Privacy Policy.

IELTS Sim is a partnership at Ambarkhana, Sylhet, Bangladesh. You can reach us at ieltssim@gmail.com or 01356105469.

This policy covers the IELTS Sim marketing site and the IELTS Sim platform. It does not cover the official IELTS test, third-party websites, or records an institute keeps outside the platform.

Definitions

Institute

The institute or independent instructor that holds the IELTS Sim account and creates student accounts.

Student

A person with a student account created by an institute.

Platform

The IELTS Sim web application used to run mock exams.

Personal data

Information about an identifiable person.

The institute is the controller for student data. It decides which students to add, what data to upload, and why. IELTS Sim processes student data on the institute's instructions to provide the platform.

IELTS Sim is the controller for administrator, billing, support, and website data. If you are an individual instructor, you are the controller for your students' data.

The institute must give students a privacy notice and obtain any consents required by law, including parental or guardian consent for students under 18. We do not market to students.

Students should contact their institute first for privacy requests. If a student contacts us directly, we will forward the request to the institute and assist.

We collect some data directly and process other data for the institute. The institute is the controller for student data; we process it on the institute's instructions.

Data we collect as controller

Institute administrator

Name, email, phone, role, institute name, logo, colours, and billing contact.

Billing

Invoices, payment records, and payment confirmations. Payment is offline, so we do not store card details.

Support

Emails, call notes, and any information you choose to send us.

Technical and security

IP address, device and browser information, login and session records, usage data, error reports, and security logs.

Analytics and errors

Usage and error data from analytics and error-monitoring tools, which may include device, browser, IP address, and the page or action involved.

Data we process for the institute

The institute provides student account data and controls it. Students generate exam and result data when they use the platform. An institute sees only its own students; a student sees only their own account and results. We access this data only for support, security, or operations.

Student account

Name, email, optional photo, batch, password stored as a hash, and account status.

Exam and results

Answers, writing, Listening and Reading scores, Speaking criteria and feedback entered by the institute, results, history, progress, notices, personal notes, annotations, and timestamps.

We do not collect student phone numbers, passport, NID, or other identity documents, or Speaking audio or video. The platform does not record the Speaking interview; the institute runs it offline and enters the criteria and feedback.

The marketing site has no forms, accounts, cookies, or analytics. If you email or call us, we receive the information you choose to send. Please do not send identity documents or sensitive data to support.

We use personal data to:

• create and manage institute and student accounts;
• run mock exams, autosave answers, score results, and produce reports;
• keep student history, progress, notices, and annotations;
• send service, billing, security, and account messages;
• provide support and respond to questions;
• protect the platform, prevent abuse, and investigate errors;
• understand usage and improve the platform through analytics; and
• meet legal, accounting, and dispute-resolution obligations.

We do not send marketing emails. An institute may send notices to its students through the platform; those notices are controlled by the institute.

• We do not sell personal data.
• We do not use student data to train AI models.
• We do not share one institute's student data with another institute.
• We do not use student data for advertising.
• We do not collect student phone numbers, identity documents, or Speaking audio or video.
• We do not store card details; payment is offline.

We process personal data because it is necessary to:

• perform our contract with the institute;
• operate and secure the platform;
• comply with legal and accounting obligations; and
• pursue legitimate interests in support, security, abuse prevention, and service improvement.

Where we rely on consent, you can withdraw it at any time. This does not affect processing that happened before withdrawal. For student data, the institute is responsible for the legal basis and the notices it gives to students.

We share personal data only as needed to run the service, with categories of providers that handle:

• hosting and infrastructure;
• database and storage;
• email delivery;
• analytics and error monitoring;
• security and abuse prevention; and
• professional advisers, auditors, and legal authorities.

These providers process data on our instructions and under confidentiality and security obligations. We do not sell personal data or share it for advertising.

We may disclose data if required by law, to protect rights or safety, or as part of a sale or merger of the partnership. A successor will be required to honor this policy.

Our hosting, database, email, analytics, and security providers may process personal data outside Bangladesh. Data protection laws in those countries may differ from Bangladesh law.

We use reasonable contractual and technical safeguards when data is transferred. By using the platform, the institute acknowledges these transfers.

We keep personal data only for as long as needed for the purpose we collected it, for security, or for legal and accounting obligations. We review retention periodically and delete or anonymize data when it is no longer needed.

The fixed periods are:

• Active institute: while the account is active.
• Paid institute that becomes inactive: student accounts stay read-only for 12 months from the Inactive Date, then may be closed and deleted.
• Trial-only account: 30 days after the trial ends, then closed and deleted.

We keep invoices and payment records for as long as needed for accounting, legal, and dispute purposes. We keep support emails for as long as needed to resolve the request and maintain a record of the relationship. We keep server logs for as long as needed for security, troubleshooting, and abuse prevention.

Backups are rolling. Deleted data may remain in backups for a limited period before the backup is overwritten. Analytics data is kept for as long as needed for the analytics purpose, then deleted or aggregated.

The institute may export its data while the account is active and during the 12-month read-only period. Trial-only accounts can export during the 30 days. We may keep records longer if required by law or for legal claims.

We use HTTPS, hashed passwords, access controls, tenant isolation, backups, and monitoring to protect personal data. Only people who need access for support, security, or operations should have it.

No system is completely secure. If a breach affects an institute's data, we will notify that institute without undue delay after we confirm the breach and explain what happened and what we are doing.

Keep your administrator and student credentials secure. Tell us promptly if you suspect unauthorized access.

The service is sold to institutes and independent instructors, not to students. The institute creates student accounts and decides what data to add.

If a student is under 18, the institute must obtain parental or guardian consent and give the notices required by law. We do not market to students and do not knowingly collect data directly from children.

Students should contact their institute for access, correction, or deletion. If a student contacts us, we will forward the request and assist. The platform does not record the Speaking interview; the institute runs it offline.

When a paid institute becomes inactive, student accounts stay read-only for 12 months under the Terms. Trial-only student accounts are closed 30 days after the trial ends.

Subject to applicable law, you may ask for access to your personal data, correction, deletion, restriction, objection, or portability, and you may withdraw consent where we rely on it.

Institute administrators should contact us. Students should contact their institute first; if they contact us, we will forward the request and assist. We may need to verify identity before acting.

We aim to respond within 30 days. If a request is complex, we will explain why we need more time. We may keep data if the law requires it or if it is needed for a legal claim.

If you are unhappy with how we handled a request, contact us first. If it remains unresolved, you may have the right to complain to a competent authority under applicable law.

The marketing site does not use cookies, analytics, or advertising pixels. It is a static site with no forms or accounts.

The platform uses essential cookies or similar local storage for sign-in, security, and preferences. We may use analytics and error monitoring to understand usage and fix problems. Those tools may collect device, browser, IP address, usage, and error data, and may use cookies.

We do not use advertising cookies. If we use non-essential cookies, we will ask for consent where required and update this policy. You can block cookies in your browser, but essential cookies may be needed to sign in.

We do not use analytics to identify individual students for marketing. We do not sell analytics data.

We may update this policy. Material changes will be notified to the institute administrator by email before they take effect. The effective date and version are at the top of this page.

Privacy contact: IELTS Sim, Ambarkhana, Sylhet, Bangladesh. Email ieltssim@gmail.com or call 01356105469.

We are an online-only partnership and do not receive visitors at that address. Students should contact their institute first.

Read the Terms & Conditions.

Effective 29 October 2026. Version 1.0.

Back to top