Privacy policy

Last updated: 9 October 2026

This policy explains how The Briefing Room (“we”, “us”) collects and uses your personal information when you use our online practice portal, and the rights you have under UK data protection law.

1. Who we are

ModeCom Solutions Ltd, a company registered in England and Wales (company number 17193512), registered office: 110–112 Moston Lane, Manchester, M9 4HU.
Email: modecomsolutionsltd@gmail.com · Phone: 07909 410413

We are the data controller for your personal information. We are registered with the Information Commissioner's Office (ICO), registration number ZC234941.

2. What information we collect

Account information: your name and email address when you sign in with Google.
Purchase information: your email address, the date and amount of your payment and a payment reference. Card payments are processed by Stripe — we never see or store your full card details.
Access key records: the access key issued to you, the email it's linked to and when it was redeemed.
Approximate location: when you sign in, we estimate your town or city, nation (England, Scotland, Wales or Northern Ireland) and country from your IP address. The lookup runs on our own server and no outside service sees your IP address. We store only the estimated location and the dates of your first and most recent visit, never the IP address itself.
Practice activity: the sectors and levels you attempt and your scores, so you can track your progress.
Messages: anything you send us by email or phone.
Technical information: basic information your browser sends, such as IP address and device type, which our hosting providers process to deliver and secure the site.

3. How and why we use it

Purpose	Lawful basis
Creating your account, signing you in and providing the practice tests	Contract — to provide the service you've asked for
Processing your payment, issuing and emailing your access key, and unlocking access	Contract
Keeping financial and tax records	Legal obligation
Responding to your questions and complaints	Legitimate interests — providing good customer service
Understanding how many people use the service, roughly where in the UK they are and how many go on to buy, so we can improve and promote it (we look at totals, not at individuals)	Legitimate interests — running and growing the business
Preventing fraud and misuse, such as shared or resold keys	Legitimate interests — protecting our service and customers

We do not sell your information, and we do not send marketing emails unless you've clearly agreed to receive them.

4. Who we share it with

We use trusted service providers who process information on our behalf, under contracts that require them to keep it secure:

Stripe — payment processing
Google and Supabase — secure sign-in and account authentication
Supabase — database hosting for account and access key records
Render — website and server hosting (servers in the United States)
Resend — sending access key emails (EU region)
EmailJS — backup email sending, used only if Resend is unavailable

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards recognised under UK law, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum.

We may also share information if required by law, or to protect our rights or the safety of others.

5. How long we keep it

Account and practice information: while your account is active, and deleted within 12 months of your last activity or sooner if you ask us.
Payment and access key records: six years from the end of the financial year of purchase, to meet tax and accounting requirements.
Emails and support messages: up to two years.

6. Cookies and browser storage

We only use storage that's essential for the site to work, such as keeping you signed in. We don't use advertising or tracking cookies. If we ever introduce optional analytics, we'll ask for your consent first.

7. Your rights

You have the right to:

ask for a copy of the personal information we hold about you
ask us to correct inaccurate information
ask us to delete your information, where we don't need to keep it for legal reasons
object to or ask us to restrict certain uses of your information
ask for your information in a portable format

To make a request, email modecomsolutionsltd@gmail.com. We'll respond within one month.

8. Security

We use secure, encrypted connections and reputable providers, and limit access to your information to those who need it. No system is completely secure, but we take reasonable steps to protect your data and will act promptly if anything goes wrong.

9. Complaints

If you're unhappy with how we've handled your information, please contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10. Changes to this policy

Approximate location uses GeoLite data created by MaxMind, available from maxmind.com.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.