Skip to main content
PSR Train

Privacy Policy

Last updated: 30 October 2026

1. Who we are

PSR Train ("we", "our", "us") operates the training platform at psrtrain.com. The data controller for personal data collected through the Service is Defencelegalservices Limited (company number 09900871), registered with the UK Information Commissioner's Office under registration number ZA198500. PSR Train is operated by DEFENCELEGALSERVICES LIMITED, a company registered in England and Wales. Company number 09900871. VAT registration number: GB 267 237 387. ICO registration number ZA198500. Contact: robertcashman@defencelegalservices.co.uk.

You can contact us about privacy at robertcashman@defencelegalservices.co.uk or via the contact page.

2. Data we collect

  • Account data: name (if provided), email, hashed password, authentication identifiers.
  • Training data: practice answers, progress, scores, time spent, preferences.
  • Access records: your access level (for example free access or admin). PSR Train is free and does not take payments, so we do not collect billing or payment card details.
  • Technical data: IP address, device and browser information, session cookies, and basic usage logs used for security, fraud prevention, and reliability.
  • Optional analytics data (only if you accept analytics): aggregated page-view and page-performance measurements collected by Vercel Web Analytics and Vercel Speed Insights. See section 9.
  • Communications: messages you send through the contact form or by email.

3. Lawful bases (UK GDPR, Article 6)

  • Contract: to provide your account, deliver the training service, and respond to support requests.
  • Legitimate interests: to keep the Service secure, prevent fraud, debug errors, understand usage (aggregated), and improve the product.
  • Legal obligation: to keep records we are required to keep by law and to respond to lawful requests from authorities.
  • Consent: for optional analytics (Vercel Web Analytics and Speed Insights) and any optional communications. You can withdraw consent at any time from the Cookie Policy page.

4. How we use your data

  • To create and operate your account and deliver the training features you use.
  • To track your practice progress and show you personalised statistics.
  • To send service emails (account verification, password reset, important service changes).
  • To protect the Service against abuse, fraud, and unauthorised access.
  • To improve the Service in aggregate form. We do not sell your personal data.

5. Who we share data with (sub-processors)

We use a limited number of trusted third parties to run the Service. Each is bound by a written data-processing agreement and processes data only on our instructions:

  • Supabase: authentication and database hosting.
  • Vercel: application hosting and edge delivery.
  • Resend: transactional email (contact form, account emails).
  • Vercel Web Analytics (only if you accept analytics): aggregated, cookieless page-view statistics (pages visited, referrer, country, device and browser type).
  • Vercel Speed Insights (only if you accept analytics): cookieless page performance measurements (load times and Core Web Vitals).
  • Google Analytics 4 (only if you accept analytics): aggregated usage statistics (pages visited, referrer, device and browser type); sets first-party cookies (_ga and _ga_<measurement-id>) to distinguish users and sessions.

Some of these providers may process data outside the UK. Where that is the case, we rely on recognised safeguards such as UK-approved Standard Contractual Clauses or adequacy decisions.

6. How long we keep data

  • Account and training data: for as long as your account is active, plus up to 12 months after closure (so you can reopen your account and for audit).
  • Support and contact messages: up to 24 months, then deleted.
  • Server and security logs: typically up to 90 days.

7. Your rights

Under UK GDPR you have the right to: access your data; have inaccurate data corrected; ask us to delete data ("right to erasure") where it applies; restrict or object to processing; port certain data to another provider; and withdraw consent at any time (without affecting earlier processing). To exercise any of these rights, contact robertcashman@defencelegalservices.co.uk.

If you are not satisfied with our response you can complain to the UK Information Commissioner's Office (ICO) at https://ico.org.uk/make-a-complaint.

8. Security

Data you send through the Service is transmitted over encrypted HTTPS connections. Accounts are protected by your password (and any security features offered by our authentication provider). Access to our admin area is limited to authorised staff. We rely on reputable hosting and database providers and keep dependencies up to date. No online service is completely secure; please use a strong, unique password.

9. Cookies

We use a small number of strictly necessary cookies and similar browser storage (for login, session, security, and to remember your cookie choice). These do not need consent. If you click Accept in the cookie banner or preferences panel, we also load Vercel Web Analytics, Vercel Speed Insights, and Google Analytics 4. Vercel's tools are cookieless; Google Analytics 4 sets first-party cookies (_ga and _ga_<measurement-id>) and only loads after you consent. Nothing in this group loads if you Reject or make no choice. We do not use advertising or cross-site tracking. See our Cookie Policy for details and to change your choice.

10. Children

The Service is intended for professional adult use. We do not knowingly collect personal data from anyone under 18. If you believe we hold data about a child, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or a prominent notice on the Service before they take effect.