← Back to home

Privacy Policy

Last updated: May 2026

Who we are

999ready (999ready.co.uk) is an independent practice platform for UK 999 call handler applicants. We are the data controller for the personal information described in this policy. You can contact us at any time via our contact page.

What data we collect and why

Account registration

When you create an account we collect your email address. We use this to log you in, send your purchase confirmation, and provide customer support. The legal basis is performance of a contract (your access to the service).

Test results

When you complete a test we record your score and session data so your results appear in your dashboard. This data is linked to your account and is not shared with employers, assessment providers, or any third party. Legal basis: performance of a contract.

Contact form

If you use our contact form we collect your name, email address, and message. We use this solely to respond to your enquiry. Legal basis: legitimate interests (responding to customer communications).

Payment

Payments are processed by Stripe. We do not see or store your card number, expiry date, or CVV. Stripe handles all payment data under their own privacy policy. We receive confirmation that a payment was made and your email address to activate your access. Legal basis: performance of a contract.

AI Interview Coach

When you use our AI Interview Coach, we store the questions and answers you submit and the feedback generated for you, so you can review your practice. To produce this feedback, your answers are processed by Anthropic (the provider of the Claude AI model), a processor based in the United States — so this involves an international transfer of your submitted text, carried out under Standard Contractual Clauses. Please avoid including sensitive personal details in your practice answers. Legal basis: performance of a contract.

Activity data (logged-in users)

While you are signed in, we record a "last seen" time, the last page you viewed, and a page-by-page activity timeline of your visit. We use this for customer support and to understand how the platform is used so we can improve it. Legal basis: legitimate interests (support and product analytics).

Discount / lead capture

If you enter your email address to claim a discount, we store it so we can send you that discount and, where applicable, related offers. This is held in our demo_leads table. Legal basis: legitimate interests (and consent where required for marketing).

Analytics and advertising

We use Google Analytics 4 and Google Ads to understand how visitors find and use the site, and to measure the effectiveness of our advertising. These services set cookies in your browser and may transfer data to the United States under Google's Standard Contractual Clauses. We also use Vercel Analytics (cookieless, no personal data). Legal basis: legitimate interests. You can opt out — see our Cookie Policy.

How long we keep your data

Account data (email address and test results) is kept for as long as your account is active. If you request deletion we will remove your personal data within 30 days. Contact form messages are kept for up to 12 months, then deleted. Payment records are retained for 7 years to comply with UK financial regulations.

Who we share your data with

We only share data with the services necessary to run the platform:

  • ▸Supabase — database and authentication provider (EU data centres).
  • ▸Stripe — payment processing (UK/EU and US, Standard Contractual Clauses apply).
  • ▸Vercel — website hosting and edge network (US, Standard Contractual Clauses apply).
  • ▸Google — analytics and advertising (US, Standard Contractual Clauses apply).
  • ▸Anthropic — AI provider (Claude) that processes AI Interview Coach answers to generate feedback (US, Standard Contractual Clauses apply).
  • ▸Email provider (Resend) — used to send transactional emails such as purchase confirmations.

We do not sell your personal data. We do not share your data with emergency services or any employer.

Your rights

Under UK GDPR you have the right to:

  • ▸Access — request a copy of the personal data we hold about you.
  • ▸Rectification — ask us to correct inaccurate data.
  • ▸Erasure — ask us to delete your personal data ("right to be forgotten").
  • ▸Restriction — ask us to limit how we process your data.
  • ▸Portability — receive your data in a machine-readable format.
  • ▸Objection — object to processing based on legitimate interests.

To exercise any of these rights, please contact us. We will respond within 30 days. If you are not satisfied with our response you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Cookies

For full details of the cookies we use and how to manage them, please see our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will always reflect the most recent version. Significant changes will be notified to registered users by email.

Contact

For any privacy-related questions please get in touch.