Last updated: May 2026 · Applies to CySEC Prep (cysecexamprep.com)
Privacy Policy
This policy explains how Elias Ioannides collects, uses, and protects your personal data when you use CySEC Prep. Please read it carefully. By using our service you agree to the practices described here.
1. Who we are
CySEC Prep is operated by Elias Ioannides, an individual based in the Republic of Cyprus.
Address: Iouliou Typaldou 15, Lykavitos, 1077, Nicosia, Cyprus
Elias Ioannides is the data controller for the personal data described in this policy.
2. Data we collect
2.1 Account data
When you register, you may do so by signing in with your Google account or by creating an account with your email address and a password. Depending on the method used, we collect:
- Your full name
- Your email address
- Your Google profile picture (if signing in with Google)
We do not receive or store your Google password. Passwords for email-based accounts are stored in encrypted form.
2.2 Payment data
Payments are processed by Stripe, Inc. We do not store your card number, CVV, or full payment details on our servers. Stripe provides us with a transaction reference, the amount charged, and your billing email. Stripe's privacy policy is available at stripe.com/privacy.
2.3 Exam and usage data
When you use the platform we collect:
- Exam attempts — which exams you started and completed, your scores, and which questions you answered correctly or incorrectly
- Chapter performance data — your performance broken down by chapter and topic
- Session data — timestamps of logins, exam starts, and exam completions
2.4 Technical data
We automatically collect certain technical information when you visit our site, including:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent
3. How we use your data
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| To create and manage your account | Account data | Performance of a contract |
| To process your payment and provide access to purchased products | Payment data, account data | Performance of a contract |
| To display your exam results and analytics dashboard | Exam and usage data | Performance of a contract |
| To improve our question bank, content, and platform | Exam and usage data (aggregated) | Legitimate interests |
| To send you account-related emails (receipts, resets) | Account data | Performance of a contract |
| To detect and prevent fraud or abuse | Technical data, account data | Legitimate interests |
| To comply with legal obligations | As required by law | Legal obligation |
4. Marketing communications
We will only send you marketing emails if you have opted in. You can unsubscribe at any time by clicking the unsubscribe link or contacting us at our contact page.
5. Data sharing and third parties
We do not sell your personal data. We share data only with the following third parties, and only to the extent necessary to provide the service:
- Google LLC — for authentication via Google Sign-In (where used).
- Stripe, Inc. — for payment processing. See stripe.com/privacy.
- Hosting and infrastructure providers — act as data processors, bound to process data only on our instructions.
We may also disclose your data if required to do so by law or court order.
6. International data transfers
Some third-party providers (including Google and Stripe) are based outside the EEA. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
7. Data retention
We retain your personal data for as long as your account is active and for a reasonable period thereafter. If you request deletion of your account, we will delete or anonymise your data within 30 days, except where retention is required by law.
Payment records are retained for 7 years to comply with tax and accounting obligations.
8. Your rights under GDPR
As an EEA resident, you have the following rights:
- Right of access — request a copy of the data we hold about you.
- Right to rectification — ask us to correct inaccurate or incomplete data.
- Right to erasure — ask us to delete your data in certain circumstances.
- Right to restriction — ask us to restrict processing in certain circumstances.
- Right to data portability — ask us to provide your data in a machine-readable format.
- Right to object — object to processing based on legitimate interests.
- Right to withdraw consent — withdraw consent at any time where processing is consent-based.
Contact us at our contact page to exercise any right. We will respond within 30 days. You may also complain to the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy).
9. Cookies
We use cookies to operate the platform:
- Essential cookies — required to log in and use the platform.
- Analytics cookies — used to understand how visitors use the site.
You can control cookies through your browser settings.
10. Security
We take reasonable technical and organisational measures to protect your data, including HTTPS encryption and access controls. No internet transmission is completely secure.
11. Children
CySEC Prep is intended for adults in financial services roles. We do not knowingly collect data from anyone under 18.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or on-platform notice. Continued use constitutes acceptance of the updated policy.
13. Contact us
Contact us for any questions about this policy.
Address: Iouliou Typaldou 15, Lykavitos, 1077, Nicosia, Cyprus