Privacy policy

Last updated: July 2026 · Governed primarily by Bahrain's Personal Data Protection Law (PDPL, Law No. 30 of 2018), with UK/EU GDPR provisions applied for customers in those regions.

1. Who we are

Insurance Mock Exams ("we", "us") operates insurancemockexams.com, an independent exam-preparation platform. We are the data controller for the personal data described below. Contact: via the contact page.

2. What we collect — and what we deliberately don't

• Account data: your name, email address and a hashed password.
• Order records: what you bought, when, for how much, and a payment reference. We never see or store your card details — payment is processed by the Gate-E payment gateway.
• Study data: your attempts, answers, scores and analytics, so the product can work.
• Support messages: what you send us through the contact form.

We collect no marketing profiles, no advertising identifiers, and no data we don't need to run the service.

3. Why we process it (lawful bases)

• To provide the service you purchased (performance of contract).
• To keep accounts secure and prevent fraud (legitimate interest / legal obligation).
• To answer messages you send us (legitimate interest).

4. Where your data lives

Production data is hosted in a UK/EU data region as our defensive default, under a Data Processing Agreement with our hosting provider. Traffic is encrypted with TLS site-wide.

5. How long we keep it

Account and study data: while your account exists. Order records: as required by tax and accounting law. Support messages: up to 24 months.

6. Your rights

Under the PDPL — and GDPR where it applies — you may request access to, correction of, export of, or deletion of your personal data. Use the contact page; we respond within the statutory timescales. Deleting your account removes your study data and anonymises order records to the extent the law allows.

7. Cookies

Essential cookies only by default (sign-in session, exam progress, consent memory). Optional analytics cookies are set only if you accept them. Details in the cookie policy.

8. Third parties

Gate-E (payments), our hosting provider (infrastructure), and an email delivery provider (transactional email only). Each processes data under contract and only on our instructions.

9. Changes

We'll post any material change here and date it. Continued use after a change means acceptance.