Privacy Policy

1. Who we are

CITBMockTests.co.uk ("we", "us") is the data controller for the personal data described in this policy. Contact: info@citbmocktests.co.uk. This policy explains how we handle your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What we collect

• Details you give us to see your results: your name, phone number and email address, together with the test you took, your answers, score and pass/fail outcome.
• Reviews: if you leave a review — your name, role (optional), rating and review text.
• Technical data: IP address and browser (user-agent) information recorded with each test submission, used for security and abuse prevention.

We do not knowingly collect data from anyone under 16, and the Site is not directed at children.

3. Why we use your data — and the important bit about sharing

Our mock tests are free because the Site is funded by sharing lead details with selected partners. When you submit your details to view your results, and have agreed at the point of submission, we share your name, phone number, email address, the test you took and your score with carefully selected third-party training providers and career services partners so they can contact you — by phone, email or SMS — about relevant course offers, discounts and career progression opportunities.

Our purposes and lawful bases in full:

• Showing your results and running the service — legitimate interests (operating the revision platform you asked to use).
• Sharing your details with training and careers partners for marketing — your consent, given when you submit the results form. You can withdraw it at any time (section 6).
• Publishing approved reviews — your consent when you submit a review.
• Security, abuse prevention and aggregate statistics (e.g. how often a question is answered correctly) — legitimate interests. Statistics never identify you.

We do not sell data to data brokers, and we do not share your details with anyone other than the categories of partner described above and the service providers who host our infrastructure.

4. Who we share it with

• Training providers and career services partners (UK-based) — as described in section 3, with your consent. Each partner is contractually required to handle your data lawfully and to offer you an opt-out in every communication.
• Service providers — our web hosting and infrastructure suppliers, and our internal notification tooling, acting on our instructions.
• Authorities — where we are legally required to disclose.

Your data is stored and processed in the UK/EEA. If any partner or provider processes data outside the UK, we require appropriate safeguards (such as UK International Data Transfer Agreements or adequacy regulations).

5. How long we keep it

• Test submissions (including your contact details): up to 24 months from your last activity on the Site, then deleted or fully anonymised.
• Reviews: for as long as they are published; you can ask for removal at any time.
• Technical/security logs: up to 12 months.

6. Your rights

Under UK GDPR you have the right to:

• Withdraw consent to partner sharing at any time (this does not affect sharing that has already lawfully taken place);
• Access a copy of the personal data we hold about you;
• Correct inaccurate data, and delete your data;
• Object to processing based on legitimate interests, and to any direct marketing;
• Restrict processing, and receive your data in a portable format.

To exercise any right, email info@citbmocktests.co.uk. We respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

7. Cookies and local storage

• We use Microsoft Clarity to understand how visitors use the site (anonymised usage analytics and session replay). Clarity sets analytics cookies (e.g. _clck, _clsk). See Microsoft's privacy statement for how Microsoft processes this data.
• The site does not set advertising cookies.
• We use minimal browser storage strictly for site function: a session flag so the exit-intent popup only shows once per visit.
• Essential cookies are used only in the site's administration area for staff login.