Privacy Notice

SPaG Quest ("we", "us") is a trading name of PRAS Consulting Limited, registered in England and Wales, company number 16446688, registered office 30 Ross Road, Wallington, SM6 8QR, United Kingdom. We are the data controller for personal data collected through the service.

Data-protection questions: support@prasconsulting.co.uk.

SPaG Quest is for KS2 pupils (typically 8–11). Accounts must be created and managed by a parent or legal guardian, who consents to us processing the child's data. Consent is captured at sign-up and can be withdrawn any time by deleting the account from the dashboard or emailing support@prasconsulting.co.uk.

• Account data (first name, last name, email, hashed password, year group) — to run your account and personalise practice.
• Practice data (attempts, answers, scores) — for your history and analytics.
• Support messages — to help when you contact us.
• Technical data (device, browser, IP address, usage logs) — for security, fraud prevention and reliability.

Contract (providing the service), legitimate interests (securing, improving and supporting it), consent (optional cookies and marketing) and legal obligation (required records).

• Hosting and infrastructure — our cloud provider, to run the service.
• Payments — Stripe (Stripe Payments Europe, Ltd.) — payments, subscriptions, invoicing and tax; an independent controller for the sale itself.
• AI provider — anonymised prompts for question generation; no account identifiers are sent.
• Authorities — where required by law.

Some providers are outside the UK/EEA. Transfers rely on appropriate safeguards such as the UK IDTA, EU Standard Contractual Clauses, or an adequacy decision.

We keep account and practice data while your account is active. After deletion we erase or anonymise personal data within 30 days, except records we must keep for legal, tax or fraud-prevention reasons.

Where UK/EU GDPR applies you may request access, rectification, erasure, restriction, portability, object, withdraw consent, and complain to a supervisory authority (in the UK, the ICO). We aim to respond within one month.

To exercise these rights, email support@prasconsulting.co.uk.

We use appropriate technical and organisational measures, including encryption in transit, access controls and role-based database permissions.

We use essential cookies (session, authentication) only. If we add analytics or marketing cookies, we will ask for your consent.