Privacy Policy

1. Who we are

This website is run by IB Demystified Ltd ("we", "us"), a company registered in England and Wales, at 3 Brickhouse Road, Rowley Regis, West Midlands, B65 8HD, United Kingdom. We are the "controller" of the personal information described here, which means we decide how it is used.

Questions about your information? Email info@ibdemystified.com.

2. What we collect

When you contact us

If you use our contact form we collect your name, email address, phone or WhatsApp number (optional), whether you are a student, parent, teacher or school, your message, and the page you sent it from.

When you create an account or buy

Your name, email address and password (stored in scrambled form, never readable by us). If you sign in with Google, we receive your name, email address and profile picture from Google. When you buy, we keep a record of what you bought, when, and the price. Card details are handled by our payment provider; we never see or store your full card number.

When you use the site

Basic technical information such as your IP address and browser type. We use your IP address briefly to stop spam (for example, limiting how many messages can be sent in an hour); that record is deleted automatically after one hour. When study features are live, we will also keep your learning progress so you can pick up where you left off.

3. Why we use it

We only use your information where the law allows it:

We do not sell your information, and we do not use it for automated decisions about you.

4. Children and young people

Our MYP resources are designed for students aged about 11 to 16, so we take extra care.

• If a student is under 13, a parent or guardian must create the account, make any purchase and agree to this policy on their behalf.
• Students aged 13 to 17 should have a parent or guardian's permission before buying anything.
• We collect only what we need to provide the service, we do not show advertising, and we never share a child's information for marketing.
• Parents and guardians can ask to see, correct or delete their child's information at any time by emailing info@ibdemystified.com.

5. Who we share it with

We share information only with trusted services that help us run the site, and only as much as they need:

• Our website host, which stores the site and its data.
• Google, for sending email and, if you choose it, Google sign-in. Our pages also load fonts from Google, which means your browser shares your IP address with Google when a page opens.
• Our payment provider, to take payments securely.
• WhatsApp (Meta), only if you choose to message us there. WhatsApp's own privacy policy then applies to that conversation.

We may also share information if the law requires it, for example with HMRC or the police.

6. Transfers outside the UK

Some of these services store data outside the UK, including in the United States. Where that happens, we rely on the safeguards UK law requires, such as the UK government's adequacy decisions or approved contract terms.

7. How long we keep it

• Messages and enquiries: up to 24 months after our last contact, then deleted.
• Accounts: for as long as your account is open. If you close it, we delete or anonymise it within 90 days, except what we must keep by law.
• Payment and tax records: 6 years, as UK tax law requires.
• Spam-protection records: 1 hour.

8. Cookies

We use only the cookies needed to make the site work, such as keeping you signed in and remembering what is in your basket. We do not use advertising cookies. If we add analytics or any other non-essential cookies in future, we will ask for your permission first and update this policy.

9. Your rights

Under UK data protection law you can ask us to:

• give you a copy of the information we hold about you;
• correct anything that is wrong;
• delete your information;
• restrict or object to how we use it;
• send your information to you or another organisation in a usable format;
• stop using it where you gave consent.

Email info@ibdemystified.com. We will reply within one month and there is normally no charge.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

10. Keeping it safe

The site uses an encrypted connection (https). Access to messages and accounts is limited to our own team, protected by passwords. No system is perfectly secure, but we take sensible steps to protect your information and will tell you and the ICO if a serious breach ever happens.

11. Changes to this policy

We may update this policy when our services change. The date at the top shows the latest version. If a change is important, we will tell account holders by email.

12. Contact us