Privacy Policy

1. Data Controller

PromptRank and Busigurus ("we", "us", "our") share this privacy policy. Busigurus is a trading name of 3D CODED LIMITED. Data controller: 3D CODED LIMITED (company no. 12155468), Office 7, Block B1, Chorley Business & Technology Centre, Euxton Lane, Chorley, PR7 6TE. Contact hello@3dcoded.com for data-protection enquiries. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

3. How We Use Your Data

• To provide and maintain your account
• To process and grade your simulation submissions
• To issue and verify your certification credentials
• To process payments via our payment processor
• To communicate service updates and important notices
• To detect and prevent fraud or abuse
• To improve our services based on aggregated, anonymised usage data

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contract: Processing necessary to provide our services to you
• Consent: Where you have given explicit consent (e.g., marketing)
• Legitimate Interests: For fraud prevention and service improvement
• Legal Obligation: Where required by law

5. Data Sharing

We share data only with:

• Supabase: Database and authentication infrastructure (EU-hosted)
• Stripe: Payment processing (PCI-DSS compliant)
• Netlify: Application hosting

We do not sell your personal data to third parties.

6. Public Verification

When you obtain a certification, a public verification page is created that anyone with the link can open. It displays only the name you chose to show (your full name, or your initials if you picked that option), your certificate number, rank band, issue date and issuer. Your email address and other account details are never shown. The name is fixed when the credential is issued; we do not check ID, so employers are told to confirm it with you. To change or remove it, contact hello@3dcoded.com or delete your account.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., financial records for 7 years).

8. Your Rights (UK GDPR)

To exercise these rights, use the "Delete Account" function in your dashboard or contact us at hello@3dcoded.com

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including: encryption in transit (TLS), encryption at rest, Row Level Security policies, and regular security audits. However, no system is 100% secure—please protect your account credentials.

10. International Transfers

Our primary infrastructure is hosted in the EU. Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

11. Cookies

We do not use analytics or tracking cookies; only essential cookies for sign-in.Simulation scoring is deterministic (rule-based, no AI model) and runs on our server.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notification. The "Last updated" date at the top indicates when the policy was last revised.

13. Contact & Complaints

For privacy questions or to exercise your rights: hello@3dcoded.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk