Privacy Policy
1. Who we are
The LexThink service is provided by LexThink Ltd, a company registered in England & Wales (company number 15049862), registered office 16 Basford Road, Manchester, M16 0GE. LexThink Ltd is the data controller for the personal data described here.
This policy explains what personal data we collect when you use the LexThink website and SQE1 question bank ("the Service"), why we use it, who we share it with, how long we keep it, and the rights you have.
Contact: for any privacy question or to exercise your rights, email privacy@lexthink.co.uk or write to us at the registered office above. We are not required to appoint a Data Protection Officer; the contact above reaches the person responsible for data protection.
2. The personal data we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Your name and email address | You, when you sign up |
| Purchase | The plan you bought, amount paid, access window, payment reference | You + our payment provider (we never see or store your card details) |
| Usage | Questions attempted, answers, progress and readiness signals, flags, problem reports | Generated as you use the bank |
| Free taster | Your email address and marketing-consent choice | You, if you opt in |
| Booking | Name, email and time of any 1:1 session with Zafar | You + our booking provider |
| Technical | IP address, device/browser info, security logs | Collected automatically to keep the Service secure |
We do not collect special-category data, and the Service is not directed at anyone under 18.
3. How we use your data, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Run your account and give you access to the bank and any 1:1 you bought | Contract |
| Take payment and keep your order record (incl. the durable-medium receipt) | Contract + Legal obligation |
| Send the free-taster checklist and occasional study tips / new-question alerts | Consent (withdraw any time) |
| Keep the Service secure and prevent abuse | Legitimate interests |
| Improve the bank and the Service | Legitimate interests |
| Meet our tax and accounting duties | Legal obligation |
Where we rely on consent (marketing email), you can withdraw it at any time via the unsubscribe link in any such email or by emailing us — this won't affect anything we did before you withdrew.
4. Marketing
We only send marketing email to people who opt in (for example through the free taster). Every marketing email has a one-click unsubscribe. We don't sell or rent your data to anyone for their own marketing.
5. Who we share your data with
We use a small number of trusted suppliers ("processors") to run the Service. They act on our instructions and are bound by contract to protect your data:
| Provider | What they do |
|---|---|
| Clerk | Sign-in and account authentication |
| Stripe | Payment processing (they handle your card data directly; we don't store it) |
| Neon | Our database (hosted in the EU / London region) |
| Resend | Sending transactional and (consented) marketing email |
| Mux | Hosting and streaming the post-purchase welcome video |
| Vercel | Hosting the website and application |
| Calendly | Scheduling 1:1 sessions, if your plan includes one |
We may also disclose data if required by law, to enforce our terms, or to protect our rights, users or the public.
6. International transfers
Some providers are based outside the UK (mainly the United States). Where your data is transferred outside the UK, we rely on appropriate safeguards — the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or a country the UK has deemed adequate. Ask us for detail using the contact above.
7. How long we keep your data
- Account and usage data: while your access is active, plus up to 12 months, after which we delete or anonymise it.
- Order and payment records: 6 years, to meet UK tax and accounting requirements.
- Marketing data: until you unsubscribe or ask us to delete it.
If you ask us to delete your data sooner, we will, unless we must keep some for a legal reason (e.g. the financial records above).
8. How we protect your data
We use encryption in transit (HTTPS/TLS), access controls, signed/expiring links for protected media, and rate-limiting and monitoring against abuse. No system is perfectly secure, but we take reasonable steps appropriate to the data we hold.
9. Cookies & analytics
We use only strictly necessary cookies — the ones our sign-in provider sets so you can log in and stay logged in. We do not use advertising or tracking cookies. We measure aggregate site usage with Vercel Web Analytics, a cookie-free service that does not identify individual visitors, so no cookie-consent banner is required. If this changes, we'll update this policy and ask for your consent first where the law requires.
10. Your rights
Under UK data protection law you can ask to: access your data; correct it; delete it; restrict or object to certain processing; port it to another provider; and withdraw consent where we rely on it. Email privacy@lexthink.co.uk — we'll respond within one month, normally free of charge.
11. Children
The Service is for adults (18+) preparing for the SQE. We don't knowingly collect data from anyone under 18.
12. Changes to this policy
We may update this policy. We'll change the "last updated" date above and, for significant changes, tell you by email or in the app.
13. Complaints
If you're unhappy with how we've handled your data, please contact us first so we can put it right. You also have the right to complain to the UK regulator, the Information Commissioner's Office (ICO) — ico.org.uk, helpline 0303 123 1113.