How YanBo Practice Portal uses information

1. Who we are

YanBo Practice Portal is provided by YANBO LEARNING LTD, company number 17335228, a private company limited by shares and registered in England and Wales. YANBO LEARNING LTD is the data controller for personal information processed through YanBo Practice Portal.

YANBO LEARNING LTD is registered with the Information Commissioner’s Office as a data controller. ICO registration reference: ZC207606.

Registered office: Flat 17, 33 Notte Street, Plymouth, PL1 2AZ, England.

For privacy questions or requests, you can contact us at:

2. Information we may collect

We may collect information needed to provide, support and protect the portal, including:

• First name, last name or display name, where provided
• Email address used to create or access an account
• Phone number, where supplied
• Account plan, such as free, monthly or annual
• Answers, scores, test attempts, custom-test history, downloaded-test records, progress and review items
• Avatar configuration and unlocked or purchased virtual avatar items
• YanBo Coin wallet balances and transaction records
• Membership or subscription records and payment-service identifiers needed to manage subscriptions
• Question reports, support messages and technical information needed to investigate problems
• Recent authenticated account activity used to help manage inactive-account retention
• Security and technical data such as IP address, browser or device information, authentication/session records and security checks

3. Why we use this information

We use information to provide, support and protect the learning service, including:

• Creating and managing user accounts
• Allowing pupils to complete practice tests
• Saving scores, progress and review items
• Providing Build a Test features for eligible members
• Helping parents and pupils understand learning progress
• Managing memberships and subscriptions
• Keeping accounts and the portal secure
• Preventing misuse, fraud and automated abuse
• Improving the quality and reliability of the portal
• Responding to support requests or feedback
• Meeting legal, regulatory or accounting obligations

4. Children’s information

YanBo Practice Portal is designed for 11+ preparation and may be used by children with support from a parent, guardian or teacher.

Parents or guardians are expected to create or supervise accounts used by children. Children should ask a parent or guardian before sending account details or other personal information to support.

We aim to collect and use only the information needed to provide the learning service, show progress, keep accounts working properly and protect the portal. We consider children’s privacy and best interests when deciding how their information is used.

If you are a pupil using YanBo: we use things such as your answers, scores and progress to make the learning features work and show how you are doing. We do not sell your personal information or use it for behavioural advertising. If you have a privacy question, please ask a parent or guardian to contact us.

5. How information is stored and processed

We currently use Supabase for authentication, database services and account and learning-data storage; Vercel for website hosting and delivery; Cloudflare Turnstile for fraud and bot protection; Resend for transactional and support-related email delivery; and Stripe for payment and subscription management.

We take reasonable technical and organisational steps to protect personal information and only use it for the purposes described in this policy.

Some providers may process information outside the UK. Where required, we rely on appropriate safeguards for international transfers.

6. Sharing information

We do not sell personal information.

Personal information may be processed by service providers that help us operate YanBo Practice Portal, including Supabase, Vercel, Cloudflare, Resend and Stripe, where relevant to the service they provide.

We only share personal information where it is necessary to provide, secure, support or administer the portal, or where we are required to do so by law.

7. How long information is kept

Account and learning information is normally kept while an account remains active. If there has been no authenticated YanBo portal activity for 24 months, the account and its identifiable learning information may be reviewed for deletion.

We record recent authenticated account activity so that we can identify whether an account remains active and operate our inactive-account retention process.

The registered account holder will normally be contacted before an inactive account is manually deleted. Active paid accounts are not automatically selected for inactivity deletion.

Parents and account holders can contact support@yanbo.co.uk about account deletion. Requests may require identity checks and consideration of legal or security obligations.

Financial records that must be kept for legal or accounting reasons may later be retained separately from learning records. Secure backups may continue to exist until they expire through their normal retention cycle.

8. Your rights

Depending on the circumstances and the lawful basis being used, you may have rights to access your personal information, correct inaccurate information, request deletion or restriction of processing, receive certain information in a portable format, or object to certain uses of your information.

Where we rely on legitimate interests, you have the right to object to processing based on those interests. We will consider any objection in accordance with data-protection law.

These rights are not absolute and may depend on the circumstances and the reason why the information is being processed or retained.

To make a privacy request, please contact:

9. Lawful basis for using information

We use different lawful bases depending on why personal information is needed.

Contract: where processing is necessary to create and manage an adult account holder’s account, provide membership features, manage a subscription or deliver services requested by that account holder.

Legitimate interests: where processing is necessary to provide and protect the learning service. Our legitimate interests include enabling pupils to complete practice, storing answers, scores, progress and review information, responding to support requests, preventing misuse and fraud, and maintaining the security and reliability of the portal.

Where legitimate interests involve children’s personal information, we give particular consideration to the child’s interests, rights and freedoms and use appropriate safeguards.

Legal obligation: where processing or retention is necessary for us to comply with applicable legal, regulatory, tax or accounting requirements.

10. Complaints

If you have a concern about how your personal information is used, please contact us first so we can try to help.

You also have the right to raise a complaint with the UK Information Commissioner’s Office if you are unhappy with how your personal information has been handled.

11. Cookies and similar technologies

YanBo Practice Portal may use cookies or similar technologies needed for login, security, remembering sessions and operating requested features of the portal.

Some settings may also be stored in the browser to remember choices or temporarily support portal features. More information is provided in our Cookie Policy.

YanBo uses Vercel Web Analytics for aggregated traffic and usage measurements when Analytics consent has been given. Vercel Web Analytics is distinct from Cloudflare Turnstile (which provides bot and fraud protection) and is enabled only after Analytics consent is granted. YanBo uses the resulting aggregated information to analyse traffic, usage and improve the service. YanBo does not deliberately connect these analytics measurements with YanBo account identities and the data is not used for advertising or building individual marketing profiles. Vercel Web Analytics does not use analytics cookies.

12. Updates to this policy

This Privacy Policy may be updated as YanBo Practice Portal develops. When changes are made, the updated version will be published on this page.

Last updated: 26 July 2026