Privacy Policy

Draft for operator and legal review — not approved for public launch. Complete all review items in the V30 checklist before publishing this page as a final policy. This document does not itself establish compliance.

1. Who we are

TO THE LINE operates an online A320 technical examination preparation platform at gettotheline.co.uk.

Before publication: insert the full legal name and contact address of the data controller (and company number if applicable). Confirm whether the operator is a sole trader or company and identify the correct jurisdiction.

2. Information we process

Depending on how you use the service, we process account email addresses, public usernames, authentication and security information, practice and mock-exam session results, saved or flagged questions, comments, reports you submit, and communications with support. We may also process technical logs required to maintain security and reliability.

3. Why we use this information

We use account information to provide login and account recovery; study results to deliver the revision service and progress features; comments and reports to operate the community and correct content; and security information to protect our users and systems.

Before publication: map each purpose to the applicable UK GDPR lawful basis, and document any legitimate-interest assessment where relied upon.

4. Public information

Your chosen username may be visible alongside comments you post. Avoid including personal contact information in comments. We do not intend to display your registration email address publicly.

5. Service providers

We use Supabase for authentication and application data, Cloudflare for website delivery and access protection, Resend for transactional authentication email delivery, and IONOS for support email hosting. Before publication: verify the precise roles, sub-processors, data locations, and relevant contractual arrangements.

6. International data transfers

Some service providers may process data outside the UK. Before publication: identify any applicable international transfers and safeguards based on the current configuration and provider agreements.

7. How long we keep data

We retain information for as long as necessary to provide and secure the service and meet applicable obligations. Before publication: replace this general statement with a verified retention schedule for accounts, study results, comments, email correspondence and backups.

8. Your rights

Subject to applicable UK data protection law, you may have rights to access, correct or erase personal data, restrict or object to processing, request portability, and complain to the UK Information Commissioner's Office. To make a request, contact support@gettotheline.co.uk.

9. Cookies and storage

Our authentication service may use browser storage or similar technologies to keep users signed in. Before publication: conduct and document a cookie/storage audit, listing purposes, lifetimes and providers. If non-essential technologies are used, implement the necessary consent controls before enabling them.

10. Changes and contact

We may update this notice as the service develops. Contact support@gettotheline.co.uk with privacy questions. Before publication: insert the effective date and controller details.