Privacy Notice
Last updated: 27 August 2026
LNAT Prepper is operated by CR & MR Tuition.
We take your privacy seriously. This notice explains what personal information we collect when you use LNAT Prepper, why we use it, how long we keep it, who may process it on our behalf, and the rights you have over your information.
We have tried to write this notice clearly because LNAT Prepper may be used by applicants who are under 18 as well as adults.
Contact details
For data protection purposes, CR & MR Tuition is the data controller for the personal information described in this notice.
The information we collect
The information we collect depends on how you use LNAT Prepper.
Account information
If you create an account, we collect:
- your first name and last name;
- your email address;
- authentication information needed to secure your account;
- whether your email address has been verified; and
- information associated with your account and access level.
Passwords are handled through our authentication provider, Supabase. We do not have access to your password in readable form.
Optional profile information
If you choose to add it in Account settings, we may also store:
- your target universities; and
- your target LNAT score.
You do not have to provide this optional information in order to have an LNAT Prepper account.
Practice test and performance information
When you use LNAT Prepper while signed in, we may store information about your practice activity, including:
- the practice paper you attempted;
- your selected answers;
- questions you flagged;
- your position within an unfinished paper;
- when an attempt started and was submitted;
- the amount of time used;
- whether an attempt was paused;
- whether you selected standard time or the 25% extra-time setting;
- your score;
- the number of questions answered;
- question-category performance;
- information needed to resume an unfinished attempt; and
- results and performance information shown in your dashboard.
This information is used to provide the practice service, save your work, calculate your results and allow you to review your progress.
Extra-time setting
LNAT Prepper allows students to choose either the standard timing or a 25% extra-time setting.
We store which timing option you select so that the correct timer can be provided and your attempt can be interpreted properly.
We do not ask you to tell us why you use extra time, ask for medical evidence, or use your selection to infer that you have a disability or health condition.
Guest diagnostic information
You can start the free diagnostic without creating an account.
While you are taking a guest diagnostic, LNAT Prepper stores an in-progress copy of information such as your answers, flagged questions, current question, chosen timing and original deadline locally in your browser. This is used so that an accidental refresh or reopening of the page does not automatically destroy your unfinished work.
This in-progress browser record expires after 24 hours and is removed earlier when it is no longer needed.
After you submit a diagnostic as a guest, a separate result record may be stored locally in your browser for up to 7 days. It contains the information needed to attach that result to an LNAT Prepper account if you subsequently create an account or sign in.
If you claim the result, the attempt is transferred into your account and the temporary guest record is cleared. Clearing your browser data, using private browsing, or changing browser or device may remove the guest record before it is claimed.
Support and administration information
If you contact us, we may process the information you provide in your message and any information needed to investigate or respond to your enquiry.
LNAT Prepper also has administrative and audit functionality used to operate the service safely and provide support. This may generate records of relevant administrative actions or support activity.
Technical information
Like most online services, our systems and service providers may process technical information necessary to operate and protect the website. This may include information such as:
- IP address;
- browser and device information;
- date and time of requests;
- pages or routes requested;
- authentication/session information; and
- application errors and diagnostic information.
LNAT Prepper also uses Lovable's application error-reporting functionality. Where an application error occurs, information about the error and the page on which it occurred may be processed to help us identify and fix problems.
We do not use this technical information to make university admissions decisions about you.
Browser storage and similar technologies
LNAT Prepper uses browser storage and similar technologies where they are needed to make the service work.
This includes storage used to:
- keep authentication sessions working;
- remember an authenticated user where appropriate;
- protect against the loss of an unfinished guest diagnostic; and
- allow a submitted guest diagnostic to be attached to an account for a limited period.
Some of these technologies fall within the rules governing cookies and other storage and access technologies even where they are not traditional cookies.
We do not currently use LNAT Prepper for behavioural advertising or cross-site advertising tracking.
If we introduce optional analytics, advertising technologies or other non-essential storage in future, we will update this notice and provide any consent or objection controls required by law before using them.
Why we use your information and our lawful bases
We only process personal information where we have a lawful reason to do so.
Providing LNAT Prepper to you
We use account details, practice attempts, answers, results, timing information and related service data to create and manage your account, deliver practice papers, save progress, calculate results and provide the features you request.
Our lawful basis is that this processing is necessary to provide the service you have requested and, where applicable, to perform our contract with you.
Optional profile features
Where you choose to add target universities or a target score, we process that information so that it can form part of your account and preparation information.
Our lawful basis is our legitimate interest in providing the optional account and progress features requested by our users.
You can remove or change this information from your account.
Guest diagnostic recovery
We use temporary browser storage to avoid unnecessary loss of a guest's unfinished work and to allow a submitted guest result to be claimed into an account.
Our lawful basis under data protection law is our legitimate interest in providing a reliable practice-test service and avoiding accidental loss of work.
Separate rules apply to the use of browser storage technologies, and we use these technologies only where we consider the relevant legal requirements or exceptions to be satisfied.
Security, support and technical operation
We may process technical records, application errors, administrative records and support information where necessary to maintain the website, investigate problems, prevent misuse, protect accounts and respond to users.
Our lawful basis is our legitimate interest in operating a secure, reliable and properly supported educational service.
When relying on legitimate interests, we consider the impact of the processing on users, including users under 18, and do not use this basis where our interests are overridden by users' rights and interests.
Legal obligations
We may process or retain information where necessary to comply with a legal obligation, respond to a lawful request, establish or defend legal claims, or meet accounting, taxation or regulatory requirements.
Our lawful basis in these cases is compliance with a legal obligation or, where appropriate, our legitimate interests in establishing or defending legal rights.
Automated scoring and performance information
LNAT Prepper automatically marks practice answers and may generate scores and performance summaries from your responses.
This processing is used solely to provide educational practice and feedback.
LNAT Prepper does not make university admissions decisions, and your practice results are not automatically provided to universities.
We do not use solely automated decision-making that produces legal or similarly significant effects on you.
Who we share information with
We do not sell your personal information.
We do not provide your LNAT Prepper scores, answers or account information to universities for admissions purposes.
We use carefully selected technology providers where necessary to run the service. These currently include:
Supabase
Supabase provides database and authentication services used for LNAT Prepper accounts and stored practice information.
Lovable
Lovable provides website/application infrastructure and associated technical services, including application error reporting.
Email-delivery infrastructure
Service providers involved in sending necessary account emails may process your email address and information needed to deliver messages such as account-verification or password-reset emails.
Stripe
LNAT Prepper currently operates using free-account access. The application contains payment functionality that may be used if paid services are introduced. If you make a payment through Stripe in future, Stripe will process the payment information required to complete the transaction. LNAT Prepper does not receive your full card number.
We may also disclose information where required by law, to protect legal rights or security, or to professional advisers where reasonably necessary and subject to appropriate confidentiality obligations.
International processing
Some of the technology companies we use operate internationally, and personal information may in some circumstances be processed or accessed outside the United Kingdom.
Where a transfer of personal information from the UK requires a legal transfer mechanism, we require an appropriate basis for the transfer. Depending on the circumstances, this may include UK adequacy regulations or approved contractual safeguards such as the UK International Data Transfer Addendum or other safeguards permitted by UK data protection law.
You can contact us at catherinerobinsontuition@gmail.com if you would like more information about safeguards relevant to your personal information.
How long we keep your information
We do not keep personal information for longer than we need it.
Different information is kept for different periods depending on why we hold it.
Account, profile and practice information
We generally keep your account information, saved attempts and results while your LNAT Prepper account remains open so that you can continue to view your progress and previous results.
Guest in-progress diagnostic
Stored locally in the browser for no more than 24 hours, unless cleared earlier.
Submitted guest diagnostic awaiting claim
Stored locally in the browser for up to 7 days, unless claimed or cleared earlier.
Support, administration, security and error information
Kept only for as long as reasonably necessary to resolve the issue, protect the service, maintain an appropriate audit record, meet legal requirements or establish or defend legal claims.
Payment and accounting information
If paid services are introduced, records that we are legally required to retain for accounting, taxation, fraud prevention or legal purposes may be kept for the period required by law even if an account is later closed.
Where our service providers maintain temporary backups or technical logs, copies may remain within their normal backup or deletion cycles for a limited period after information is removed from the active service.
Deleting your LNAT Prepper account
You can delete your LNAT Prepper account directly from the Account settings page.
The Delete account function permanently removes your LNAT Prepper profile, saved attempts and results associated with the account. This cannot be undone.
Information that we are legally required to keep, or which exists temporarily in service-provider backups or security records, may not be deleted immediately where continued retention is lawful and necessary.
If you cannot access your account or need help with deletion, contact: catherinerobinsontuition@gmail.com
Your data protection rights
Depending on the circumstances and the lawful basis we rely on, UK data protection law gives you rights over your personal information.
- Right of access
- You can ask us for a copy of personal information we hold about you.
- Right to rectification
- You can ask us to correct information that is inaccurate or complete information that is incomplete.
- Right to erasure
- You can ask us to delete your personal information in circumstances where the law gives you that right. You can also delete your LNAT Prepper account directly through Account settings.
- Right to restriction
- You may have the right to ask us to restrict how we use your information.
- Right to data portability
- In some circumstances, you can ask us to provide information you gave us in a structured, commonly used and machine-readable format, or transfer it to another organisation.
- Right to object
- Where we rely on legitimate interests, you have the right to object to our use of your personal information. We will consider your objection and stop processing unless we have compelling legitimate grounds to continue or the processing is needed for legal claims.
- Right to withdraw consent
- If we rely on your consent for a particular use of personal information in future, you can withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
These rights do not apply in exactly the same way in every situation.
To exercise a data protection right, email: catherinerobinsontuition@gmail.com
We may need to ask for enough information to confirm your identity before acting on a request.
We will normally respond to a valid data protection rights request without undue delay and within one month, subject to the circumstances and any lawful extension.
If you are under 18
LNAT Prepper is designed for people preparing for university law admissions and may therefore be used by students who are under 18.
We aim to collect only the information needed to provide the service and to keep users' information private by default.
LNAT Prepper does not currently provide:
- public student profiles;
- social messaging between students;
- behavioural advertising;
- location tracking for advertising; or
- sale of users' personal information.
If you are under 18 and anything in this notice is unclear, you can contact us at catherinerobinsontuition@gmail.com, or ask a parent, guardian, teacher or another trusted adult to help you understand it.
Your data protection rights belong to you even if you are under 18.
Keeping your information secure
We use technical and organisational measures intended to protect personal information against unauthorised access, alteration, disclosure or loss.
These include authenticated accounts, access controls and HTTPS-encrypted connections, together with security measures provided by our technology suppliers.
No online service can guarantee absolute security. If we become aware of a personal-data breach, we will assess it and take the steps required by data protection law, including notifying affected users and the ICO where legally required.
Where we get your information
Most personal information we process comes directly from you when you:
- create or update an account;
- sit a practice test;
- select a timing option;
- contact us; or
- use the website.
Other information may be generated automatically through your use of the service, such as test results, timing records and technical logs.
If paid services are introduced, we may also receive limited information from Stripe confirming matters such as whether a payment succeeded and the access or entitlement associated with that payment.
Is providing information compulsory?
You need to provide certain information, such as an email address and the account-registration details requested on the sign-up form, if you want to create an LNAT Prepper account.
You need to submit answers if you want the service to mark a practice paper and provide a result.
Other information, including target universities and a target LNAT score, is optional.
You can use the free diagnostic as a guest without creating an account, although some account features such as saved history and dashboard progress require an account.
Complaints
If you have a question or concern about how we use your personal information, please contact us first:
CR & MR Tuition
We will try to resolve your concern.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Changes to this Privacy Notice
We may update this Privacy Notice when LNAT Prepper changes, when we introduce new features or service providers, or when legal requirements change.
The date at the top of this page will show when the notice was last updated.
If we make a significant change to how we use information that users have already provided, we will take reasonable steps to bring the change to their attention before the new use begins where required.
