1. Who we are
Exam Reviews is an independently operated tutoring and exam-preparation service based in Ottawa, Ontario, Canada. In this policy, “Exam Reviews,” “we,” “us,” and “our” refer to that service.
Questions, access requests, corrections, withdrawals of consent, and privacy complaints can be sent to our privacy contact at review@examreviews.ca.
2. Information we collect
We collect only the information reasonably needed to provide and operate our services. Depending on how you use the website, this may include:
- Contact and booking details: your name, email address, telephone number, school, course, selected service, participant count, and requested session dates and times.
- Payment and transaction details: amount, currency, tax, payment status, Stripe checkout and payment references, refunds, and related transaction records. Card numbers and full payment credentials are collected directly by Stripe and are not received or stored by Exam Reviews.
- Course-alert details: your email address and the course or review about which you asked to be notified.
- Learning and submission information: files you upload for tutoring or simulated assessments, original filenames, file sizes, assignment and solution records, submission status, and activity associated with your private workspace.
- Scheduling and communications: Microsoft Teams meeting identifiers and links, calendar event details, emails sent about your booking, and your requests to reschedule or cancel.
- Technical and security information: essential session and remember-me cookies, access times, error logs, and information used to prevent abuse, protect private links, and troubleshoot the service.
Please do not upload information that is not needed for your tutoring or assessment service, particularly another person’s personal information.
3. How we use information
We use personal information to:
- provide availability, reserve times, process bookings, payments, taxes, cancellations, and refunds;
- create and manage Microsoft Teams meetings and calendar events;
- send receipts, confirmations, private workspace links, course alerts you requested, service notices, and responses to your questions;
- deliver course materials, receive submitted work, release solutions, and keep a record of previously assigned simulated assessments;
- prevent double-booking, fraud, misuse, and unauthorized access;
- operate, secure, diagnose, and improve the website and services; and
- meet accounting, tax, legal, regulatory, and dispute-resolution obligations.
Booking and service messages are transactional. We will not use a course-alert request for unrelated promotional messages without appropriate consent. We do not sell or rent personal information.
4. Service providers and disclosures
We disclose information only as needed to provide the service, with your consent, or where permitted or required by law. Our service providers include:
- Stripe, which processes card payments, transaction data, receipts, and refunds;
- Microsoft, which provides Microsoft 365 email and Microsoft Teams meetings;
- Apple, where iCloud Calendar is used to manage scheduling and booking conflicts; and
- our website and infrastructure providers, which host or support the website, database, logs, and uploaded files.
These providers process information under their own terms and privacy practices. Some processing may occur outside Ontario or Canada, where information may be subject to the laws of another jurisdiction. We may also disclose information to professional advisers, payment or fraud investigators, or public authorities when reasonably necessary and legally permitted.
5. Consent and your choices
By submitting information for a booking, payment, course alert, file exchange, or support request, you consent to its handling for the purposes explained at the time and in this policy. You may withdraw consent for optional uses by contacting us. Withdrawal does not affect processing already completed and may limit our ability to provide a requested service.
You can ask to stop course-alert or other promotional messages at any time by replying to the message or emailing us. Transactional messages required to complete or administer a booking may still be sent.
6. Cookies
The website uses essential cookies to maintain secure sessions, protect forms, remember an authorized administrator when requested, and support a booking checkout. These cookies are necessary for those functions. We do not currently use advertising cookies or third-party behavioural advertising on this website.
7. Retention
We retain personal information only as long as reasonably necessary for the purposes described above and to meet legal, tax, accounting, security, and dispute-resolution requirements. Retention periods vary by record. For example, financial transaction records may be kept longer than temporary checkout data, and assessment assignments may be retained to avoid assigning the same assessment again.
When information is no longer required, we will delete, anonymize, or securely dispose of it, subject to technical backup cycles and any legal requirement to retain it. You may ask about the retention period that applies to a particular record.
8. Safeguards
We use administrative and technical safeguards appropriate to the sensitivity of the information. These include HTTPS, access controls, password hashing, private access tokens, form and login protections, restricted server directories, and payment processing that sends card details directly to Stripe. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.
Private booking and workspace links act like credentials. Keep them confidential and contact us promptly if you believe one has been disclosed or misused.
9. Access, correction, and complaints
You may request access to personal information we hold about you, ask us to correct inaccurate information, or challenge how it has been handled. We may need to verify your identity before responding. Access may be limited where permitted or required by law, including where disclosure would reveal another person’s information.
Contact review@examreviews.ca with “Privacy request” in the subject line. We will investigate privacy complaints and respond within a reasonable time.
10. Young users
Our services are intended for post-secondary students and others capable of understanding the information practices described here. If a student cannot legally or meaningfully provide the required consent, a parent or legal guardian must make the booking and consent on the student’s behalf.
11. Changes to this policy
We may update this policy when our services, providers, or legal obligations change. The effective date at the top identifies the current version. Material changes will be brought to users’ attention where appropriate.