Privacy Policy

HSKTEST AI operates https://hsktest.ai/ and is the data controller of your personal data. Our UK establishment is at Central Court, 25 Southampton Buildings, London WC2A 1AL, United Kingdom. Telephone: (+44) 0203 856 8180. Email: [email protected].

Please contact us first if you have questions about this policy or wish to exercise the rights described below. Our global office details are also listed on the Contact Us page.

We may collect the following categories of personal data:

Account and identity data: name, email address, mobile number, login credentials, language preference and account identifiers.

Learning and assessment data: answers, incorrect items, learning progress, mock-exam results, essay text, speaking recordings, AI scores and feedback, and learning reports.

Technical and log data: Internet Protocol (IP) address, browser type, Internet Service Provider (ISP), date/time stamp, referring/exit pages, click counts, and device or operating-system information. This information is used to analyse trends, administer the website, protect security and understand how the site is used. IP addresses in logs are not used on their own to identify you, but may become personal data when combined with account information.

Cookies and similar technologies: browsing preferences, login state, pages visited and advertising identifiers. See “Cookies and similar technologies” below.

Payment data: order number, plan, payment status and billing contact details. Full card numbers and other sensitive payment details are handled by regulated payment providers. We do not store complete card numbers.

Communications: information you submit through forms, email or customer support.

Institution and event data: organisation name, contact person, role, contact details, project information, and, where needed for an event, name, date of birth, exam scores and education background.

Community interaction data: if you join an official account or community, you may provide your name, mobile number and email. Comments, likes and shares may also be recorded to keep the community in order and improve recommendations.

We do not intentionally collect special-category personal data (such as health, racial or religious information) and we do not ask you to provide it.

Directly from you: when you register, sign in, take assessments, practise, purchase, use registration guidance, join a community, apply for cooperation or events, or contact us.

Automatically: when you visit the website, we and our authorised providers record technical information through log files, cookies, pixels and similar technologies. https://hsktest.ai/ follows standard log-file practices. These files record visits as part of normal hosting operations and are used for hosting, security and analytics.

From third parties: payment providers return payment results. With your consent, analytics and advertising partners such as Google may provide aggregated or de-identified usage data.

If you click “Register now” and are directed to an official third-party registration platform, that platform controls the registration data you submit there. We only record operational information such as click time and IP address to improve registration guidance.

Under the UK GDPR we process personal data only where we have a lawful basis:

Providing accounts, assessments, practice, AI feedback, learning reports and customer support: performance of a contract with you, or steps taken at your request before entering a contract.

Keeping the website secure, preventing abuse and diagnosing faults: legitimate interests (keeping the service safe and reliable).

Analysing traffic and improving content or performance (including analytics cookies such as Google Analytics): consent; where appropriate, aggregated analytics may also rely on legitimate interests.

Serving advertising related to HSK exams and learning products (including Google / DoubleClick DART cookies): consent.

Sending marketing communications: consent. You may withdraw it at any time.

Reviewing institutional cooperation and running events: contract or legitimate interests.

Complying with law and responding to regulators or legal claims: legal obligation.

Improving products and learning content using de-identified or aggregated data where reasonable: legitimate interests.

You may refuse to provide information that is not required. If we cannot provide a service without certain data (for example creating an account or completing payment), we will explain this at the time of collection. Using the website is not consent to every processing activity. Where we rely on consent, we will ask for it separately. You may withdraw consent at any time; withdrawal does not affect processing that already took place.

https://hsktest.ai/ uses cookies and web beacons to store visitor preferences, record pages visited, and customise content based on browser type or other information, in order to improve your experience.

We group cookies as follows:

Essential cookies: these let you browse the site, set privacy preferences, sign in or complete forms. Without them, core services you request may not work. These cookies usually do not require prior consent.

Performance / analytics cookies: these help us understand visit times by region, time on page and click streams so we can improve layout and performance. These cookies are set only with your consent.

Marketing cookies (targeting or advertising cookies): with your explicit consent, we may share processed cookie data with advertising partners to show ads related to HSK exams and learning products.

Under PECR, we seek consent before setting non-essential cookies. You can also refuse or delete cookies in your browser settings. More detail on cookie controls is available on each browser’s official website.

Our advertising partners may use cookies and web beacons on this website. Our current partners include Google. Each partner has its own privacy policy.

DoubleClick DART Cookie → Google, as a third-party vendor, uses cookies to serve ads on https://hsktest.ai/. → Google’s use of the DART cookie enables it to serve ads based on visits to https://hsktest.ai/ and other sites on the Internet. → You can opt out of the DART cookie in Google’s Ads and Content Network privacy policy: https://www.google.com/privacy_ads.html

These third-party ad servers or networks send ads and links directly to your browser and may automatically receive your IP address. They may also use cookies, JavaScript or web beacons to measure ad effectiveness and personalise ads. https://hsktest.ai/ has no access to or control over cookies used by third-party advertisers.

You should read those third parties’ privacy policies for more information and for instructions on disabling certain ad options. This policy does not apply to other advertisers or websites, and we cannot control their activities. A list of related policies is available at https://www.privacypolicyonline.com/privacy-policies

Google Privacy Policy: https://policies.google.com/privacy Your Online Choices (Europe / UK): https://www.youronlinechoices.com/

We do not sell your personal data. We share it only where necessary:

Internal sharing: operations, technology, support and event teams share data on a need-to-know basis under confidentiality rules. For example, user feedback may be shared with engineering to improve content delivery, and event organisers may share participant details with judges.

Service providers (processors): cloud hosting, analytics, payments, email delivery, and AI scoring or content-generation vendors, who may process data only on our instructions.

Advertising and analytics partners: only with your consent, we share data needed for analytics or advertising with partners such as Google.

Legal requirements: where required by law, or where necessary to protect users, the public or our legitimate rights.

Institutional partners: only the information needed for a cooperation project, minimised and protected by appropriate safeguards.

We process data in the United Kingdom, the European Economic Area, China and other countries where we or our providers operate. When we transfer personal data of UK or EEA users to a country that has not been recognised as providing adequate protection (including China), we use appropriate safeguards required by the UK GDPR. These may include the UK International Data Transfer Agreement (IDTA), the EU Standard Contractual Clauses (SCCs) with the UK addendum, or another legally permitted mechanism.

If you would like a copy of the relevant safeguards for a specific transfer, contact [email protected].

We keep personal data only for as long as needed for the purposes collected, and then delete or anonymise it:

Account and learning records: for the life of your account, and for a reasonable period afterwards to handle disputes, meet legal duties or protect security.

Log files: usually no longer than 12 months, unless a longer period is needed for security or legal reasons.

Marketing data: until you withdraw consent or unsubscribe.

Order and financial records: for the period required by tax and accounting law.

Event and cooperation applications: for a reasonable period after the event ends or the cooperation concludes.

Under the UK GDPR you have the following rights, depending on the circumstances:

Right to be informed: to know how we use your personal data. Right of access: to obtain a copy of the personal data we hold about you. Right to rectification: to correct inaccurate or incomplete data. Right to erasure: to ask us to delete data in certain cases. Right to restrict processing: to limit how we use your data in certain cases. Right to data portability: to receive data you provided in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible. Right to object: to processing based on legitimate interests, and to direct marketing (including related profiling) at any time. Right to withdraw consent: where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out. Rights related to automated decision-making: not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects.

We will respond to a valid request within one month, or longer where the law allows for complex cases. We may need to verify your identity. These requests are usually free. We may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive.

If you are unhappy with our response, you have the right to complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/ or telephone +44 303 123 1113. We would appreciate the chance to address your concern first.

We use artificial intelligence to score speaking, writing and practice, and to provide pronunciation feedback, corrections and study suggestions. This processing is used to deliver the learning services you request. It does not usually involve a solely automated decision that produces legal or similarly significant effects on you (for example, automatically refusing an account or making a binding admissions decision). Official HSK registration and scores are handled by the relevant exam body and are not determined by this website’s AI scoring.

If you believe an automated comment is wrong, email [email protected] and we will, where reasonable, provide a human review or explanation.

We do not knowingly collect personally identifiable information from children under 13. This aligns with the UK Data Protection Act 2018 age of consent for information-society services. If a parent or guardian believes we hold personal data of a child under 13, please contact [email protected] immediately and we will delete it from our records as soon as possible.

We strongly recommend that anyone under 18 uses our services with the guidance of a parent or legal guardian. Users aged 13 to 17 should read and understand this policy with a guardian before submitting personal data.

We use technical and organisational measures appropriate to the risk, including encrypted transmission, access controls, least-privilege permissions and professional hosting. No internet transmission or electronic storage is completely secure. We keep improving our measures, but we cannot give an absolute guarantee against incidents outside our reasonable control. If a personal-data breach occurs that must be notified by law, we will handle it in line with the UK GDPR.

This Privacy Policy applies to our online activities and to visitors to this website in relation to information shared or collected on the website. It does not apply to information collected offline or through channels other than this website, and it does not apply to third-party websites, apps or advertising networks, even if they are linked from or shown on this site. Those third parties have their own privacy policies.

We may update this policy from time to time. The updated version will be published on this page and takes effect from the “Last updated” date. If a change materially affects your rights, we will provide additional notice on the website or by email where appropriate. We recommend that you review this page regularly. Continued use of the website means you have been informed of the updated policy. Where we rely on consent, we will seek fresh consent if the law requires it.

If you have questions, requests or complaints about this Privacy Policy or your personal data, please contact:

Email: [email protected] UK address: Central Court, 25 Southampton Buildings, London WC2A 1AL, United Kingdom Telephone: (+44) 0203 856 8180

You can also use the contact button at the bottom of this page or visit our Contact Us page.

ICO complaints: https://ico.org.uk/make-a-complaint/