Privacy Policy
How we handle your personal data
Last updated: 25 June 2026
1. Who we are
What The FRCA is a revision tool for candidates preparing for the FRCA examinations, operated by Duncan Birse, trading as What The FRCA, a sole trader based in the United Kingdom. For the purposes of UK data protection law, we are the
You can contact us at: hello@whatthefrca.com
Or write to us at: 114 West Savile Terrace, Edinburgh, EH9 3EJ.
This policy explains what personal data we collect, how we use it, who we share it with, and the rights you have. The Service is intended for users in the United Kingdom.
2. The data we collect
Account information: your name, email address, and password. Your password is stored securely in a hashed form by our authentication provider and is not visible to us in readable form.
Usage and progress data: the answers you submit, your scores and progress by category, and the questions you save or flag. This data powers your progress tracking and the app’s adaptive features.
Payment information: when you make a purchase, your payment is handled by Stripe. Stripe collects your card details directly – we do not see or store your full card number. We receive confirmation of payment and a record of the transaction.
Communications: if you email us, we keep a record of that correspondence so we can help you and improve our service. Website usage: our website uses Framer’s built-in, privacy-friendly analytics to understand general, aggregate site usage. This does not use tracking cookies and does not identify you individually.
3. How and why we use your data
To provide the Service – creating and managing your account, giving you access to the question bank, and saving your progress. Legal basis: performance of our contract with you.
To take payment – processing your purchases and keeping a record of them. Legal basis: performance of our contract with you.
To send service emails – such as your free trial welcome, payment confirmation, and access expiry reminders. Legal basis: performance of our contract and our legitimate interests.
To improve the Service – understanding how questions perform, calibrating difficulty, and refining the question bank. Where this uses your data it is anonymised or aggregated wherever possible. Legal basis: our legitimate interests in improving our product.
To keep our service secure – preventing misuse, account sharing, and unauthorised access. Legal basis: our legitimate interests in protecting our service. To meet legal obligations – keeping records of transactions for tax and accounting. Legal basis: compliance with a legal obligation.
4. Marketing
Our standard emails (such as welcome, payment, and expiry messages) are service messages needed to run your account, not marketing. We will only send you marketing emails – for example about new products – if you have given us your consent, and you can withdraw that consent and unsubscribe at any time.
5. Who we share your data with
We do not sell your personal data. We share it only with the service providers who help us run What The FRCA, who act as our
Supabase – provides our authentication and database, storing your account and usage data. Stripe – processes payments securely and handles your card details. Resend – sends our transactional emails, using your name and email address.
We may also disclose data if required to do so by law, or to protect our rights or the safety of others.
6. International transfers
Some of our service providers are based outside the United Kingdom, which means your data may be transferred to and stored in other countries. Where this happens, we make sure appropriate safeguards are in place – such as an adequacy decision, the UK International Data Transfer Agreement, or standard contractual clauses – so that your data receives a level of protection consistent with UK law.
7. How long we keep your data
We keep your account and usage data for as long as your account is active. If you do not log in for 5 years, we treat your account as dormant. We will notify you by email before deleting it. Once an account is deleted, we no longer store your personal information.
You can delete your account at any time in the ‘My Account’ section. When you do, your personal information is removed. We keep records of purchases and transactions for 5 years to meet our tax and accounting obligations, even after an account is deleted. We may keep anonymised answer data – stripped of any information that identifies you – to help us improve the question bank.
8. Cookies
We use only the essential cookies needed to run the Service – for example, to keep you logged in during a session. We do not use advertising or tracking cookies. Our website analytics (provided by Framer) are privacy-friendly and do not rely on tracking cookies.
9. Your rights
Under UK data protection law, you have the right to: access the personal data we hold about you; ask us to correct data that is inaccurate or incomplete; ask us to delete your data (subject to records we must keep by law); object to or restrict how we use your data; ask us to provide your data in a portable format; withdraw any consent you have given, at any time.
To exercise any of these rights, email us at: hello@whatthefrca.com
We will respond within the time limits set by law.
10. Complaints
If you have a concern about how we handle your data, please contact us first so we can try to put it right.
You can contact us at: hello@whatthefrca.com
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or by calling their helpline.
11. Changes to this policy
We may update this policy from time to time. If we make a material change, we will notify registered users by email and post the updated policy on our website with a new ‘last updated’ date.
12. Contact us
If you have any questions about this policy or your data, email us at: hello@whatthefrca.com