Last updated: August 2025
Your privacy is important to us. This Privacy Policy describes how PLABOO LTD ("we", "our", or "us") collects, uses, and discloses your personal data when you use our services.
This policy covers our website at plabbuddy.ai and all related services provided by PLABOO LTD.
1.1. PLABOO LTD is the data controller for your personal information. We are registered in England and Wales.
1.2. You can contact us by emailing us at [email protected].
1.3. For data protection queries, please contact us at the same email address.
We collect information to provide and improve our PLAB preparation services:
Account Information: Name, email address, password, PLAB 2 exam date, country, university, WhatsApp number.
Payment Information: Billing details and payment method information (processed securely by Stripe).
Usage Information: How you interact with our website and services, pages visited, features used.
Technical Information: IP address, browser type, device information, collected automatically through analytics tools.
We process your personal data based on legal grounds under UK GDPR to:
Provide Services: Create and manage your account, provide access to PLAB preparation content, process payments and manage subscriptions.
Communication: Send service-related notifications, respond to support requests, send marketing communications (with your consent).
Compliance: Meet legal obligations, enforce our terms and conditions, protect our rights and interests.
Payment Processing: We collect billing information necessary to process subscription payments. Payment details are processed securely by Stripe.
Subscription Management: We track subscription status, billing cycles, and process renewals and cancellations.
Automatic Renewals: Your subscription will automatically renew unless cancelled. We retain payment information to process these renewals as outlined in our Terms and Conditions.
We may share your data with trusted service providers:
Stripe: For secure payment processing. See Stripe's privacy policy for more details.
Google Analytics: For usage analytics (anonymized data only).
Email Services: For transactional and marketing emails.
We do not sell your personal data to third parties. We may disclose data when required by law or to protect our legal rights.
We retain your personal data only for as long as necessary:
Account Data: Until account deletion plus 30 days for technical cleanup.
Payment Records: 7 years for tax and accounting purposes.
Marketing Consent: Until withdrawn. Analytics Data: 26 months (Google Analytics default).
Under UK data protection laws, you have the following rights concerning your personal data:
To exercise these rights, please contact us at [email protected].
Consent: We only send marketing emails with your explicit consent, which you can provide during account registration.
Unsubscribe: You can unsubscribe at any time by clicking unsubscribe links in emails, updating your account preferences, or contacting us.
Service Communications: We may still send important service-related messages even if you opt out of marketing.
We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular security assessments.
Some of our service providers may be located outside the UK/EEA. We ensure appropriate safeguards are in place, including adequacy decisions and standard contractual clauses. However, no internet transmission is completely secure.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will receive 30 days' advance notice via email. Continued use of our services constitutes acceptance of any updates.
If you have concerns about how we handle your data, please contact us first at [email protected].
You also have the right to complain to the Information Commissioner's Office (ICO): Website: ico.org.uk, Phone: 0303 123 1113.
If you have any questions regarding this Privacy Policy, please contact us at [email protected].
