Privacy Policy

Last updated: October 2026

This website (ogqbank.com) and the OGQBank learning platform are operated by MasterQ Ltd, a company registered in England and Wales, trading as OGQBank(“we”, “us” or “our”). We take your privacy seriously. This policy explains what personal information we collect, how we use it, who we share it with and the rights you have.

Who we are

We are the data controller for the purposes of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). Our registered office is The Exchange, 3 Centenary Square, Birmingham, B1 2DR, United Kingdom. You can contact us at ogqbank@gmail.com.

Information we collect

When you create an account, buy a subscription, use the platform or contact us, we may collect:

• your name and email address;
• your account password (stored only in hashed form);
• details of the products you buy and your subscription history;
• payment information, which is processed by our payment provider; we do not store full card details;
• your learning activity, such as questions answered, scores, flagged questions and timed practice sessions;
• messages you send us, including support requests and feedback;
• technical information collected automatically, such as your IP address, browser type, device information and pages visited.

How we use your information

• To provide the service: creating and managing your account, giving you access to the products you buy, saving your progress and showing your statistics. The legal basis is performance of our contract with you.
• To take payments and keep financial records. The legal bases are performance of a contract and compliance with our legal obligations.
• To communicate with you: account emails, password resets, receipts and service updates. The legal basis is performance of a contract.
• To improve the platform: understanding how features and questions are used, fixing problems and keeping the service secure. The legal basis is our legitimate interests.
• Marketing: we may tell you about new products or features. You can opt out at any time by emailing us or using the unsubscribe link in our emails.

Cookies and analytics

We use cookies and similar technologies that are needed to keep you signed in. We may also use analytics tools to understand how visitors use our website so that we can improve it. You can control cookies through your browser settings.

Who we share information with

We share personal information only with service providers who help us run the platform. They act on our instructions under written contracts. These include:

• cloud hosting and storage providers (for example Amazon Web Services, with data held in the UK or EU);
• our payment processor (Stripe), which handles card payments securely;
• email delivery providers for account and transactional emails;
• analytics providers for aggregated website usage statistics.

We may also disclose information if required by law, to protect our rights, or to a buyer if our business is sold, in which case your information would remain protected by this policy.

International transfers

Some of our providers may process data outside the UK. When this happens we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses.

How long we keep your information

We keep your account information for as long as your account is active and for a reasonable period afterwards so that you can return to your progress. We keep financial records for as long as the law requires, usually six years. You can ask us to delete your account at any time.

Keeping your information secure

We use technical and organisational measures to protect your data. These include encryption in transit and at rest, access controls and hashed passwords. No online service can be completely secure. Please keep your password confidential and contact us straight away if you think your account has been compromised.

Your rights

Under UK data protection law you have the right to:

• access the personal information we hold about you;
• ask us to correct inaccurate information;
• ask us to delete your information;
• object to, or ask us to restrict, how we use your information;
• receive your information in a portable format;
• withdraw consent where we rely on it, including for marketing.

To exercise any of these rights, email ogqbank@gmail.com. We will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to resolve your concern first.

Personal data breaches

If a personal data breach occurs we will contain and assess it promptly. We will notify affected users without undue delay where there is a risk to their rights. Where required, we will report it to the ICO within 72 hours of becoming aware of it.

Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, and significant changes will be communicated by email.