Privacy Notice

Who we are

LNATBoost is an online LNAT preparation service. For data protection purposes, LNATBoost is the controller of the personal data described in this Privacy Notice unless a separate written agreement says otherwise.

Questions about this notice or your personal data can be sent to LNATBoost@gmail.com.

Data we collect

• Account data, including name, email address, password hash, verification status, role, account creation date, and account update date.
• Practice answers, attempts, scores, timings, progress status, bookmarks, wrong-answer review items, and test-date goals.
• Payment and access data, including selected plan, provider, order status, currency, amount, entitlement dates, provider reference, and payment callback records.
• Device-control cookies and security data, including session cookies, device tokens, hashed device identifiers, hashed user-agent data, hashed IP-prefix data, login state, and active-learning session timestamps.
• Support and operational messages you send to us, including email address and the content of your request.

Why we use data

• To create and secure accounts, verify emails, reset passwords, and prevent account sharing or misuse.
• To provide practice exercises, mock tests, scoring, progress tracking, review features, and access controls.
• To process payments, recover failed or pending payment confirmations, provide paid access, handle refunds, and keep financial records.
• To maintain, debug, protect, and improve LNATBoost, including detecting technical problems and abuse.
• To comply with legal, tax, accounting, consumer protection, payment, and security obligations.

Legal bases

Where UK GDPR or similar laws apply, we rely on contract performance to provide your account and paid access, legitimate interests to secure and improve the service, legal obligation for records we must keep, and consent where the law requires consent for a specific activity.

Cookies and device controls

LNATBoost uses essential cookies for login sessions and device control. The session cookie keeps you signed in for a limited period. The device cookie helps enforce the two-device access rule, recover a known device, and protect paid accounts from sharing. These cookies are necessary for the service and are not used for advertising.

Who receives data

• Payment providers such as PayPal, Alipay, WeChat Pay, and their payment processors receive payment information needed to process transactions and prevent fraud.
• Email and hosting providers may process data so we can send verification/reset emails and operate the website.
• Professional advisers, regulators, courts, payment networks, or law enforcement may receive data where required or reasonably necessary.

International data transfers

Some of our payment providers, including Alipay and WeChat Pay, operate outside the UK and the European Economic Area. Where your personal data is transferred outside the UK or EEA, we rely on the provider's own safeguards and, where required, an appropriate transfer mechanism such as UK-approved standard contractual clauses, the UK Addendum, or a relevant adequacy decision. You can ask us for more information about these safeguards using the contact email above.

Retention

We keep account, access, and practice records while your account is active and for a reasonable period afterwards so we can provide the service, resolve disputes, and maintain security records. Payment and accounting records may be retained for longer where tax, accounting, payment, or legal rules require it.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also have the right to complain to a data protection regulator. To make a request, contact us using the email above. We may need to verify your identity before acting on a request.

Young users

LNATBoost is intended for law applicants and preparation students. If you are under 16, use LNATBoost only with permission from a parent, guardian, school, or tutor. We do not knowingly target children under 13.

Changes to this notice

We may update this Privacy Notice to reflect changes in the service, our providers, or the law. The current version is always shown on this page with the 'last updated' date above, and we will make significant changes clear before they take effect where the law requires it. Continuing to use LNATBoost after an update means the current notice applies to your use.