Privacy Policy

Data Controller and Contact

GradePrecision acts as the data controller for personal data processed through this website.

For privacy requests, contact us using the email listed at the bottom of this page.

Data Categories, Purposes, and Lawful Bases

We process technical data (IP-derived region, user agent, request metadata), security data (rate-limit and abuse-prevention records), and communication data you submit through the contact form.

Lawful bases under UK GDPR: legitimate interests (security, diagnostics, service reliability), contract/pre-contract (responding to requests), and consent (optional analytics and advertising technologies).

• Calculator inputs are transmitted to our server to compute results, then returned to your browser.
• Calculator inputs are not used as official academic records and are not sold.
• Optional analytics/advertising processing only occurs after consent where required.

Recipients, Processors, and International Transfers

We use infrastructure and analytics vendors only where needed to operate and improve the service.

If a processor is based outside the UK, transfers are handled using appropriate safeguards required by applicable law (for example, adequacy regulations or contractual safeguards).

Where optional analytics or advertising tools are active, processing is governed by your consent preferences in applicable regions and technical controls that restrict storage until valid choices are recorded.

Advertising (Google AdSense)

We use Google AdSense to display adverts. Google and other third-party vendors may use cookies or similar technologies to serve ads based on previous visits to this and other websites.

Google advertising cookies can be used to personalise ad delivery and measure ad performance where consent is granted.

You can manage ad personalisation in Google Ad Settings (https://adssettings.google.com/) and you can update your site-level cookie choices at any time using the Cookie preferences control in the footer.

• In EU/UK regulated regions, non-essential advertising storage is denied by default until consent is provided.
• If you reject non-essential cookies, optional advertising and analytics tags remain disabled in basic consent mode.
• Cookie and consent behaviour is described in our Cookie Policy and can be updated at any time.

Retention Periods

Contact messages are retained only as long as needed to respond and maintain support records.

Security and operational logs are retained for a limited period needed for fraud prevention, diagnostics, and legal compliance.

• Session and CSRF cookies: session duration only.
• Consent preference storage: retained until changed or cleared by the user.
• Analytics identifiers (if enabled): retained according to vendor cookie durations listed in the Cookie Policy.

Security Controls and Data Minimisation

We apply layered controls including TLS encryption in transit, request-level protections, rate-limiting on sensitive endpoints, and strict browser security headers.

We limit collected data to what is needed for service operation, fraud prevention, diagnostics, and requested support workflows.

Where possible, we prefer pseudonymous or aggregate telemetry over directly identifying records.

• Calculator input processing is transactional and scoped to delivering requested outputs.
• Operational logs are used for reliability and abuse-prevention analysis.
• Access to operational systems is restricted to authorized personnel with role-based need.

Lawful Basis Detail by Processing Activity

Service delivery and support responses rely on legitimate interests and, where applicable, pre-contractual processing when users request guidance.

Optional analytics and advertising activities rely on consent in regions where required by law.

Security monitoring, fraud prevention, and service integrity controls are processed under legitimate interests and legal compliance obligations.

Data Subject Request Handling

Requests to access, rectify, erase, restrict, object, or export personal data can be submitted through the published contact channel.

We may request reasonable verification details before processing a request to protect against unauthorized disclosure.

Where legal exemptions apply, we will explain the basis for any limited or denied request response.

Your Rights and Complaints

Depending on your location, you may have rights to access, rectify, erase, restrict, object, or request portability of personal data.

If you are in the UK and believe your data rights are not being met, you can complain to the Information Commissioner's Office (ICO).