GDPR

Welcome to GamaTrain ("we," "us," or "our"). We are committed to protecting your personal data and respecting your privacy. This GDPR Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (the "Service"). GamaTrain operates as a repository of sample exam questions and scientific tests for various levels of education. We act as a Data Controller for your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We only process your data when we have a valid legal basis under UK GDPR. We rely on the following legal bases:

• Contractual Necessity: To provide our services, such as creating an account, managing your profile, and allowing you to access or upload exams.
• Legitimate Interests: To improve our platform, ensure security, prevent fraud, and provide relevant educational content. Where we rely on legitimate interests, we ensure that your rights and freedoms are not overridden and you may object at any time.
• Legal Obligation: To comply with tax, anti-fraud, or legal requests from authorities.
• Consent: For sending marketing emails or using non-essential cookies where required by law.

We collect the following categories of personal data:

• Identity Data: Full name, username, and profile image.
• Contact Data: Email address, and phone number (if provided during registration).
• Professional Data: If you register as a teacher or educational institution, we may collect qualifications and institutional details to verify your account and services.
• Technical Data: IP address, browser type, login times, and usage statistics collected via cookies and analytics tools.
• Content Data: Exams, questions, and other educational content you upload or interact with on the platform.

We use your data to:

• Register and manage your account.
• Provide access to the exam repository and learning features.
• Enable teachers to publish content and receive attribution.
• Respond to customer support requests.
• Maintain platform security and prevent misuse.
• Send important service-related updates and notifications.

We use cookies and similar technologies to improve user experience and analyze platform usage. You can manage or disable cookies in your browser settings. For more details, please refer to our Cookie Policy.

If you are located in the United Kingdom or the European Economic Area, you have the following rights under data protection law:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data, subject to legal retention requirements.
• Right to Restrict Processing: Request limitation of how your data is used.
• Right to Data Portability: Receive your data in a structured format.
• Right to Object: Object to processing based on legitimate interests, including marketing.

To exercise your rights, contact us at: privacy@gamatrain.com

We retain personal data only for as long as necessary for the purposes for which it was collected.

• Account Data: Retained while your account is active and for a reasonable period after deletion for legal compliance.
• Usage & Technical Data: Typically retained for a limited period (e.g. 30–90 days) unless required for security or legal purposes.
• Content Data: Retained until deleted by the user or account closure, unless required for legal or platform integrity reasons.

We implement appropriate technical and organisational measures to protect your personal data. No method of transmission or storage is completely secure; however, we work to ensure your data is protected against unauthorised access, loss, or misuse.

GamaTrain is hosted in the United Kingdom. If you access the Service from outside the UK, your data may be transferred to and processed in the UK. The UK is recognised by the European Commission as providing an adequate level of data protection for personal data transferred from the European Economic Area (EEA). Where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) for transfers outside the UK/EEA.

GamaTrain is an EdTech platform used by students. We require parental consent where required by applicable law (for example, under 13 in the UK, or under 16 in certain EU countries). If we become aware that we have collected personal data from a child without valid consent, we will delete it promptly.

Our platform may contain links to third-party websites. We are not responsible for the privacy practices or content of those external sites.

We may update this policy from time to time. Significant changes will be communicated via email or a notice on our website.

If you have any questions about this policy or wish to exercise your rights, please contact us:

GamaTrain Data Protection Team
Email: privacy@gamatrain.com
Address: Office 19394, 182-184 High Street North, London, England, E6 2JA