Privacy Policy
Last updated: 28 July 2026
This Privacy Policy explains what personal data Enrolled Agent Center collects, why we collect it, and the rights you have over it. Use the contents below to jump to a section.
1. Who we are
Enrolled Agent Center is a trading name of Mango Ridge Ventures Ltd ("we", "us"), a company registered in England and Wales under company number 17363157, whose registered office is 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. We are an independent exam-preparation service.
For data protection purposes Mango Ridge Ventures Ltd is the data controller for personal data collected through this website and through the study app at study.enrolledagentcenter.com.
Contact: question@enrolledagentcenter.com
2. What we collect
| Data | When | Why (lawful basis) |
|---|---|---|
| Email address, name, hashed password | If you create an account | To provide the service you asked for — performance of a contract |
| Google account identifier and email | If you sign in with Google | To authenticate you — performance of a contract |
| Practice attempts (scores, answers) | When you complete a practice session while signed in | To show your progress — performance of a contract |
| Analytics (pages viewed, approximate region, device type) | Only if you accept analytics cookies | Your consent, which you can withdraw at any time |
We do not collect special category data and we do not sell or rent personal data to anyone. We do not use advertising or cross-site tracking cookies. If that ever changes, they would be listed here and set only after you opt in, never by default.
3. Cookies
We set one strictly necessary cookie/local-storage item to remember your cookie choice, and a session cookie if you sign in. Analytics cookies are only set after you opt in. Full detail is in our Cookie Policy. You can change your choice any time via Company details · Cookie settings.
4. Who we share it with
- Cloudflare — hosting and content delivery (processor).
- Stripe — our payment processor. If you subscribe, Stripe receives your name, email, card details and billing address in order to take payment, calculate the right tax and issue receipts. We are the seller and remain the controller of that data; Stripe processes it on our behalf and also acts as a controller in its own right for fraud prevention and its own legal obligations, under its own privacy policy. Your card details go directly to Stripe — we never see or store them.
- Google Analytics — only if you consent to analytics.
- Google — only if you choose to sign in with Google.
Some of these providers process data outside the UK/EEA. Where they do, transfers are covered by the UK International Data Transfer Addendum and/or EU Standard Contractual Clauses.
5. How long we keep it
- Account data: while your account is open, then deleted within 90 days of closure.
- Dormant accounts: if you don't sign in for 365 days we close the account and remove your personal details from it — your name, email address, password and any notes you wrote. We email you 30 days beforehand, and signing in at any point resets the clock. Accounts with an active paid membership are never closed this way, however long they go unused.
- Practice attempt history: while your account is open. Scores from a closed account are kept without anything identifying you, because they're what tells us which questions are working.
- Billing records: 6 years, as UK tax law requires. These stay attached to the account record even after your personal details are removed from it.
- Analytics: retained by Google for up to 14 months.
- Cookie preference: 12 months, then we ask again.
6. Your rights
Under the UK GDPR and EU GDPR you have the right to access your data, correct it, delete it, restrict or object to processing, port it to another service, and withdraw consent at any time (withdrawing consent doesn't affect processing already carried out).
To exercise any of these, email question@enrolledagentcenter.com and we'll respond within one month.
If you're unhappy with how we've handled your data you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local EU supervisory authority.
7. Security
Passwords are stored hashed (bcrypt), never in plain text. Traffic is served over HTTPS. Access to the production database is limited to the site operator.
8. Children
This service is intended for adults preparing for a professional exam and is not directed at children under 16.
9. Changes
If we change this policy we'll update the date above and, for material changes, tell you on the site.