Skip to content

Legal

Privacy notice

This notice explains what personal data Kestrel collects, why, and the choices families have. It is written with children's privacy in mind.

Last updated: 13 October 2026

Company details

Operator
FlightDeck Aptitude Ltd
Registration
Registered in Scotland. Company number SC904044.
Registered office
36 Rannoch Drive, Glasgow, United Kingdom, G61 2LF

Company registration identifies the operator. It does not establish educational effectiveness or any approval by an exam board or school.

Companies House recordContact the company

FlightDeck Aptitude Ltd operates Kestrel at kestrelpractice.co.uk and is the data controller. For privacy questions or requests, email privacy@kestrelpractice.co.uk or use the contact form.

We collect the parent's name, email address, account settings, purchases and support messages, so we can run the account, take payments and help when something goes wrong.

For each child we store only what practice needs: a first name or nickname, school year, an optional exam month and the kind of school being aimed for, plus answers, timings and scores from practice. We never ask for a child's email address, surname, date of birth, photo or school.

Practice and test pages do not load advertising or marketing tracking. Product analytics run only on parent-facing pages and only with consent where required. We do not use children's data for advertising, marketing profiles or comparisons with other children.

To provide practice, save progress, build the daily plan, produce reports for parents, process purchases, answer support requests and improve content quality. We do not sell personal data.

Card payments are processed by Stripe. FlightDeck Aptitude Ltd never sees full card numbers. We receive payment status and references needed to activate purchases.

Parents can ask to access, correct or delete their family's data, including a child's profile and practice history. Email privacy@kestrelpractice.co.uk. We will respond within one month.

We keep account and practice data while the account is open, and for a reasonable period afterwards where needed for billing records or legal obligations. Removing a child profile hides it from the account; ask us if you want the history deleted as well.

FlightDeck Aptitude Ltd (company number SC904044) is the data controller for this service. Registered-office and contact details are listed on this page.

We process account, training, and purchase data where necessary to perform our contract with you; security and service-improvement data for legitimate interests; records where required by law; and optional analytics or marketing only where consent is the appropriate basis. You may withdraw consent without affecting earlier lawful processing.

Service providers may include Supabase for authentication and database hosting, Stripe for payments, Resend for email delivery, Vercel for hosting and optional analytics, PostHog for consented product analytics, and hCaptcha for abuse prevention. Where data crosses borders, we use the provider's applicable transfer safeguards and contractual protections.

Contact privacy@kestrelpractice.co.uk first so we can investigate. Depending on where you live, you may also complain to your local data-protection authority.

Need help?

Questions about these policies? Email privacy@kestrelpractice.co.uk or use the contact page.

Contact us