Privacy Policy
๐ Table of Contents
1Who We Are
This Privacy Policy explains how IELTSTyari.com (“we”, “us”, “our”), operating the website https://ieltstyari.com and the IELTS practice platform (the “Service”), collects, uses, shares, and protects personal information.
For the purposes of certain laws we act as the data controller (EU/UK GDPR), Data Fiduciary (India DPDP Act, 2023), and the business responsible for your personal information (US state laws).
2Scope
This policy applies to people who use the Service, including:
- Registered students who hold a login account.
- Guest users where you provide only your name and email to access practice tests โ a lightweight account is created automatically from your email so your results can be saved and shared with your teacher.
3Information We Collect
Information you give us directly
- Identity and contact details: your full name and email address; and, if you register for an account, your phone number.
- Test responses and results: your answers to reading, listening, writing, and speaking practice tests; your written task submissions; audio recordings or transcripts of speaking practice (where that feature is used); your scores, band estimates, and attempt history.
- Consent records: the fact that you accepted this policy, the date and time, the version of the consent text, and the IP address from which you accepted.
Information we collect automatically
- Technical and usage data: IP address, browser type and user-agent string, and login/logout activity (we keep a login log for account security).
- Cookies and similar technologies: strictly necessary session and authentication cookies so you can stay logged in while taking a test. See Section 9.
4How We Use Your Information
| Purpose | Examples | Legal Basis (EU/UK GDPR) |
|---|---|---|
| Provide the Service | Create your account, save your answers, calculate scores, show your dashboard | Performance of a contract; your consent (guest mode) |
| Evaluate your writing/speaking | Generate automated feedback and band estimates; send a report to your teacher | Your consent; legitimate interests |
| Account security | Detect duplicate logins, keep the login log, prevent misuse | Legitimate interests; legal obligation |
| Communicate with you | Send activation, results, or service emails | Performance of a contract; legitimate interests |
| Process payments | Premium test purchases via PayPal | Performance of a contract |
| Comply with law | Respond to lawful requests; keep required records | Legal obligation |
Under Canada’s PIPEDA we rely on your consent (express or implied) and collect only what is reasonably necessary for these purposes. Under India’s DPDP Act we process your data on the basis of your consent or for the legitimate uses permitted by that Act.
5Automated Evaluation and Artificial Intelligence
When AI evaluation is enabled, the text of your writing submissions (and, where the speaking feature is used, your speaking transcript) is sent to third-party AI providers to generate automated feedback and band estimates:
- Anthropic, PBC (USA) โ used to evaluate writing and produce a feedback report.
- OpenAI (USA) โ used, where enabled, to transcribe speaking recordings.
This involves transferring your submission outside your home country for processing (see Section 8). These providers process the content to return a result to us; the output is then made available to you and/or your teacher.
6Who We Share Your Information With
We share it only as follows:
- Your teacher / instructor: writing and speaking reports, scores, and your name and email are shared with the teacher associated with the Service so they can give feedback.
- AI providers (Anthropic; OpenAI): automated evaluation and transcription.
- PayPal: to take payment for premium tests, where applicable.
- Email delivery and web hosting provider: to run the site and send messages.
- Legal and safety: where required by law, regulation, legal process, or to protect rights, safety, and security.
- Business transfers: if the Service is merged, acquired, or sold, your information may be transferred as part of that transaction, subject to this policy.
Each provider is permitted to use your information only to perform services for us.
7How Long We Keep Your Information
| Data Type | Retention Period |
|---|---|
| Account and test data | For as long as your account is active, then up to 24 months afterward, unless you request deletion sooner. |
| Guest accounts | Retained for up to 12 months of inactivity, after which they may be deleted. |
| Consent and login logs | Kept for up to 24 months as a security and compliance record. |
| Payment records | As required by applicable financial and tax law. |
After these periods we delete or anonymise the information, unless we must keep it longer to meet a legal obligation. You can request deletion at any time (Section 11).
8International Data Transfers
We are based in Canada, and our providers operate in countries including the United States. This means your information may be processed outside the country where you live, including outside the EU/EEA, the UK, Canada, and India.
Where the law requires it, we put appropriate safeguards in place for these transfers โ for example, the European Commission’s Standard Contractual Clauses (and the UK Addendum) for transfers from the EU/UK, and comparable measures for other regions. You can request a copy of the relevant safeguards using the contact details in Section 13.
9Cookies and Similar Technologies
We use only strictly necessary cookies to operate the Service:
- An authentication/session cookie that keeps you logged in while you take a test.
- A short-lived session token used to detect simultaneous logins on the same account.
10How We Protect Your Information
We use reasonable technical and organisational measures to protect your information, including:
- Encrypted connections (HTTPS) for all data in transit.
- Access controls limiting who can see student data.
- Regular review of our security practices.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond appropriately to any incident.
11Your Rights
Depending on where you live, you have some or all of the following rights. We will not discriminate against you for exercising them.
Everyone
- Access the personal information we hold about you and request a copy.
- Ask us to correct information that is inaccurate or incomplete.
- Ask us to delete your information.
- Withdraw consent at any time (this does not affect processing already carried out).
European Union / EEA / United Kingdom (GDPR / UK GDPR)
- Right to restrict or object to processing.
- Right to data portability.
- Right not to be subject to solely automated decisions with legal or similarly significant effects.
- Right to lodge a complaint with your local supervisory authority (e.g. your national Data Protection Authority, or the UK Information Commissioner’s Office).
Canada (PIPEDA)
- Access and correct your personal information.
- Withdraw consent.
- If we cannot resolve your concern, contact the Office of the Privacy Commissioner of Canada (OPC).
United States (California CCPA/CPRA and similar state laws)
- Request to know what personal information we collect, use, and disclose.
- Request deletion and correction.
- Opt out of any “sale” or “sharing” of personal information โ we do not sell or share your personal information as defined under California law.
- You may use an authorised agent to make a request. We will verify your identity before acting.
India (Digital Personal Data Protection Act, 2023)
- Access a summary of your personal data and our processing.
- Request correction and completion.
- Request erasure.
- Nominate another person to exercise your rights in the event of death or incapacity.
- Raise a grievance with our Grievance Officer (Section 13). If unresolved, approach the Data Protection Board of India.
12Children’s Privacy
The Service is used to prepare for IELTS, and some test-takers are minors. We take children’s privacy seriously:
- If you are under the age of 18, you should use the Service only with the involvement and verifiable consent of a parent or legal guardian, who accepts this policy on your behalf. (India’s DPDP Act requires verifiable parental consent for users under 18.)
- We do not knowingly create accounts for children under 13 without verifiable parental consent, and we do not use children’s data for tracking or targeted advertising.
- If you believe a child has provided us information without appropriate consent, contact us and we will delete it.
13How to Contact Us
For any privacy question, to exercise your rights, or to raise a grievance:
We aim to acknowledge requests promptly and respond within the timeframe required by the law that applies to you.
14Changes to This Policy
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you or ask for fresh consent.
Your continued use of the Service after an update means you accept the revised policy.