Privacy Policy

1. Introduction

This Privacy Policy explains how GasTheory ("we", "us", "our") collects, uses, and protects your personal data when you use our website and services. We aim to comply with applicable data protection laws, including the UK GDPR and Data Protection Act 2018 where relevant.

2. Who is responsible for your data?

For the purposes of data protection law, we act as the data controller for personal data we collect and process via GasTheory. If you have any questions, you can contact us at contact@plumbtheory.co.uk.

3. Personal data we collect

We may collect and process the following types of data:

• Account data: email address, hashed password, subscription status.
• Subscription & payment data: subscription ID, billing status, and related payment metadata from our payment provider (Stripe). We do not store full card details.
• Usage data: pages visited, quiz attempts, question results, and other activity needed to provide progress tracking and improve the Service.
• Support data: any information you provide when you contact us.
• Technical data: IP address, device type, browser type, and similar information collected via cookies and similar technologies.

4. How we use your data (legal bases)

We use your personal data for the following purposes:

• To create and manage your account and provide the Service (contract).
• To process subscription payments and manage billing via Stripe (contract).
• To track your quiz attempts and show your progress over time (legitimate interests / contract).
• To communicate with you about your account, updates, or important changes to the Service (legitimate interests / contract).
• To maintain security, prevent abuse, and diagnose technical issues (legitimate interests).
• Where required, to comply with legal obligations (legal obligation).

5. Cookies & analytics

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the Service is used. For more information, see our Cookie Policy.

6. Sharing your information

We only share your personal data with trusted third parties where necessary to provide the Service:

• Stripe – for secure payment processing and subscription management.
• Firebase – for authentication and database storage.
• Hosting & infrastructure providers – to operate the website reliably and securely.

We do not sell your personal data to third parties.

7. International transfers

Some of our service providers may process personal data outside the UK/EEA. Where this occurs, we aim to ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms, to protect your data.

8. Data retention

We keep your personal data for as long as you have an account or subscription with us, and for a reasonable period afterwards to deal with queries, enforce our terms, or comply with legal requirements. We may anonymise usage data for long-term analytics.

9. Your rights (UK/EU users)

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data in certain circumstances;
• Object to or restrict certain types of processing;
• Request a copy of your data in a portable format (data portability);
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at contact@plumbtheory.co.uk. We may need to verify your identity before responding.

10. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue. You may also have the right to lodge a complaint with your local data protection authority (for example, the Information Commissioner’s Office in the UK).

11. Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.