Effective Date: 01 January 2021
This Privacy Policy explains how Exam Nibbles collects, uses, shares, and protects personal information when you visit our websites, create an account, contact support, or purchase and download our digital study materials (the “Services”).
By using the Services, you agree to this Policy and our Terms of Use. If you do not agree, please do not use the Services.
1) What We Collect
We collect the following categories of information, depending on how you interact with us:
- Account & Profile – name, email, password, phone, country/region, organization (optional).
- Orders & Billing – shipping/billing address, tax details, the products purchased, payment status, invoice and receipt data. We do not store full credit/debit card numbers; payments are processed by third-party providers (e.g., Stripe/Razorpay/PayPal or bank transfer partners).
- Communications – emails, chat/WhatsApp messages, support tickets, call notes, and related metadata.
- Technical Data – IP address, device and browser type, operating system, language, referral URLs, pages viewed, time on page, error logs, and similar diagnostic data.
- Cookies & Similar Technologies – identifiers that help us remember your preferences, maintain sessions, analyze traffic, prevent fraud/abuse, and measure campaigns.
- Marketing Preferences – your choices for receiving product updates, promotions, exam-day reminders, and similar messages.
- User Submissions – reviews, survey responses, or other content you choose to provide.
We collect data directly from you (forms, checkout, support), automatically via the website/app, and from service providers (payments, analytics, email delivery).
2) How We Use Your Information
We use information to:
- Create and manage your account, authenticate logins, and provide purchased downloads.
- Process orders, payments, refunds, tax documents, and receipts.
- Provide support, resolve issues, and respond to requests.
- Operate, secure, and improve the Services (including analytics, debugging, and fraud prevention).
- Send transactional emails (order confirmations, license keys, download links) and service notices.
- Send optional marketing communications, exam-day reminders, promotions, and product announcements (you can opt out at any time).
- Comply with law, enforce terms, and protect our rights, users, and the public.
3) Sharing & Disclosure
We do not sell or rent your personal information. We share it only with:
- Payment Processors & Banks – to process payments and refunds.
- Cloud & IT Providers – hosting, storage, CDN, caching, and security services.
- Analytics & Marketing Tools – to understand usage and measure campaigns (see Cookies).
- Customer Support & Communications – email service providers, help desk systems, and messaging tools (including WhatsApp where applicable).
- Professional Advisors & Authorities – auditors, accountants, lawyers, and law enforcement when legally required.
These recipients act as processors under our instructions or as independent controllers where appropriate. We require processors to protect your data under contract.
4) Data Retention
We keep personal data only as long as necessary for the purposes described in this Policy, including to satisfy legal, tax, accounting, or reporting requirements, resolve disputes, and enforce agreements. Typical examples:
- Account data: while your account is active and for a reasonable period thereafter.
- Order & invoicing records: up to 1–3 years.
- Support tickets/communications: typically, 03–06 months.
- Analytics data: per tool default or aggregated/anonymous after a defined period.
5) Your Rights & Choices
Your available rights depend on your location and local laws. Subject to verification and legal exceptions, you may request to:
- Access a copy of your personal data.
- Correct inaccurate or incomplete data.
- Delete data (erasure) when no longer needed or where consent is withdrawn.
- Object to or restrict certain processing, including direct marketing.
- Portability – receive data in a structured, commonly used format where applicable.
- Withdraw consent where we rely on consent.
6) Security
We use administrative, technical, and physical safeguards designed to protect personal data (e.g., TLS encryption in transit, access controls, backups, and logging). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
7) Cookies & Similar Technologies
We use:
- Strictly Necessary Cookies – required for site functionality, logins, and checkout.
- Performance/Analytics – traffic and usage insights to improve the Services.
- Functional – remember preferences like language and login.
- Advertising/Marketing – measure campaigns and control message frequency (only where applicable and subject to consent where required).
You can adjust your browser settings to block or delete cookies. Some features may not function without certain cookies. If we implement a cookie banner, you will be able to manage preferences there.