Legal

Law Assessment Privacy Notice

Last updated 19 October 2026. Read our Terms and Conditions.

This notice explains how London Law Tutor Ltd collects and uses personal data through www.lawassessment.com ("Law Assessment" or "the site") and through our Law Blog at www.uklawtutors.com ("the Law Blog"). Personal data means information that identifies you, or could identify you. In this notice, "we", "us" and "our" mean London Law Tutor Ltd, and "you" and "your" mean the person using the site or the Law Blog. It also explains the cookies and browser storage we use, and the rights you have. Our Cookie Policy lists each cookie in detail. Our Terms and Conditions set out the rules for using the site and buying from us. If anything is unclear, please ask us using the details in section 1.

In brief:

1. Who we are and how to contact us

1.1 Law Assessment is a trading name of London Law Tutor Ltd, a company registered in England and Wales (company number 08253481). Our registered office is Berkeley Square House, Berkeley Square, London W1J 6BD, United Kingdom.

1.2 We are the "controller" of the personal data described in this notice. This means we decide why and how it is used, and we are responsible for it under UK data protection law. That law is mainly the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. For cookies and similar technology, the Privacy and Electronic Communications Regulations 2003 ("PECR") also apply. Both have been updated by the Data (Use and Access) Act 2025. We sell to people who live in the European Economic Area (EEA). Where the EU General Data Protection Regulation ("EU GDPR") applies to how we use their data, people in the EEA have the same rights as those set out in this notice, and section 13 explains how they can complain to their local regulator.

1.3 We are registered with the UK's data protection regulator. Since 30 September 2026 the regulator has been the Information Commission, which replaced the Information Commissioner. It is still known as the ICO, and we use that name in this notice. Our registration number is ZA236376.

1.4 You can contact us about your data, or about anything in this notice:

Email is the quickest way to reach us.

1.5 We have not appointed a data protection officer, because the law does not require us to have one. Our team at enquiries@lawassessment.com deals with all data protection questions.

1.6 Our representative in the EU. Because we offer our services to people in the EEA, the EU GDPR requires us to name a representative in the EU, whom people in the EEA and EU regulators can contact about how we use personal data. We are appointing that representative and will add their name and contact details to this clause. Meanwhile, and afterwards, you can contact us directly using the details in clause 1.4.

1.7 London Law Tutor Ltd also runs a tutoring business, under names including London Law Tutor, Manchester Law Tutors, Birmingham Law Tutors, Nottingham Law Tutors and Law Tutors Online. This notice covers Law Assessment and the Law Blog only. If you book tutoring, the privacy notice on the website you book through applies to that booking.

2. Who this notice covers

2.1 This notice covers everyone whose personal data we handle through Law Assessment or the Law Blog. That includes:

2.2 If you are a tutor, this notice covers your use of Law Assessment. It does not cover your contract for services with us, or what we hold for that contract, such as payments to you. Your contract for services explains that. If you need more information about it, ask us.

3. The personal data we collect

3.1 This section lists the personal data we hold through the site. Section 11 covers the Law Blog.

3.2 Sign-up details for students. If you apply for a student account, you give us:

3.3 Sign-up details for tutors. If you apply for a tutor account, you give us your title, first name, last name, email address and the jurisdiction you tutor in. You also give us:

3.4 Fields marked as required on the sign-up form are needed for us to consider your application. If you do not give them, we cannot open an account for you. You can leave optional fields blank. The sign-up form tells you that this notice explains how we use your details. You do not have to agree to this notice: it gives you information.

3.5 Account and security data. For each account we hold:

3.6 Results and answers. When you take a practice assessment, we store your answers, your score, the time you took and a breakdown of your results by subject. We also store any assessments your tutor sets for you.

3.7 SQE2 written answers and marks. We store your SQE2 written answers. If you send an answer to your tutor for marking, we also store the mark and feedback your tutor gives.

3.8 Tutor pairing. If our admin team pairs you with a tutor (or, if you are a tutor, with a student), we store that pairing.

3.9 Practise together records. Practise together is a live session in the browser between a paired tutor and student. The student's chosen answers, the points at which the tutor reveals the correct answer to both people, any note the tutor adds to a question, and both people's chat messages are shown to both people. They are stored in the session record. When the session ends, the result is saved to the student's account. We do not record audio or video.

3.10 Emails. We keep the emails you send us and our replies. Emails the site sends to our admin team are kept in our enquiries@lawassessment.com mailbox. The site sends these emails automatically:

If you send an order request, our team also emails you a payment link.

3.11 Activity log. Our admin team can see an activity log. It records events such as applications, approvals, when a password is set, registrations of interest, order requests and emails that failed to send. An entry can include your name and email address.

3.12 Register interest. If you register interest in an exam that is coming soon, we receive your email address, the exam you are interested in and the page you used. The form does not ask for anything else.

3.13 Enquiries. If you email us or phone us, we receive your name, your contact details and what you tell us. If you phone us, we may make a short note of the call so that we can follow it up. Clause 3.20 covers live chat.

3.14 Orders and payments. If you buy at checkout, we link your order to your account. If you send an order request, we receive your name, your email address and the product you want. For each order we also hold:

PayPal also shows us the details of each payment in our PayPal business account, which can include the payer's name and email address. We use these only to match payments to orders, make refunds and deal with payment problems.

3.15 Card details. We never see or store your card details or your PayPal sign-in details. PayPal collects and handles them (see clause 6.5).

3.16 Server logs. Our hosting provider keeps standard server logs. They record your IP address, the pages you request and the time, and usually details of your browser.

3.17 Rate-limit records. To protect the site from misuse, we limit how often the sign-in, sign-up, password reset, register interest and checkout forms can be used. For each attempt we store only a one-way hash of your IP address (and, for sign-in, of the email address entered), with the time of the attempt. We delete these records after 15 minutes.

3.18 Free samples. Free samples need no account. We do not receive your free-sample answers or results. They stay in your own browser (see section 10). Our hosting provider's server logs still record your visit, as described in clause 3.16.

3.19 Health and other sensitive information. We do not ask for special category data, such as information about your health, religion or ethnic origin. Please do not include it in free-text boxes or chat messages unless you need to. You may choose to tell us about a health condition or disability, for example to explain the help you need. If you do, we will ask for your explicit consent before we use it, and we will use it only for that purpose. You can withdraw your consent at any time. If you do not give consent, or we do not need the information, we will delete it.

3.20 Live chat. If you use our live chat, provided by Zendesk (see clause 6.10), we receive what you type, such as your name, your email address and your messages, and the address of the page you were on. Zendesk also receives your IP address and details of your browser and device when the chat loads, and sets its own cookies and browser storage (see clause 10.5). We keep a transcript of each conversation in our Zendesk account.

4. Where your data comes from

4.1 Most of the data we hold comes from you, when you fill in a form, use the site or contact us.

4.2 Some comes from other people or sources:

4.3 If someone else, such as a parent or guardian, orders a practice assessment for you, they give us your name and email address so that we can set up your access.

5. How we use your data and our lawful basis

5.1 UK data protection law allows us to use personal data only where we have a "lawful basis". We rely on these:

For health or disability information, we also need your explicit consent (see clause 5.17).

Recognised legitimate interests are part of UK law only. Where the EU GDPR applies to your data, we rely on legitimate interests or legal obligation for those uses instead.

5.2 Considering your application. We use your sign-up details to decide whether to approve your account, and to email you our decision. If you tick the box saying you would like to practise with one of our tutors, we may email you once with information about booking tutoring. Lawful basis: contract (steps you ask us to take before we provide an account).

5.3 Running your account. We use your account data to set your password, let you sign in, give you the assessments you have bought or are entitled to, and show you your results. Lawful basis: contract.

5.4 Checking free access with tutoring. If you say you have booked 50 hours or more of tutoring, we check our tutoring records and give you free access by hand. Free access lasts until 30 days after your tutoring package ends, and for no more than 12 months. It may end early if your tutoring package is cancelled and refunded. Lawful basis: contract (free access is part of your tutoring package) and legitimate interests (making sure free access goes only to students who qualify for it).

5.5 Tutor pairing and working with your tutor. We use your data to pair you with a tutor and to run Practise together sessions. We also use it to let your tutor see your results, set you assessments and mark your SQE2 answers. Lawful basis: contract.

5.6 Tutor applications and tutor accounts. If you are a tutor, we use your sign-up details, including your qualifications and experience, to decide whether to approve your application. We may check your admission against the public register kept by the regulator that admitted you, such as the Solicitors Regulation Authority's register. We show your first name and the initial of your last name to the students you are paired with. We store your marks, feedback, answers and chat messages. Lawful basis: contract (your use of Law Assessment as a tutor, and the steps before it).

5.7 Service emails. We send the emails listed in clause 3.10 so that you know what is happening with your application, account, tutor or purchase. Lawful basis: contract. Copies sent to our admin team rely on legitimate interests (running the site and keeping track of what needs to be done).

5.8 Orders and purchases. We use your order details to take your payment through PayPal, add your access, send your order confirmation, make refunds and keep a record of the sale. For an order request, we also use them to send you a payment link. Lawful basis: contract. Keeping payment records for tax: legal obligation. Keeping the record of what you ticked at checkout, and using payment details to deal with payment disputes and prevent fraud: legitimate interests (being able to show what you agreed to, and protecting our business and our customers from fraud).

5.9 Register interest. We use your email address to tell you when the practice set for that exam is available. This is a marketing email that you have asked for. Lawful basis: consent, which you give when you send the form. Each of these emails tells you how to stop them. You can also withdraw your consent at any time by replying to the email or writing to enquiries@lawassessment.com. We do not use register-interest details for anything else.

5.10 Answering enquiries and live chat. We use what you send us, by email, by phone or through live chat, to reply. Lawful basis: legitimate interests (answering questions people send us), or contract where your question is about an order or your account. Live chat loads, and Zendesk sets its cookies and receives your browser data, only if you agree. For that we rely on your consent, which you can withdraw at any time through "Cookie settings" at the foot of every page (see clause 10.5).

5.11 Support, including "view as". Our admin team can view the site as you see it when signed in ("view as"), to give you support. While doing so, they do not change anything in your account unless you ask them to or it is needed to fix a problem you have reported. Lawful basis: legitimate interests (helping users and fixing problems quickly), or contract where we are helping you use something you have bought.

5.12 Keeping the site secure. We use rate-limit records, server logs, password hashes and the activity log to protect the site and its users from misuse and attacks. Lawful basis: legitimate interests (keeping the site, accounts and data safe). The law also requires us to keep personal data secure.

5.13 Keeping a record of what happens on the site. We keep the activity log so that we can follow applications and orders and spot problems such as emails that failed to send. Lawful basis: legitimate interests (running the site properly).

5.14 Complaints and legal claims. We use relevant data to deal with complaints and to make or defend legal claims. Lawful basis: legitimate interests (handling complaints properly and protecting our legal rights), and legal obligation where the law requires us to handle a complaint.

5.15 Meeting our legal duties. We use and keep data where the law requires, for example tax and accounting records, responding to lawful requests from authorities, and reporting data breaches. Lawful basis: legal obligation.

5.16 Preventing crime and protecting people. We may share relevant data with the police or another public body if they ask for it to carry out their public tasks. We may also share it if we need to, to prevent or detect crime or to protect a child or vulnerable person from harm. Lawful basis: recognised legitimate interests (the public task disclosure, crime and safeguarding conditions).

5.17 Health or disability information you choose to give us. We use it only for the purpose you gave it for, such as understanding the help you need (see clause 3.19). Lawful basis: consent. Because this is health information, the law also requires your explicit consent.

5.18 Running the Law Blog. We use the information described in section 11 to publish the blog, show comments and see how the blog is used. Lawful basis: legitimate interests (publishing articles and running the blog). Where cookies on the blog are not strictly necessary, we rely on your consent (see clause 11.5).

5.19 Loading our fonts. Our pages use fonts from Google Fonts, so your browser sends your IP address and browser details to Google when a page loads (see clause 10.7). Lawful basis: legitimate interests (showing our pages clearly and consistently on every device).

5.20 If we want to use your data for a new purpose that does not fit the reasons above, we will tell you first. Where the law requires, we will also ask for your consent.

5.21 Your right to object. Clauses 5.4, 5.7, 5.8 (the uses based on legitimate interests), 5.10 to 5.14, 5.16, 5.18 and 5.19, and the use of anonymised data in clause 8.3, rely on legitimate interests or recognised legitimate interests. You can object to those uses at any time, for reasons about your own situation. We will then stop, unless we can show compelling reasons to continue that override your interests, rights and freedoms. We may also continue if we need the data to make or defend a legal claim. You can object to direct marketing, including the emails in clause 5.9, at any time and for any reason, and we will stop. To object, contact us using the details in clause 1.4.

6. Who can see your data

6.1 Your paired tutor. Your tutor can see your first name and the initial of your last name. They can also see the exam you are preparing for, when you plan to sit it, what you said you would like help with, your results and answers, the SQE2 answers you send for marking and your Practise together records. We do not show them your full last name or your email address, on the site or in the emails we send them. Your tutor can also set you assessments.

6.2 Your paired students. If you are a tutor, the students you are paired with see your title, your first name and the initial of your last name, and the qualifications, subjects and exams you gave us. In Practise together, they also see when you reveal the correct answer, your notes on each question and your chat messages.

6.3 Our admin team. Our admin team can see all the data on the site, the emails sent to enquiries@lawassessment.com and live chat transcripts. They need this to approve accounts, pair tutors and students, give access, deal with orders and give support. This includes using "view as" (see clause 5.11).

6.4 Our hosting and email provider. A UK web hosting provider hosts the site and its database and sends our emails. It acts as our processor: it handles this data on our instructions, to provide its service to us. It also keeps the server logs described in clause 3.16, which it may use to keep its own systems secure.

6.5 PayPal. We take payments through PayPal. For customers in the UK and the EU, this is PayPal (Europe) S.à r.l. et Cie, S.C.A., of Luxembourg. When you pay, PayPal collects your payment details, such as your card details or PayPal account details, directly from you. PayPal is a separate controller for the data it collects: it decides how it uses that data, for example to process your payment, check for fraud and meet its own legal duties, under its own privacy statement. We give PayPal the details it needs to take your payment, such as the product and the amount, and, for an order request, the name and email address our team enters to create your payment link. PayPal may use automated checks to decide whether to accept a payment. Those are PayPal's decisions, and its privacy statement explains them and your rights.

6.6 Professional advisers. If we use outside accountants or lawyers, we may share data with them where they need it to advise us. They must keep it confidential.

6.7 Authorities. We share data with authorities such as HM Revenue and Customs, the police, the courts or the ICO when the law requires us to, or as described in clause 5.16.

6.8 YouTube. If you play the video on our SQE1 or SQE2 page, YouTube receives information from your browser (see clause 10.6).

6.9 Google. If you visit the Law Blog, Google receives information from your browser, because it provides Blogger (see section 11).

6.10 Zendesk. Our live chat is provided by Zendesk, Inc., which acts as our processor. If you agree to live chat, Zendesk receives the information in clause 3.20 and stores chat transcripts for us in our Zendesk account. It may use this data only to provide its service to us, under a data processing agreement with us.

6.11 Google Fonts. When a page loads, your browser fetches our fonts from Google Fonts, so Google receives your IP address and browser details (see clause 10.7).

6.12 We do not sell your personal data. We do not share it with anyone for their own marketing or advertising.

7. Sending data outside the UK

7.1 The site and its database are hosted by a UK web hosting provider, which also sends our emails.

7.2 Some of our tutors and members of our admin team may be outside the UK, in Hong Kong, Singapore, the United States, Australia or the United Arab Emirates. When they use the site, they can see personal data from where they are:

7.3 Our tutors are self-employed, so they are separate from London Law Tutor Ltd. When a tutor outside the UK sees your data, the law treats this as a "restricted transfer". The same applies to any member of our admin team outside the UK who is a contractor rather than our employee. When one of our employees sees your data from abroad, it is not a restricted transfer, because the data stays within our company. We still apply the same security and confidentiality rules to them.

7.4 The UK has made regulations recognising that some countries protect personal data well enough ("adequacy regulations"). Where these apply, we rely on them. At the date of this notice there are no such regulations for Hong Kong, Singapore, Australia or the United Arab Emirates. The UK regulations for the United States cover only organisations certified under the UK Extension to the EU-US Data Privacy Framework. They do not cover individual tutors.

7.5 For restricted transfers, each tutor and admin contractor outside the UK must sign a written agreement with us before they can see your data. It is in a form issued by the ICO, called the International Data Transfer Agreement. It requires them to protect your data. Before we rely on it, we check, acting reasonably and proportionately, that the protection your data gets after the transfer is not materially lower than in the UK, and we keep a record of that check.

7.6 We also limit what tutors can see (see clause 6.1).

7.7 You can ask us for a copy of these safeguards by emailing enquiries@lawassessment.com. We may remove commercially sensitive details and other people's personal data from the copy.

7.8 PayPal, YouTube and Google (for the Law Blog and Google Fonts) may handle data outside the UK. They explain where they handle data, and how they protect it, in their own privacy notices.

7.9 Zendesk may process live chat data in the United States. That transfer is protected either by the UK Extension to the EU-US Data Privacy Framework or by the UK International Data Transfer Addendum or International Data Transfer Agreement terms in Zendesk's data processing agreement with us. Where the EU GDPR applies, the EU-US Data Privacy Framework or the EU standard contractual clauses in that agreement protect the transfer.

7.10 If you live in the EEA. The European Commission has decided that the UK protects personal data adequately. It renewed this decision in December 2025. Where the EU GDPR applies to your data and a tutor or admin contractor in a country without an EU adequacy decision can see it (see clause 7.2), the agreement they sign with us also includes the standard contractual clauses approved by the European Commission. You can ask for a copy as described in clause 7.7.

8. How long we keep your data

8.1 We keep personal data only for as long as we need it:

Some deletions happen automatically, such as rate-limit records. We carry out the others by reviewing our records at least every 3 months.

8.2 We may keep some data for longer if we need it to deal with a complaint or a legal claim, or if the law requires it. We keep it only for as long as that need lasts.

8.3 When we anonymise data, it no longer identifies you, so it is no longer personal data. We may combine anonymised answers and results from many users to check and improve our questions and to show average scores. Lawful basis for anonymising the data: legitimate interests (improving our assessments).

9. How we keep your data secure

9.1 We use technical and practical measures to protect your data. They include:

9.2 We cannot promise that our security will never fail. If a personal data breach happens and the law requires us to report it, we will tell the ICO without undue delay. Where possible, we will do so within 72 hours of becoming aware of it. If the breach is likely to put you at high risk, we will also tell you without undue delay.

9.3 You can help keep your account safe. Choose a strong password that you do not use anywhere else. Sign out on shared devices. Tell us straight away if you think someone else has used your account.

10. Cookies and browser storage

10.1 Cookies are small files that a website stores in your browser. Browser storage (such as "localStorage") works in a similar way. Under PECR, we may store or read information on your device only if you agree, unless an exception applies. The main exception is where it is strictly necessary to give you a service you have asked for. Our Cookie Policy lists every cookie and item of storage, with how long each lasts.

10.2 The la_sid cookie:

10.3 Browser storage on the live site:

These items stay on your device and are never sent to us. They stay until you clear this site's data in your browser (apart from la-portal-return). We do not need your consent for them, because their only purpose is to make the feature you are using work the way you would expect.

The site's code also contains la-portal-v2, which our team uses only when the site's files are opened offline for a demonstration. It is never set when you visit the live site.

10.4 We do not use analytics, advertising or tracking cookies on Law Assessment. When you first visit, a banner asks whether you want to allow live chat. You can choose "Allow live chat" or "Necessary only". We store your choice in a cookie called la_consent, which lasts 6 months. It is strictly necessary, because without it we could not respect your choice, so we do not need your consent for it. After 6 months we ask you again. You can change your choice at any time through "Cookie settings" at the foot of every page.

10.5 Live chat. Our live chat is the Zendesk Web Widget, provided by Zendesk, Inc. (see clause 6.10). It is not loaded unless you agree, either by choosing "Allow live chat" on the banner, or by pressing the "Chat with us" button and then "Start chat" on the short notice that appears. Pressing "Start chat" records your consent in the la_consent cookie. Once the chat loads, from static.zdassets.com, Zendesk receives your IP address, details of your browser, the address of the page you are on and anything you type in the chat. Zendesk sets its own cookies and browser storage (such as __zlcmid and items beginning ZD-) to keep the conversation going as you move between pages. If you withdraw your consent through "Cookie settings", the chat will not load on later pages. Cookies Zendesk has already set stay until they expire or you clear them in your browser.

10.6 YouTube video. Our SQE1 and SQE2 pages include a video from London Law Tutor's YouTube channel. Until you press play, the page shows our own placeholder image, served from our own server, and nothing is sent to YouTube. Pressing play is your choice. A notice under each video tells you what happens when you do. When you press play, the video loads from YouTube's privacy-enhanced mode (youtube-nocookie.com). YouTube (owned by Google) then receives information such as your IP address and details of your browser and device, and may store cookies or similar data on your device. Google decides how it uses that information, under its own privacy policy. If you do not want this, do not play the video.

10.7 Google Fonts. Every page loads fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). This means Google receives your IP address and details of your browser when a page loads. Google Fonts does not set cookies. We rely on legitimate interests for this (clause 5.19). Google's privacy policy explains how it uses this information.

10.8 PayPal at checkout. The checkout page loads PayPal's payment buttons from PayPal's servers. This means PayPal receives your IP address and details of your browser and device when the checkout page loads, and when you pay. PayPal may set its own cookies and similar storage to take your payment, keep it secure and prevent fraud. We treat these as strictly necessary for the payment you have asked to make, so we do not ask for your consent for them. PayPal decides how it uses this information, under its own privacy and cookie statements (see clause 6.5). PayPal does not load on any other page.

10.9 Controlling cookies and storage. You can see, delete and block cookies and site data in your browser settings. If you block the la_sid cookie, you will not be able to stay signed in. If you clear this site's data, your free-sample history and SQE2 drafts will be deleted, and we will ask for your cookie choice again.

11. Our Law Blog and other websites

11.1 We run a Law Blog at https://www.uklawtutors.com. It is hosted on Blogger, a Google service. This notice applies to the Law Blog.

11.2 Our home page shows the latest Law Blog posts. Our own server fetches these posts, so your browser does not contact the blog or Google when you look at our home page. We show each post's title, date and a short extract, with no images from the blog. Your browser contacts the blog only if you click through to it.

11.3 We run the Law Blog, so we are responsible for how it uses your data. When you visit the blog, Google receives information from your browser, such as your IP address. Blogger may store cookies on your device. Google also uses some of this information for its own purposes, under its own privacy policy. Blogger gives us general statistics about visits to the blog, which do not tell us who you are. We do not show advertising on the blog.

11.4 Where comments are open on a post, commenting needs a Google account. If you comment, your name or profile and your comment are shown publicly. We and other readers can see them. We may remove comments that are unlawful, offensive or off-topic. You can delete your own comment, or ask us to delete it.

11.5 Blogger sets its own cookies on the blog, not on Law Assessment. Google decides which cookies Blogger uses and explains them in its own cookie and privacy policies. We do not add analytics or advertising tools of our own to the blog. If we ever do, we will ask for your consent first.

11.6 Law Assessment also links to our sister tutoring websites (londonlawtutor.com, newyorklawtutor.com, hongkonglawtutor.com, singaporelawtutor.com, sydneylawtutor.com and dubailawtutor.com). It also links to our pages on LinkedIn, Instagram, TikTok and Facebook. These are plain links. We do not send those sites any information about you. If you click a link, you go to that site and its own privacy notice applies. When you view a page, the only content Law Assessment loads from another website is our fonts from Google Fonts (clause 10.7), and, on the checkout page only, PayPal's payment buttons (clause 10.8). Live chat (clause 10.5) and the YouTube video (clause 10.6) load from other websites only if you choose to use them.

12. Your rights

12.1 You have the following rights over your personal data. Some apply only in certain situations.

12.2 To use any of these rights, email enquiries@lawassessment.com, call +44 7549 525230 or write to us at the address in clause 1.4. You do not have to use any particular words.

12.3 We may ask you to prove your identity before we act, to protect your data. If we need proof of identity, or need you to tell us more about what you want, the time to reply starts once we have it.

12.4 We will reply within one month. If your request is complex, or you send us several requests, we may take up to two further months. If we do, we will tell you within the first month and explain why.

12.5 Using your rights is usually free. If a request is clearly unfounded or excessive, we may charge a reasonable fee or refuse it. If we refuse, we will explain why. We will also tell you that you can complain to us, complain to the ICO, or ask a court to enforce your rights.

12.6 If your request involves other people's data, for example chat messages in a Practise together session, we may need to remove their details from what we send you.

12.7 You can ask us to correct your details or to close your account at any time by contacting us. At the moment you cannot do this yourself on the site. Clause 8.1 explains what happens to your data when you close your account.

13. How to complain

13.1 If you are unhappy with how we have handled your personal data, please tell us first. You can complain by email to enquiries@lawassessment.com, by phone on +44 7549 525230, or by post to the address in clause 1.4. You do not need to use a form.

13.2 We will acknowledge your complaint within 2 working days. We will look into it, keep you updated and aim to give you a full answer within 14 days. If we need longer, we will tell you why and when you can expect an answer.

13.3 You also have the right to complain to the ICO, the UK's data protection regulator:

13.4 The ICO will usually expect you to have raised your concern with us first.

13.5 If you live in the EEA, you can also complain to the data protection regulator in the country where you live or work, or where you think the problem happened. The European Data Protection Board lists these regulators on its website, edpb.europa.eu. If you live elsewhere outside the UK, you may be able to complain to the data protection regulator where you live.

14. Children and age

14.1 You must be 16 or over to apply for an account or to buy an assessment. Students confirm that they are 16 or over when they tick the box on the sign-up form. Our Terms and Conditions, which you agree to when you order, also require buyers to be 16 or over.

14.2 If you are 16 or 17, a parent or guardian must agree to any purchase. We may ask you to confirm this by email, and if we do, we keep that email with your order. We do not ask for your parent or guardian's details unless we need to contact them.

14.3 Free samples need no account, and their results stay in your own browser. If you are under 16, please ask a parent or guardian before you register interest or use live chat, as both rely on consent.

14.4 If we learn that someone under 16 has an account or has sent us personal data, we will close the account. We will delete the data unless the law requires us to keep some of it. If you are a parent or guardian and think this applies to your child, please contact us.

15. Automatic scoring

15.1 SQE1 practice assessments are marked automatically. The site compares your answers with the correct answers and works out your score, your time and a breakdown by subject.

15.2 Your score is for your own practice and comparison only. It does not decide anything about you. It does not affect your real exam, your access to the site, the price you pay or any of your rights. The SRA sets its own pass mark for each sitting of the real exam.

15.3 So the automatic scoring is not the kind of automated decision that data protection law restricts. SQE2 answers are graded by you or marked by your tutor, not by the site.

15.4 If you think a score is wrong, please tell us and we will check it.

16. Marketing

16.1 The only marketing emails we send are the ones you ask for when you register interest in an exam. They tell you when the practice set for that exam is available, and nothing else (see clause 5.9).

16.2 Our other emails, about your application, account, tutor, purchase or enquiry, are service emails, not marketing.

16.3 You can ask us to stop marketing emails at any time by replying to the email or writing to enquiries@lawassessment.com.

16.4 If we decide to send other marketing emails in future, we will ask for your consent first. Every marketing email will tell you how to unsubscribe. We will not pass your details to anyone else for their marketing.

17. Changes to this notice

17.1 We may update this notice, for example when we change how we take payments, or if the law changes.

17.2 When we update it, we will publish the new version on the site and change the "Last updated" date at the top. If a change significantly affects how we use your data, we will tell account holders by email before it takes effect.