Privacy Policy
Last updated:
This Privacy Policy explains what personal data Enrolled Agent Center collects, why we collect it, and the rights you have over it. Use the contents below to jump to a section.
1. Who we are
Enrolled Agent Center ("we", "us") is an independent exam-preparation service, a US Tax Desk company, operating from the United Kingdom. For data protection purposes we are the data controller for personal data collected through this website and through the study app at study.enrolledagentcenter.com.
Contact: hello@enrolledagentcenter.com
2. What we collect
| Data | When | Why (lawful basis) |
|---|---|---|
| Email address, name, hashed password | If you create an account | To provide the service you asked for — performance of a contract |
| Google/Apple account identifier and email | If you sign in with Google or Apple | To authenticate you — performance of a contract |
| Practice attempts (scores, answers) | When you complete a practice session while signed in | To show your progress — performance of a contract |
| Analytics (pages viewed, approximate region, device type) | Only if you accept analytics cookies | Your consent, which you can withdraw at any time |
We do not collect special category data, we do not use advertising cookies, and we do not sell or rent personal data to anyone.
3. Cookies
We set one strictly necessary cookie/local-storage item to remember your cookie choice, and a session cookie if you sign in. Analytics cookies are only set after you opt in. Full detail is in our Cookie Policy. You can change your choice any time via Cookie settings.
4. Who we share it with
- Cloudflare — hosting and content delivery (processor).
- Google Analytics — only if you consent to analytics.
- Google / Apple — only if you choose to sign in with them.
Some of these providers process data outside the UK/EEA. Where they do, transfers are covered by the UK International Data Transfer Addendum and/or EU Standard Contractual Clauses.
5. How long we keep it
- Account data: while your account is open, then deleted within 90 days of closure.
- Practice attempt history: while your account is open.
- Analytics: retained by Google for up to 14 months.
- Cookie preference: 12 months, then we ask again.
6. Your rights
Under the UK GDPR and EU GDPR you have the right to access your data, correct it, delete it, restrict or object to processing, port it to another service, and withdraw consent at any time (withdrawing consent doesn't affect processing already carried out).
If you have an account, you can exercise two of these yourself, immediately, from your account page: Download my data gives you everything we hold about you as a JSON file, and Delete my account erases your account and practice history straight away. For anything else — or if you'd rather we did it for you — email hello@enrolledagentcenter.com and we'll respond within one month.
If you're unhappy with how we've handled your data you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local EU supervisory authority.
7. Security
Passwords are stored hashed (bcrypt), never in plain text. Traffic is served over HTTPS. Access to the production database is limited to the site operator.
8. Children
This service is intended for adults preparing for a professional exam and is not directed at children under 16.
9. Changes
If we change this policy we'll update the date above and, for material changes, tell you on the site.