Privacy policy
Draft for review. This document must be checked before sales begin.
1. Who we are
This Site is run by TestReady Group, based in New Zealand. We follow the Personal Data Protection Act 2010 (Act 709) of Malaysia, as amended in 2024.
Data Protection Officer: our Data Protection Officer is the person responsible for how we handle personal data under the Personal Data Protection Act 2010. Contact them by email at [email protected].
2. What we collect and why
| Data | Purpose |
|---|---|
| Email address, payment reference, the Pack bought, amount paid | To complete your purchase and send your access link |
| Transaction records | Accounting and tax records |
| Emails you send us | To answer questions and handle complaints and refunds |
| Free study guide: your email address, the test you chose, the date, and whether you ticked the optional tips box (with the exact wording you agreed to) | To send the study guide you asked for, to keep a record of your consent, and, only if you ticked the box, to send you occasional study tips and offers |
| Pages visited, device and browser type, approximate location and how you found the Site (unless you turn analytics off) | To understand how the Site is used and improve it (Google Analytics) |
| IP address and technical request data | To keep the Site secure and working |
By buying a Pack you consent to us using your data for these purposes. We do not see your card details: the payment provider handles them. We do not sell your personal data and we do not send marketing emails unless you have agreed to receive them.
Free study guide. When you ask for our free study guide, you consent to us using your email address to send you that guide. The box for further study tips and offers is optional, is never ticked for you, and you get the guide either way. Every guide email identifies us and has an unsubscribe link; one click removes your address. You can also email our Data Protection Officer to be removed.
3. Who we share data with
- Stripe (payments),
- Cloudflare, Inc. (hosting and security),
- Resend, Inc. (sending emails),
- Google LLC (Google Analytics, unless you turn it off).
These providers may store or process data outside Malaysia, including in the United States and New Zealand. Where we transfer personal data out of Malaysia, we take steps to make sure it receives a standard of protection comparable to the Personal Data Protection Act 2010, for example through the providers' contractual data protection terms.
4. How long we keep data
Transaction records are kept for as long as tax and accounting rules require. Data needed to provide access and handle complaints is kept until it is no longer needed for that purpose. Emails are kept until the matter is closed. Study-guide signups are kept for 12 months, unless you ticked the tips box, in which case until you unsubscribe. After you unsubscribe we keep only a scrambled (hashed) form of your email address, so that we never email you tips again.
5. Your rights
You can ask to access the personal data we hold about you, ask us to correct it, and withdraw your consent to our use of it (withdrawing consent may mean we can no longer provide your access link). Email our Data Protection Officer at [email protected]. Under the Personal Data Protection Act 2010 you can also ask us to stop processing your data for direct marketing and to have it transferred to another organisation, and you can complain to the Personal Data Protection Commissioner (pdp.gov.my).
6. Security and data breaches
We use reasonable security arrangements to protect personal data. If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commissioner as the Personal Data Protection Act 2010 requires.
7. Cookies, analytics and browser storage
Apart from Google Analytics, the Site uses only essential browser storage (localStorage), for example to remember your cookie choice, your confirmation before purchase, your practice scores on this device and, if you ask for the free study guide, your email address, so we do not ask you for it again. This stays in your browser; clearing your browser data removes it.
We do not currently use analytics or advertising tools. If that changes, we will ask for your permission before anything is loaded.
8. Changes
We will post any changes to this policy on this page. This policy applies from 11 October 2026.