pages or resources that you view, what websites or search terms referred you to the Site, and other information about how you interact with the Site. We refer to this automatically-collected information as "Device Information".

  • "Cookies" are data files that are placed on your device and often include an anonymous unique identifier. See our Cookie Policy for more.
  • "Local storage" is space on your device storage that is managed by the internet browser. It is used to save temporary or persistent information that may aid in recording your preferences and how you browse the Site.
  • "Web beacons", "tags" and "pixels" are electronic files used to record information about how you browse the Site.

Order Information

Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you. We refer to this information as "Order Information". It includes:

  • your name;
  • your email address;
  • your relationship as a user to the Site (e.g. student, teacher, parent);
  • your authentication credentials (we use email magic links — no password is stored).

Payment Information

The payment operator we partner with to process card charges (Stripe) also collects your Order Information, in addition to your payment details. We refer to this information as "Payment Information", which includes:

  • your card number, expiry date and security code (handled directly by Stripe — study.and.travel never sees the full card number);
  • your billing address.

Feedback and Survey Responses

Where you provide us with feedback (for example, by email or via a web form) or provide responses to a questionnaire or survey conducted by us, we collect any feedback or responses you give us.

User-Generated Content

Certain features of our Site enable you, whether as an unregistered user or as a subscribing member, to create, upload and share content directly to our Site or with other users (this includes features that enable you to submit answers and comments). Whilst we will not require you to provide personal information via these features, such information may amount to personal data — including where you choose to include identifying information in user-generated content. We collect and use user-generated content and contributions submitted to our Site by users.

Sensitive Information

When interacting with and contributing to our website you may choose to provide information about your health, race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, or trade-union membership within the content you share or submit to us. Outside of this context, we do not collect sensitive information, which includes "special category data" as defined under the UK GDPR ("Sensitive Information").

Personal Information

When we talk about "Personal Information" in this Privacy Policy, we are talking about the whole of Device Information, Order Information, Payment Information, Feedback and Survey Responses and User-Generated Content.

How we process your Personal Information

We use the Device Information we collect to help us screen for potential risk and fraud (in particular, your IP address and general location), to serve our content to you technically, and to improve and optimise our Site. For example, we generate reports about how our users browse and interact with the Site and assess the success of our marketing campaigns. These data-processing purposes are our Legitimate Interests.

We use the Order Information we collect to fulfil your subscription through the Site. In particular, we:

  • process your payment information;
  • provide you with invoices and/or order confirmations;
  • create your user account on the Site.

Additionally, we may use your Order Information to:

  • communicate with you;
  • screen our orders for potential risk and/or fraud;
  • understand how our users browse and interact with the Site;
  • assess the success of our marketing and advertising campaigns.

We may use your contact details to invite you to respond to surveys, provide feedback or review our Services. We process feedback and survey responses to study how our users use our Services and to help us improve and develop them. The legal basis on which we process this data is legitimate interest (such processing being necessary to improve and develop our Services).

We collect user-generated content to enable you to interact with and participate in our Services (whether as a paid member or as an unregistered user). The legal basis on which we process this data is performance of a contract with you and legitimate interest (such processing being necessary for our legitimate interests of studying how users use our Services and to develop and grow our business). Where you choose to include sensitive personal data in user-generated content, the legal basis on which we process this data is consent.

In some circumstances we will anonymise your personal data (including any user-generated content you create and submit to us) so that it can no longer be associated with you. We may use anonymised data for research or statistical purposes, or to help market or develop our Services (including for the purposes of training AI tools utilised by us). We may also display anonymised user-generated content to other users (for example, we may make anonymised answers or comments submitted by you available to other users). Where we anonymise personal data, we may use this information indefinitely without further notice to you.

We may use information about your activity on the Site — such as resources accessed, time spent on topics, and general learning behaviours — to personalise your experience and learning journey. This includes recommending revision materials, adjusting the order or difficulty of content, and highlighting areas of focus based on your progress. We rely on our legitimate interest to improve and tailor our educational services to each user, ensuring the platform remains relevant, engaging and effective.

We ask your consent when you visit the Site for the first time so that we can use your Personal Information to:

  • provide you with information or advertising relating to our Services;
  • show you advertisements that might interest you the most;
  • build a personalised profile of your interests to show you personalised advertisements that are most relevant to you.

Also, if our business, or substantially all of its assets, is sold to a third party, study.and.travel will transfer personal data about its customers to that third party. The legal basis on which we process your data in these circumstances is our legitimate interest to ensure our business can be continued by a purchaser. If you object to our use of personal data in this way, the relevant buyer of our business may not be able to provide products and/or services to you.

What Personal Information we share with other parties

study.and.travel works with a small set of carefully selected service providers with which we share data in order to help us process it as described above. These include, but are not limited to:

  • Schools and teachers: if your access has been provided or arranged by a school, teacher or other educational institution, we may share your information with that institution. This may include your name, email address, subscription status, and limited usage data (such as activity logs or completion rates) where relevant to educational oversight.
  • Stripe — our payment provider, which processes all Payment Information. You can read more about how Stripe uses your Personal Information at stripe.com/privacy.
  • Amazon Web Services (AWS): we host the Site, store data and send transactional email via AWS. AWS acts as a data processor on our behalf.
  • Google (Gemini): AI grading of free-text answers and AI hint generation are performed via Google's Gemini API. The exam question, the student's answer and the relevant mark-scheme rationale are sent for processing. We do not send identifying information such as the student's name or email address.
  • Analytics providers such as Google Analytics, which help us understand how our users use the Site. You can read more about how Google uses your Personal Information at google.com/policies/privacy and opt out of Google Analytics at tools.google.com/dlpage/gaoptout.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

International data transfers

Your data may be processed outside the UK. We may transfer your personal data to service providers that carry out certain functions on our behalf. This may involve transferring personal data to countries which have laws that do not provide the same level of data protection as UK law.

Whenever we transfer your personal data out of the UK to service providers, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is in place:

  • we transfer your personal data to countries that have been deemed by the UK to provide an adequate level of protection for personal data (currently the EEA, Gibraltar, the Republic of Korea, and countries that are deemed to provide an adequate level of protection by the European Commission and EU or EEA institutions); or
  • we use specific standard contractual terms approved for use in the UK that give the transferred personal data the same protection as it has in the UK.

If you would like more information on the specific mechanism used by us when transferring your personal data out of the combined area of the United Kingdom and EEA, please contact us via the form on the Contact page.

How we keep your Personal Information safe

Our security policies, rules and technical measures have been implemented to protect your personal information from unauthorised or improper use and from accidental loss. All our employees and data processors that have access to, and are associated with, the processing of your personal information are legally obliged to respect the confidentiality of your data.

However, no electronic information storage technology can be guaranteed to be completely safe against unauthorised access or abuse.

How we respect your privacy

When you receive an email from us, it may be for an essential purpose, such as notifying you of changes made to your payments or your account with us. At other times, our emails may be non-essential, in which case an "Unsubscribe" link will be available at the bottom of the email. Clicking this link will automatically suppress your email address from our mailing list. We retain your email address after you opt-out in order to honour and respect that request.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may continue to use this information.

You may contact us directly with any concerns about the processing of your information using the form at /contact.

Use of this website by children

The Site is not intended or designed to attract children under the age of 13. We do not knowingly collect Personal Information from or about any person under this age. If you are under 13 and wish to use this website in any way which requires you to submit your Personal Information, please ask a parent or legal guardian to do so on your behalf.

Links to other websites

This Privacy Policy does not cover the links within the Site linking to other websites. Those sites are not governed by this Privacy Policy. If you have questions about how a site uses your information, please check that site's privacy statement. We do not accept any responsibility or liability for the privacy practices of such third-party websites and your use of them is at your own risk.

Do-not-track features

Please note that we do not alter the Site's data-collection and use practices when browsers send a Do Not Track signal.

Your rights

If you are a UK or European resident, you have the right to access the Personal Information we hold about you and to ask that your Personal Information be corrected, updated or deleted. If you would like to exercise this right, please contact us using the form at /contact.

You can help us process your request quickly by providing information that will help us identify records we hold that relate to you — for example, your name, email address, or (where information was captured via cookies) the IP address of the device you used.

We are processing your information in order to fulfil contracts we have with you if you have an active subscription, or otherwise to pursue the Legitimate Interests listed above. Please note that your information may be transferred outside of Europe.

Right to complain

If you believe that study.and.travel is not processing your Personal Information in accordance with the requirements set out herein or with applicable data protection legislation, you may file a complaint with the UK Information Commissioner's Office at gov.uk/data-protection/make-a-complaint.

Updates to this Privacy & Cookies Policy

We reserve the right to revise or amend this Privacy Policy at any time to reflect changes to our business or changes in the law. If we decide to change our Privacy Policy, we will post the changes on this page so that you are always aware of what information we collect, how we use it and in what circumstances we disclose it.

Where these changes are significant, we will endeavour to email all of our registered users to make sure that they are informed of such changes. However, it is your responsibility to check this Privacy Policy before each use of the study.and.travel website.