Company details
- Operator
- FlightDeck Aptitude Ltd
- Registration
- Registered in Scotland. Company number SC904044.
- Registered office
- 36 Rannoch Drive, Glasgow, United Kingdom, G61 2LF
Company registration identifies the operator. It does not establish educational effectiveness or any approval by an exam board or school.
Who we are
FlightDeck Aptitude Ltd operates Merlin Practice at merlinpractice.com and is the data controller. For privacy questions or requests, email privacy@merlinpractice.com or use the contact form.
Data about parents
We collect the parent's name, email address, account settings, purchases and support messages, so we can run the account, take payments and help when something goes wrong.
Data about children
Before accounts open, practice results stay in your own browser and are not sent to us. When family accounts open, for each child we will store only what practice needs: a first name or nickname, the practice level, and answers and timings. We never ask for a child's email address, surname, date of birth, photo or school.
Privacy by default for children
Practice and test pages load no advertising or marketing tags and send no analytics, whatever cookie choices were made elsewhere on the site. Product analytics run only on parent-facing pages, and only with consent where required. We do not use children's data for advertising, marketing profiles or comparisons with other children.
How we use data
To provide practice, save progress, produce reports for parents, process purchases, answer support requests and improve content quality. We do not sell personal data.
Payments
Card payments are processed by Stripe. FlightDeck Aptitude Ltd never sees full card numbers. We receive payment status and references needed to activate purchases.
Your rights
Parents can ask to access, correct or delete their family's data, including a child's profile and practice history. Email privacy@merlinpractice.com. We will respond within one month.
Families outside the UK
We process personal data under UK data protection law (UK GDPR and the Data Protection Act 2018). Many of our families live in the Gulf. Where the law of your country gives you further rights over your data, such as the UAE's Federal Decree-Law No. 45 of 2021 on the protection of personal data, contact us and we will help you use them.
Retention
We keep account and practice data while the account is open, and for a reasonable period afterwards where needed for billing records or legal obligations. Removing a child profile hides it from the account; ask us if you want the history deleted as well.
Controller
FlightDeck Aptitude Ltd (company number SC904044) is the data controller for this service. Registered-office and contact details are listed on this page.
Legal bases
We process account, training, and purchase data where necessary to perform our contract with you; security and service-improvement data for legitimate interests; records where required by law; and optional analytics or marketing only where consent is the appropriate basis. You may withdraw consent without affecting earlier lawful processing.
Processors and international transfers
Service providers may include Supabase for authentication and database hosting, Stripe for payments, Resend for email delivery, Vercel for hosting and optional analytics, PostHog for consented product analytics, and hCaptcha for abuse prevention. Where data crosses borders, we use the provider's applicable transfer safeguards and contractual protections.
Complaints and supervisory authorities
Contact privacy@merlinpractice.com first so we can investigate. Depending on where you live, you may also complain to your local data-protection authority.
Need help?
Questions about these policies? Email privacy@merlinpractice.com or use the contact page.
Contact us