Privacy Policy

1. Overview & Data Controller

Sigma Actuarial Ltd ("we", "us", or "our") is committed to safeguarding the privacy of our candidates and corporate clients. This Privacy Policy sets out how we collect, store, process, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We only collect information necessary to deliver our educational services and administer user accounts:

• Account Data: Your name, email address, and encrypted authentication tokens.
• Academic Progress Data: Question attempts, drill accuracy scores, flashcard review intervals, and module completion timestamps.
• Payment & Billing Data: Payment transaction IDs and subscription statuses. We do not store or process raw credit card numbers; all payments are processed directly by Stripe under PCI-DSS Level 1 certification.
• Invoicing Information: Employer company name, registered business address, and VAT registration number when requesting corporate study allowance invoices.

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual Necessity: To create your account, deliver educational content, track your revision progress, and manage your subscription.
• Legitimate Interests: To optimize platform performance, troubleshoot computational models, and prevent fraudulent credential sharing.
• Legal Compliance: To maintain financial records and tax compliance for corporate billing.

4. Third-Party Data Processors

We partner with industry-leading infrastructure providers to ensure high security and reliability:

• Supabase: Encrypted user authentication and database storage (hosted in EU/UK regions).
• Stripe: Secure payment processing, subscription management, and corporate invoicing.
• Netlify: Static edge delivery and encrypted form processing.

5. Cookies & Local Storage

We use essential local storage (Local Storage / Session Storage) strictly for maintaining active authentication sessions, caching your study progress for fast offline loading, and remembering active flashcard filter preferences. We do not use third-party advertising or cross-site tracking cookies.

6. Your Data Rights

Under the UK GDPR, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and associated study data ("right to be forgotten").
• Export your study performance and question progress data.

To exercise any of these rights, please submit a request through our Contact Page. Requests are processed within 30 days free of charge.

7. Data Retention

We retain your study progress data for as long as your account remains active so you can resume preparation across exam sittings. Inactive accounts with no active subscription may be scheduled for anonymization after 24 months of dormancy.

8. Updates to this Policy

We may update this Privacy Policy periodically to reflect changes in regulatory standards or platform functionality. The latest revision date will always be visible at the top of this document.