Core Revision
Last updated: 9 October 2026
1. Who we are
Core Revision (corerevision.com and the Core Revision app) is operated by Core Revision Ltd, a company registered in England and Wales, company number 16956954, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. We are the data controller for the personal information described in this policy, and we are registered with the Information Commissioner’s Office (registration number ZC217773). Contact: admin@corerevision.com.
2. What we collect
Account data — your name, email address and password (stored hashed).
Purchase data — what you bought, when, and payment status. Card details are handled entirely by our payment processor; we never see or store full card numbers.
Study data — your question attempts, scores and progress, used to power your revision hub and progress tracking.
Support and technical data — emails you send us, and standard technical logs (IP address, browser, pages visited) kept for security and performance. Because each membership is personal, we may also look at login activity — including IP addresses, approximate locations and concurrent sessions — to detect account sharing, as explained in section 2.2 of our Terms. We do this under our legitimate interest in protecting the service, and we tell you before taking any action on your account.
Feedback — answers you give in our optional member surveys, and your email address only if you choose to add it so we can reply.
3. Why we use it (lawful bases)
We use your information: to provide the service you bought and run your account (performance of a contract); to secure, maintain and improve the service, keep business records, and send you service emails about your account and occasional requests for feedback on the service (legitimate interests); to meet tax and accounting obligations (legal obligation); and to send marketing emails only if you opt in, which you can withdraw at any time (consent).
4. Who we share it with
Service providers who help us run Core Revision: our hosting provider, payment processors, and email service — each acting under contract and only as needed to provide their service. These currently include our web hosting provider, Stripe (payment processing — your card details are entered directly with the processor and are never stored on our servers), WordPress.com/Jetpack (site services and aggregate statistics), Google (Google Workspace, which carries our email, and Site Kit / Analytics — aggregate usage statistics) and WPForms (contact forms). Our website itself runs on WordPress with the MemberPress (memberships and purchase records), LearnDash (question banks, attempts and progress) and Complianz (a record of your cookie-consent choice) plugins; these run on our own hosting rather than sending your data to a third party, but we list them so you know where your data lives. We do not sell personal data. We will disclose data where the law requires it.
5. Where it is stored, and for how long
Data is stored on UK/EEA-based systems wherever possible; where a provider processes data outside the UK, we rely on UK-approved safeguards such as the UK Addendum to standard contractual clauses. We keep account and study data while your account is active and for up to 2 years after it closes; purchase records are kept for 6 years to meet tax obligations; support emails are kept for 2 years; survey answers are kept for 12 months.
6. Cookies
We use essential cookies to keep you logged in and operate the checkout, and — only with your consent — analytics cookies to understand how the site is used. We also use Burst Statistics, which runs on our own website and counts page visits without using cookies. It records visit statistics in aggregate only, does not identify you, and the data stays on our own server rather than being shared with a third party. You can manage non-essential cookies via the cookie banner or your browser settings.
7. Your rights
You can ask for a copy of your data, correction, deletion, restriction of processing, or portability; you can object to processing based on legitimate interests; and you can withdraw marketing consent at any time. Email admin@corerevision.com and we will respond within one month. If you are unhappy with how we handle your data, please tell us first at admin@corerevision.com: we will acknowledge your complaint within 3 working days and respond within one month (see our Complaints page). You can also complain to the Information Commissioner’s Office (ico.org.uk).
8. Changes
We will post any changes to this policy here and, for material changes, notify you by email.