1. Who we are
Prepmeets is operated by WandaPrep Inc., the controller of the personal data described here. For anything about your data, email support@prepmeets.com or open a case from Help & support.
2. What we collect
Everyone with an account
- Name, email address, password (stored only as a secure hash) and, if you choose, a profile photo.
- If you sign in with Google: your Google account’s name, email address and identifier.
- Sign-in records — device, browser, IP address and time — used to keep your account secure.
- Your settings, including email preferences, language and theme.
- Messages you send us through support, and our replies.
Learners
- The projects you buy, start and save, and your progress through them.
- The work and evidence you submit, review requests and the ratings you give.
- Purchase records: what you bought, the amount, and the payment status and reference.
Professionals
- Your public profile: name, role, biography, photo and portfolio.
- Identity verification: the identity document you upload and the details on it, and our decision.
- The projects you create, their review history, and your sales and earnings.
- Payout details, which are held by our payment provider rather than by us.
We do not see or store your full card number. Card details go directly to our payment provider at checkout.
3. How we use it, and why we are allowed to
| Purpose | Legal basis |
|---|---|
| Creating and running your account, giving you access to projects, saving your progress | Contract |
| Taking payments, issuing refunds and paying professionals | Contract; legal obligation (tax and accounting records) |
| Verifying professionals’ identity before they can publish or be paid | Legitimate interests (a trustworthy marketplace); legal obligation where payment rules require it |
| Account security: sign-in codes, new-device alerts, fraud and abuse prevention | Legitimate interests |
| Service emails about your account, purchases, reviews and payouts | Contract |
| Marketing emails about new projects and features | Consent — withdraw it at any time in your settings or from any such email |
| Protecting project content, including marking it with your email address | Legitimate interests (protecting professionals’ work) |
| Reviewing projects, handling reports and support cases | Contract; legitimate interests |
| Monitoring errors and performance so the site keeps working | Legitimate interests |
4. What other people can see
- A professional’s public profile and published projects are visible to everyone.
- Ratings you give show on the project with your first name and last initial.
- When you ask for a review of your submission, the project’s professional and our reviewers can see that submission.
- Professionals see sales of their projects but not learners’ payment details.
6. International transfers
Some of our providers process data outside the UK and the European Economic Area. Where they do, we rely on an adequacy decision or on standard contractual clauses approved by the UK and EU authorities, so your data keeps the same level of protection.
7. How long we keep it
- Your account: for as long as it is open. When you close it, your access, bookmarks and progress are removed straight away and the rest of your account data is deleted 90 days later.
- Purchases and payouts: kept for as long as tax and accounting law requires, even after an account is closed.
- Submissions and ratings: kept after an account is closed, with your identity removed from them.
- Identity documents: kept while you are a professional on Prepmeets and for as long as needed to meet our legal obligations afterwards, then deleted.
- Support cases and sign-in records: kept for as long as needed to resolve the case or keep accounts secure.
8. Your rights
You have the right to:
- get a copy of the personal data we hold about you;
- have inaccurate data corrected — most of it you can edit yourself in your settings;
- have your data deleted — you can close your account in your settings;
- object to, or ask us to restrict, how we use it;
- receive the data you gave us in a portable format;
- withdraw consent to marketing at any time.
To use any of these rights, email support@prepmeets.com. We will reply within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority, though we would like the chance to put it right first.
10. Security
Data is encrypted in transit, passwords are stored only as secure hashes, sensitive fields are encrypted at rest, and identity documents can only be opened by their owner and authorised staff. Staff access is limited to the people who need it and is logged. No system is perfectly secure; if a breach puts your data at risk, we will tell you and the regulator as the law requires.
11. Children
Prepmeets is for adults. We do not knowingly collect data from anyone under 18, and will delete it if we find we have.
12. Changes to this policy
We will update this policy when the way we use data changes, and change the date at the top. If a change is significant, we will email you before it takes effect.