Privacy Notice

Last updated: July 14, 2026

1. Who we are

Social Work Confidential (the "Service") is operated by Erica Jew, a sole proprietor doing business as Social Work Confidential. Erica Jew is the data controller for personal data processed through the Service.

2. Personal data we collect

Account data: email address, password credentials (stored as a salted hash), and account identifiers.
Usage data: pages visited, features used, game session information, and device/browser metadata such as IP address, browser type, and operating system.
Support communications: messages you send us or Paddle in connection with the Service.
Payment metadata: transaction identifiers, subscription status, and billing state that Paddle shares back with us. We do not receive or store your full payment card details — those are handled directly by Paddle.

3. How we use personal data

to create and administer your account (contract performance);
to provide, maintain, and improve the Service (legitimate interests);
to prevent fraud and abuse and keep the Service secure (legitimate interests);
to respond to support requests (contract performance / legitimate interests);
to comply with legal obligations (legal obligation).

4. How we share personal data

Merchant of Record — Paddle: Paddle.com Market Limited acts as the reseller and Merchant of Record for all purchases. We share the data needed to process your purchase, manage your subscription, calculate tax, issue invoices, and handle refunds. See Paddle's privacy policy at paddle.com/legal/privacy.
Service providers / subprocessors: hosting, database, authentication, email delivery, error monitoring, and analytics vendors that process data on our behalf under written agreements.
Professional advisers: legal, accounting, and tax advisers where necessary.
Authorities: where required by law or to protect rights, property, or safety.

We do not sell your personal data.

5. Cookies and similar technologies

We use cookies and local storage that are strictly necessary to run the Service — for example, to keep you signed in and to remember preferences. We do not use advertising cookies. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from functioning.

6. Data retention

We keep account data for as long as your account is active and for a reasonable period afterwards to satisfy tax, accounting, and legal obligations. Backups and logs are retained on a rolling short-term schedule. When personal data is no longer needed it is deleted or anonymised.

7. Security

We use appropriate technical and organisational measures — including encryption in transit, hashed credentials, access controls, and monitored infrastructure — to protect personal data. No system is perfectly secure.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, and to object to or restrict certain processing. To exercise these rights, contact us through the Service. You may also contact your local data protection authority.

9. International transfers

Our providers, including Paddle, may process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

10. Children

The Service is intended for adult exam candidates and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction).

11. Changes to this notice

We may update this notice from time to time. The "Last updated" date reflects the most recent revision.

12. Contact

For privacy questions, contact us through the Service. For questions about payments or invoices, contact Paddle at paddle.net.