1. Information We Collect
We collect information you provide directly to us and information generated through your use of our platform.
Information you provide:
- Account details: name, email address, password (stored as a hashed value)
- Profile information: location, IELTS target score, exam date
- Payment information: processed securely by Stripe (we do not store card numbers)
- Content you submit: practice essays, speaking recordings, blog posts, and reviews
- Communications: messages, support requests, and feedback
Information collected automatically:
- Usage data: pages visited, features used, time spent, test results and scores
- Device information: browser type, operating system, screen resolution
- IP address and approximate geographic location
- Cookies and similar tracking technologies (see Section 4)
2. How We Use Information
We use the information we collect to:
- Provide, maintain, and improve the IELTS VAULT platform
- Process your subscription and manage your account
- Personalise your study plan and AI-generated feedback
- Track your progress and generate performance analytics
- Send transactional emails (receipts, password resets, score reports)
- Send product updates and newsletters (you may opt out at any time)
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
We rely on the following legal bases for processing: contract performance (to deliver the service), legitimate interests (to improve and secure the platform), and consent (for marketing communications).
3. Sharing of Information
We do not sell your personal data. We may share your information with:
- Service providers who help us operate the platform (e.g., Stripe for payments, AWS for hosting, Mailchimp for email)
- Institution administrators if you are enrolled through an institution plan — your progress data may be visible to your teacher or administrator
- Legal authorities when required by applicable law or to protect the rights of IELTS VAULT and its users
- Business transfers in the event of a merger, acquisition, or sale of assets (you will be notified in advance)
All third-party service providers are bound by data processing agreements and may only use your data for the purpose we instruct.
4. Cookies
We use cookies and similar technologies to keep you logged in, remember your preferences, and analyse how our platform is used.
Types of cookies we use:
- Essential cookies: required for the platform to function (session management, authentication)
- Preference cookies: remember your settings such as theme (light/dark)
- Analytics cookies: help us understand how users navigate the site (via Google Analytics)
- Marketing cookies: used only if you consent, to show relevant advertisements
You can control or delete cookies through your browser settings. Disabling essential cookies may affect platform functionality.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the service. If you close your account, we will delete your personal data within 90 days, except where we are required by law to retain it longer (e.g., payment records for tax purposes — typically 7 years).
Anonymised, aggregated performance data (with no personally identifiable information) may be retained indefinitely for product improvement purposes.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Correction: request that inaccurate data be corrected
- Deletion: request that your data be erased ("right to be forgotten")
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interests
- Restriction: request that we restrict processing while a dispute is resolved
- Withdraw consent: for marketing emails at any time via the unsubscribe link
To exercise any of these rights, contact us at privacy@ieltsvaultprep.com. We will respond within 30 days.
7. Security
We implement industry-standard security measures to protect your data, including:
- TLS encryption for all data transmitted between your browser and our servers
- Passwords stored as bcrypt hashes (never in plain text)
- Payment data handled exclusively by Stripe (PCI DSS Level 1 compliant)
- Regular security audits and vulnerability assessments
- Role-based access controls limiting who can access personal data internally
While we strive to protect your information, no method of internet transmission is 100% secure. If you believe your account has been compromised, please contact us immediately.
8. Children's Privacy
IELTS VAULT is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.
Users between the ages of 13 and 17 should use the platform only with parental or guardian consent.
9. Policy Changes
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and/or by displaying a prominent notice on the platform at least 14 days before the changes take effect.
Continued use of the platform after the effective date constitutes acceptance of the updated policy. We encourage you to review this page periodically.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection team:
- Email: privacy@ieltsvaultprep.com
- Phone: +92 308 6886868
- Address: IELTS VAULT, Pakistan
You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.