Trust and transparency

Privacy Policy

How HK Primary Interview handles parent accounts, minimum child profile data, payments, analytics and deletion requests.

Portfolio and letter downloads

When you submit the download form, we record the parent email, document type, interface language, request times and count in our private database to operate the download service. The address is not verified and does not create a signed-in account or subscribe you to marketing. Portfolio text and photos stay in your browser, where the PDF is generated. Optional drafts use local browser storage. You can request correction or deletion of a download email through [email protected].

What we collect

Account email and authentication identifiers; a child nickname, K2/K3 year, everyday languages, target schools, interview dates and learning progress only when a signed-in parent gives consent. Do not submit identity numbers, medical records, school passwords or unnecessary photographs.

Why and where

We use these details to provide cross-device plans and progress. Account data is stored in our private PostgreSQL database hosted on DigitalOcean; payments are processed by Stripe; website measurement uses Google Analytics where permitted. Payment card details are never stored by this site.

Browser storage, cookies and analytics

Free tools may keep progress and sharing unlocks in localStorage, while authentication uses essential session storage. Google Analytics measures page and feature use so we can improve the service; it does not receive a child's profile from these tools. Analytics use is also disclosed in the Terms of Service. Browser privacy controls and content blockers can restrict analytics storage.

Retention and control

Child profiles and learning progress are removed from the live service when account deletion is completed and are otherwise reviewed so they are not kept longer than needed for the service. Payment and transaction records may be retained for up to seven years where required for business and tax records. Processor backups expire under the processors’ retention schedules. Parents can request access, correction, export or deletion through [email protected].

Children and consent

The service is directed to parents and guardians. A parent must consent before child profile information is saved. We minimise fields and do not sell personal data.

Security and processors

We use encrypted HTTPS connections, access controls and server-only credentials. No internet service is risk-free; report suspected account misuse promptly.

[email protected]