Privacy Policy

Last updated: 20 September 2026 · Effective: 20 September 2026

This Privacy Policy explains how CSExams.com collects, uses, stores, discloses, protects, and otherwise processes personal information when you visit or use our website, create an account, purchase or access our products, use our practice examinations, contact us, or otherwise interact with our Services.

Please read this Privacy Policy together with our Terms and Conditions.

1. Who We Are

CSExams.com ("CSExams", "we", "us", or "our") is operated by:

Legal Entity: SEKURENET LIMITED
Trading Name: CSExams.com
Registered/Principal Address: International House, 61 Mosley Street, Manchester, M2 3HZ
Website: https://www.csexams.com/
General Support Email: info@csexams.com
Privacy Email: info@csexams.com

For applicable data-protection laws, CSExams may act as the entity responsible for determining why and how personal data is processed in connection with the Services.

Where a particular third-party service provider processes information on our behalf, that provider may process information according to our instructions and its own applicable terms and privacy requirements.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed in connection with:

• the CSExams website;
• user accounts;
• free and paid practice examinations;
• courses and learning materials;
• question banks, flashcards, and related educational resources;
• orders and payments;
• customer support;
• newsletters and promotional communications;
• reviews, feedback, comments, and other submissions;
• security, fraud prevention, and technical operations; and
• other services or features that link to or reference this Privacy Policy.

This Privacy Policy does not automatically apply to third-party websites, applications, or services linked from CSExams.

3. Personal Information We Collect

The information we collect depends on how you interact with CSExams.

3.1 Account and identity information

When you create or maintain an account, we may collect:

• name;
• username;
• email address;
• password or password-related information;
• account preferences;
• profile information you choose to provide;
• account status; and
• authentication or security information.

We do not needlessly collect information that is not reasonably required for the relevant service.

3.2 Contact and support information

When you contact us, we may collect:

• your name;
• email address;
• phone number, where provided;
• order or account information;
• the contents of your message;
• attachments or information you voluntarily submit; and
• records of communications with our support team.

If you request a free resource download without an account, we store your email address, the resource requested, and whether you opted in to marketing messages. We use the address to send your download link and, only if you opted in, occasional study tips and product news.

3.3 Purchase and transaction information

When you purchase a product or service, we may process:

• order number;
• products purchased;
• purchase date and time;
• price, currency, applicable taxes, discounts, and fees;
• payment status;
• transaction or payment-provider reference numbers;
• billing information where required;
• refund or chargeback information; and
• information needed to fulfil or support the transaction.

Payment processors may collect payment-card or other financial credentials directly.

Unless specifically stated otherwise, CSExams does not ordinarily receive or store your complete payment-card number or card security code when a third-party payment processor handles the transaction.

3.4 Learning and examination activity

When you use our practice examinations or learning services, we may process:

• examinations or question sets attempted;
• answers submitted;
• scores and results;
• progress information;
• completion information;
• attempt history;
• time or session information;
• product access information; and
• other information necessary to provide the learning service.

This information may be associated with your account so that we can provide your results, track progress, maintain access, detect abuse, and improve the Services.

3.5 Technical and device information

When you access the website, we may automatically receive certain technical information, which may include:

• IP address;
• browser type and version;
• device type;
• operating system;
• language and locale;
• approximate location derived from IP address where technically available;
• referring or exit pages;
• pages or resources requested;
• date and time of access;
• session information;
• error and diagnostic information; and
• security and access logs.

We use this information primarily for operating, securing, troubleshooting, and improving the Services.

3.6 Cookies and similar technologies

We may use cookies, local storage, session identifiers, pixels, and similar technologies.

These technologies may be used for:

• authentication and account sessions;
• maintaining shopping-cart or checkout functionality;
• remembering preferences;
• security and fraud prevention;
• website performance;
• analytics;
• understanding how users interact with our website; and
• advertising or remarketing, but only where such technologies are actually enabled and used.

The exact technologies used on the website may change as we add or remove services.

3.7 User-submitted content

Where available, users may submit:

• reviews;
• ratings;
• comments;
• feedback;
• questions;
• support requests;
• testimonials; or
• other content.

Information contained within such submissions may be processed as described in this Privacy Policy.

Do not submit sensitive, confidential, or third-party personal information unless you are authorized to do so and it is reasonably necessary.

4. How We Collect Personal Information

We may collect information:

1. directly from you when you register, purchase, contact us, or submit information;
2. automatically when you use the website;
3. from payment and transaction providers;
4. from authentication or account-management providers;
5. from service providers supporting our website and business operations;
6. from security, fraud-prevention, or abuse-detection services; and
7. from publicly available information where reasonably necessary for legitimate business or legal purposes.

5. Why We Use Personal Information

We may process personal information for the following purposes.

5.1 Providing the Services

We use information to:

• create and manage accounts;
• authenticate users;
• provide access to purchased products;
• deliver practice examinations and learning materials;
• record examination attempts and scores;
• maintain user progress;
• process orders;
• provide customer support; and
• communicate about the Services.

5.2 Payments and transactions

We use information to:

• process purchases;
• confirm payment;
• provide receipts or transaction information;
• process refunds;
• investigate payment disputes;
• detect fraudulent transactions; and
• maintain required accounting and transaction records.

5.3 Security and abuse prevention

We may process information to:

• protect accounts and systems;
• detect unauthorized access;
• prevent account sharing;
• detect fraud and abuse;
• protect paid content from unauthorized copying or redistribution;
• investigate security incidents; and
• maintain the integrity of examinations and the platform.

5.4 Website operation and improvement

We may use technical and usage information to:

• troubleshoot errors;
• monitor performance;
• understand how features are used;
• improve usability;
• develop new features;
• maintain reliability; and
• analyze aggregated or de-identified usage patterns.

5.5 Communications

We may use your contact information for:

• account-related messages;
• order confirmations;
• purchase receipts;
• password or authentication messages;
• service notifications;
• security notifications;
• customer-support communications;
• important changes to the Services or policies; and
• promotional communications where legally permitted and where the applicable requirements for such communications have been satisfied.

5.6 Legal and regulatory purposes

We may process information where necessary to:

• comply with applicable law;
• respond to lawful requests;
• meet accounting, tax, or regulatory requirements;
• investigate suspected unlawful activity;
• protect our rights or the rights of others; or
• establish, exercise, or defend legal claims.

6. Legal Basis / Permitted Grounds for Processing

The legal basis or permitted ground for processing depends on the applicable law and the nature of the processing.

Depending on the circumstances, information may be processed because:

• processing is necessary to provide a product or service you requested;
• processing is necessary to perform a transaction or fulfil an obligation;
• you have provided consent where consent is required;
• processing is necessary for security, fraud prevention, or protection of the Services;
• processing is necessary to comply with a legal obligation; or
• another lawful basis or permitted ground applies under the law governing the relevant processing.

Where consent is the applicable basis, we will seek consent in an appropriate manner and provide a practical method for withdrawing it, subject to lawful limitations.

Withdrawal of consent does not necessarily invalidate processing that was lawfully carried out before withdrawal.

7. Marketing Communications

We distinguish between transactional/service communications and marketing communications.

Transactional and service communications

These may include:

• order confirmations;
• receipts;
• product-access information;
• account and password messages;
• security alerts;
• important service notices;
• support responses; and
• legally required notices.

These communications may continue even after you opt out of promotional communications where they are necessary for the operation of your account or Services.

Marketing communications

Where we send promotional emails or similar marketing communications, we will provide an appropriate opt-out or unsubscribe mechanism where required.

You may opt out of promotional emails by using the unsubscribe mechanism in the communication or by contacting: info@csexams.com

Opting out of marketing communications does not necessarily stop transactional or service-related communications.

8. Cookies and Similar Technologies

Cookies and similar technologies may be used to provide essential website functionality and, where enabled, analytics or other optional functionality.

8.1 Essential technologies

These may be necessary for:

• login;
• authentication;
• security;
• shopping cart;
• checkout;
• remembering essential preferences; and
• other core website functionality.

These technologies generally cannot be disabled without affecting important parts of the Services.

8.2 Analytics

Where analytics tools are enabled, they may collect information such as:

• pages visited;
• approximate session information;
• device/browser information;
• referral source;
• interaction events; and
• technical information.

Analytics services will be configured according to the tools and settings actually deployed on the website.

8.3 Advertising and remarketing

CSExams may use advertising or remarketing technologies only where such technologies are actually deployed.

We will not describe a particular advertising network, pixel, or tracking technology as being used unless it is configured on the relevant website or service.

8.4 Managing cookies

Depending on your browser and device, you may be able to control cookies through browser settings.

Disabling certain cookies may prevent portions of the website from functioning properly.

Where the website provides a dedicated consent or preference mechanism, you may use that mechanism to manage optional technologies.

9. Third-Party Service Providers

We may use third-party providers to operate CSExams.

These may include providers for:

• website hosting and infrastructure;
• content delivery;
• payment processing;
• email delivery;
• authentication;
• customer support;
• analytics;
• security and fraud prevention;
• database and storage services;
• error monitoring;
• backups;
• communications; and
• other technology services necessary to operate the platform.

We provide third-party providers with only the information reasonably necessary for the service they provide, subject to the applicable legal and contractual requirements.

10. Payment Information

Payments may be processed through third-party payment providers.

Depending on the payment method, payment providers may collect information such as:

• card or bank details;
• payment credentials;
• billing information;
• transaction information;
• fraud-prevention information; and
• authentication information required by the payment provider.

CSExams may receive transaction information such as:

• transaction ID;
• payment status;
• amount;
• currency;
• payment method type;
• order reference;
• refund status; and
• limited payment-related information.

The payment provider's own privacy policy also applies to information that it collects directly.

11. When We Share Personal Information

We may disclose personal information where reasonably necessary to:

11.1 Service providers

Share data with providers that support hosting, payments, email, analytics, security, customer service, and other business functions.

11.2 Legal and regulatory authorities

Disclose information when required by applicable law, court order, governmental request, regulatory requirement, or other legally valid process.

11.3 Security and fraud prevention

Disclose relevant information where reasonably necessary to investigate fraud, unauthorized transactions, abuse, security incidents, or unlawful activity.

11.4 Professional advisers

Share information with lawyers, accountants, auditors, insurers, or other professional advisers where reasonably necessary.

11.5 Business transfers

If CSExams is involved in a merger, acquisition, restructuring, financing, sale of assets, or transfer of business, personal information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

11.6 At your direction

We may disclose information where you specifically request or authorize us to do so.

We do not sell personal information as a standalone commercial product.

12. International Data Transfers

CSExams and its service providers may process personal information in countries other than the country where you live.

This may occur because:

• our hosting or infrastructure is located in another country;
• a payment processor operates internationally;
• an email or support provider operates internationally;
• analytics or security services process information internationally; or
• another technology provider supporting the Services operates from another jurisdiction.

Where applicable, we will use measures required by the law governing the transfer and will select service providers with appropriate contractual, technical, and organizational safeguards.

The actual locations of processing may change when we change service providers or infrastructure.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to legal, regulatory, accounting, security, dispute-resolution, and legitimate business requirements.

Retention periods vary depending on the type of information.

Account information

Account information may generally be retained while your account remains active and for a reasonable period after closure where necessary for security, legal, fraud-prevention, dispute-resolution, or record-keeping purposes.

Transaction and accounting information

Transaction information may be retained for the period required by applicable tax, accounting, financial, consumer-protection, or other legal requirements.

Learning and examination information

Examination results, progress, attempt history, and related information may be retained while the associated account or product remains active and thereafter for a reasonable period where needed for legitimate operational, security, support, or legal purposes.

Customer-support information

Support communications may be retained for as long as reasonably necessary to address the issue and maintain appropriate business, security, or legal records.

Marketing information

Marketing preferences and relevant contact information may be retained until you unsubscribe, withdraw consent where consent is the applicable basis, or the information is otherwise no longer required.

Security logs

Security and access logs may be retained for a limited period appropriate to security monitoring, incident investigation, fraud prevention, and system administration.

We may retain information for longer where required by law or reasonably necessary to establish, exercise, or defend legal claims.

When information is no longer required, we may delete it, anonymize it, or securely dispose of it.

14. Data Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

Depending on the relevant system and risk, measures may include:

• encrypted transmission using TLS/HTTPS;
• access controls and authentication;
• password protection and secure credential handling;
• monitoring and logging;
• backups and recovery procedures;
• security updates and vulnerability management;
• administrative access controls; and
• procedures for investigating security incidents.

No internet service or storage system can be guaranteed to be completely secure.

You are also responsible for maintaining the confidentiality of your account credentials and using appropriate security practices.

15. Security Incidents and Data Breaches

If we become aware of a personal-data breach or other security incident that triggers notification obligations under applicable law, we will take reasonable steps to investigate, contain, mitigate, and respond to the incident and make required notifications within the applicable legal timeframes.

Where notification to affected users or authorities is required, we will provide information required by applicable law.

16. Your Privacy and Data Rights

Depending on your location and the laws applicable to the processing, you may have rights relating to your personal information.

These may include, where applicable:

• the right to obtain information about processing;
• the right to access personal information;
• the right to correct inaccurate information;
• the right to request deletion or erasure where legally available;
• the right to withdraw consent where consent is the applicable basis;
• the right to object to certain processing;
• the right to restrict certain processing;
• the right to data portability where applicable;
• the right to lodge a complaint or grievance; and
• the right to nominate or exercise other rights provided by applicable law.

Not every right applies in every jurisdiction or to every type of processing.

16.1 Rights under GDPR or other international laws

Where applicable data-protection law such as the GDPR applies to you, additional rights may be available.

These may include rights relating to access, rectification, erasure, restriction, portability, objection, consent withdrawal, and complaint to a supervisory authority.

We will assess requests under the law that applies to the relevant processing.

17. How to Exercise Your Rights

You may submit a privacy request by contacting: info@csexams.com

Please provide enough information for us to identify your account and understand your request.

For example, a request may include:

• full name;
• account email address;
• nature of the request;
• relevant order number, where applicable; and
• any other information reasonably necessary to verify the request.

We may request reasonable information to verify the identity of the person making the request before providing account or personal information.

We aim to respond within the time required by applicable law.

Where a request cannot be fulfilled, we will provide an explanation where legally required.

18. Account Deletion

Where the functionality is available, you may request deletion of your CSExams account.

You may also request deletion by contacting: info@csexams.com

Deleting your account may remove or disable access to:

• account information;
• purchased products;
• learning history;
• examination results;
• progress information; and
• other account-linked features.

Deletion of an account does not necessarily require us to immediately delete information that we are required or permitted to retain under applicable law.

Examples may include transaction records, accounting records, security records, fraud-prevention records, and information necessary to establish or defend legal claims.

19. Children and Minors

CSExams is primarily designed for users preparing for professional certification examinations and is not intended to be a service directed at children.

Unless expressly stated otherwise, users under the age of 18 should use the Services only with the involvement and permission of a parent or legal guardian where required by applicable law.

Where applicable child-data protections apply, we will comply with the requirements imposed by the relevant law regarding processing of children's personal data.

We do not knowingly request or encourage children to provide unnecessary personal information.

If you believe a child has provided personal information in circumstances where collection was not permitted, contact us at: info@csexams.com

We will review the matter and take appropriate action as required by applicable law.

20. Sensitive Personal Information

Please do not voluntarily provide sensitive personal information through account profiles, support messages, comments, reviews, or other website features unless it is reasonably necessary and requested by us.

This may include information such as:

• passwords or authentication secrets;
• financial credentials;
• government identification numbers;
• health information;
• biometric information;
• highly sensitive personal details; or
• confidential information belonging to another person.

CSExams will process such information only where reasonably necessary and permitted by applicable law.

21. Third-Party Websites

CSExams may link to third-party websites or services.

We are not responsible for the privacy practices, security, content, or policies of third parties that we do not control.

When you leave the CSExams website or interact directly with a third-party service, you should review that party's privacy notice.

22. Social Media and Embedded Content

CSExams may, where enabled, include social-media links, videos, widgets, or other third-party embedded content.

Such content may cause the third party to receive technical information about your device or interaction according to the third party's own privacy practices.

We will not represent a specific social-media plugin or embedded service as active unless it is actually deployed on the relevant CSExams page.

23. Automated Decision-Making and Profiling

CSExams does not currently intend to make decisions producing legal or similarly significant effects on users solely through automated processing.

If this changes and applicable law requires additional disclosure, we will update this Privacy Policy accordingly.

We may use automated technical mechanisms for purposes such as:

• fraud detection;
• spam prevention;
• security monitoring;
• abuse detection;
• system performance; and
• personalized or recommended content where applicable.

These technical mechanisms do not necessarily constitute legally significant automated decision-making.

24. Aggregated and De-Identified Information

We may create aggregated, statistical, or de-identified information from information collected through the Services.

Where permitted by applicable law, such information may be used for:

• analytics;
• service improvement;
• security;
• research;
• reporting;
• business planning; and
• other legitimate purposes.

We will take reasonable measures so that de-identified information is not used to identify an individual.

25. Accuracy of Information

We rely on users to provide accurate account and contact information.

You should update your information when it changes so that:

• your account remains accurate;
• we can contact you about important matters;
• orders can be supported correctly; and
• privacy requests can be processed effectively.

26. Privacy of Communications With Support

Communications sent to customer support may be stored and reviewed by authorized personnel or service providers as reasonably necessary to:

• respond to your request;
• investigate complaints;
• resolve disputes;
• detect fraud or abuse;
• improve support;
• maintain security; and
• meet legal obligations.

Do not include passwords, payment-card security codes, or other unnecessary confidential credentials in support communications.

27. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to the Services;
• changes to data-processing practices;
• changes to technology;
• changes to applicable law;
• changes to service providers; or
• improvements to transparency.

The "Last Updated" date at the top of this Privacy Policy will indicate the latest version.

Where required by law, we will provide additional notice or obtain consent before implementing material changes that require it.

We encourage you to review this page periodically.

28. Relationship With the Terms and Conditions

This Privacy Policy explains how personal information is processed.

Our Terms and Conditions govern your contractual use of the website and Services, including accounts, purchases, digital products, refunds, intellectual property, prohibited use, and liability.

Where applicable, both documents should be read together.

29. Governing Law and Applicable Rights

This Privacy Policy will be interpreted in accordance with applicable law.

Where CSExams is subject to United Kingdom law, applicable United Kingdom privacy, data-protection, consumer-protection, information-technology, and other relevant laws will apply.

Where mandatory privacy or consumer rights in another jurisdiction apply to you, those rights will not be excluded merely because this Privacy Policy contains a general governing-law provision.

Nothing in this Privacy Policy is intended to remove or restrict a right that cannot lawfully be removed or restricted.

30. Contact Us

For general questions about this Privacy Policy or our processing of personal information:

CSExams.com
Legal Entity: SEKURENET LIMITED
Registered/Principal Address: International House, 61 Mosley Street, Manchester, M2 3HZ
Website: https://www.csexams.com/
General Support: info@csexams.com
Privacy: info@csexams.com

31. Effective Date

This Privacy Policy is effective from: 20 September 2026

Previous versions of the Privacy Policy are superseded by this version from the effective date, subject to any rights or obligations that must continue to apply under applicable law.