Privacy
Data controller: SayPeter SARL-S, 9, rue Raymond Poincaré, L-2342 Luxembourg. Contact: support@moienlab.lu.
What we process and why
- Purchase and access (performance of the contract): your email address, the amount, the payment date, the Stripe session reference and the end date of your access; your sign-in links and 6-digit codes, stored only as hashes; the access cookie
cp_access. - Launch emails (consent): the address you give us on the launch list, the date of your consent and whether the address can receive mail. You can withdraw consent at any time by writing to us.
- Your practice result by email (your request and our legitimate interest in helping you prepare): when you ask for your free test result by email, we keep your address, your score and the question style where you can gain the most points, and send you your result followed by two practice emails over the next two days. If you open a checkout and leave before paying, we may send you one reminder. Every email has a one-click unsubscribe link; a purchase stops these emails.
- Advert measurement (consent, given with «Accept all» in the cookie banner): the Meta pixel and the Meta Conversions API record page views, the result email request, the opening of a checkout and a purchase, with the Meta cookies
_fbpand_fbc, your IP address, your browser and a hashed copy of your email address. Without that consent none of this is sent. We also count, per day and without any identifier, how many visitors see the banner and what they choose. - Practice progress (legitimate interest in giving you your scores): your answers and scores, linked to an anonymous cookie
ukfs_visitoror to your access. - Security (legitimate interest in protecting the service): counters of sign-in requests linked to a hash of your IP address and email address, and hosting logs.
- Cookie choice: the cookie
ukfs_cookieremembers your choice in the banner, and the cookiecp_leadremembers the address you gave for your result, so the checkout can fill it in for you.
How long we keep it
- Purchase data: for your 12 months of access, then 10 years for accounting obligations.
- Sign-in links: 7 days; sign-in codes: 24 hours; the access cookie: 90 days.
- Launch list: until you withdraw consent.
- Practice result emails: your address and score until you ask us to delete them; an unsubscribe is kept so that we never write to you again.
- Security counters: reset after one hour.
Who receives it
- Stripe: payment processing.
- Amazon Web Services (Amazon SES): sending access and receipt emails.
- Cloudflare: hosting of the site and its database.
- Meta Platforms Ireland: advert measurement, only with your consent.
Where these providers process data outside the UK or the European Economic Area, they rely on the safeguards in their data processing terms.
Your rights
You can ask for access to, correction or deletion of your data, object to its processing or ask for a copy, by writing to support@moienlab.lu. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or to the Luxembourg data protection authority (cnpd.lu).
