Return to test
Privacy and data

Privacy policy

This policy explains the information handled to deliver purchases, practice assessments, support and verifiable records.

Effective 17 August 2026

1. Scope and controller

This policy applies to the operator of Marlins English Test — Practice. The service is independent and is not operated by or affiliated with Marlins. Operator contact is available through Contact Support; legally required business identity and address details will be displayed before live international sales begin.

2. Information collected

  • Candidate profile: name, rank, date of birth, nationality, Seaman's Book number, email and mobile number.
  • Assessment data: selected questions, answers, play counts, current section and question, answered count, time remaining, start and last-activity timestamps, completion, score, section performance, pass standard and verification code.
  • Purchase and access data: plan, price, currency, order and payment references, status, provider failure details, credits, expiry, hashed access codes, email-verification challenges and session timestamps. Verification codes and session tokens are stored in protected hashed form.
  • Communications: optional marketing consent, its timestamp, and delivery or suppression information needed to honour subscription choices.
  • Support data: contact details, category, message, references and any administrative access adjustment supplied or approved for your case.
  • Technical data: browser, device, IP/network and security logs made available by hosting, payment or protection providers.
  • Browser storage: candidate details are saved automatically on the device, along with an unfinished attempt, recent-question history and limited purchase state.

3. Purposes

We use information to create and verify orders; diagnose payment failures; issue and count credits; deliver, resume, monitor and score tests; show authorised administrators whether an attempt is active and its latest recorded progress; distinguish demo candidates from purchasers; reduce repeat questions; generate and verify performance records; review candidate answers; prevent misuse; maintain security; answer support and privacy requests; keep accounting and dispute records; analyse service reliability; and comply with law. We send optional practice tips or offers only where the candidate has chosen to receive them.

4. Legal grounds

Depending on the jurisdiction, processing is based on performing the requested service or contract, taking steps before purchase, legitimate interests in operating and securing the service, complying with legal obligations, and consent where required. Automated scoring creates a practice result only and does not make a legal, employment or official-certification decision.

5. Device saving and cross-device access

Candidate details are saved automatically in the current browser without an expiry date, so the form can be filled on return. They remain until the browser or device storage is cleared. Purchased access and eligible unfinished attempts can also be restored on another browser through Access My Tests using a one-time email code or the private backup access code. A secure, HTTP-only access session may remain on a verified device for up to 30 days. Clear browser data and disconnect the account before leaving a shared device.

6. Payments

Razorpay receives and processes payment credentials under its own privacy terms. This service stores payment references and status but does not receive or store full card numbers, UPI PINs, OTPs or banking passwords. Never send those secrets through support.

7. Recipients and disclosure

Information may be accessed by authorised service administrators and providers used for hosting, database, security, payment, transactional email, error monitoring or support. The transactional email provider receives the destination email and message needed to send purchase confirmations, backup access information and verification codes. We do not sell personal information. We may disclose information to professional advisers, payment providers, acquiring banks, lawful authorities or counterparties to a business transfer when reasonably necessary and legally permitted.

8. International processing

Providers may process information in countries other than yours. Where required, appropriate contractual or legal safeguards will be used. Local laws may permit lawful access by public authorities.

9. Retention and deleted-result bin

Candidate results and support records are retained only as long as reasonably needed for service, verification, disputes, security and legal obligations. Email verification codes expire after 10 minutes, are single-use and are subject to request and attempt limits. Candidate access sessions normally expire after 30 days. When an administrator deletes a test result, it enters a restricted bin, is removed from ordinary result lists and public verification, and is scheduled for permanent deletion after 30 days unless restored. Related payment, accounting, fraud-prevention or legal records may be retained separately where required and are not removed merely because an assessment result is deleted. Transaction and accounting records may be retained for up to eight years where required. Browser-saved data remains until it is cleared, replaced or expires. We may anonymise information for longer-term statistical use.

10. Security

We use access controls, server-side payment verification, rate-limited one-time codes, hashed bearer credentials, expiring secure sessions, limited payment data, signed attempt access, audited support adjustments and verifiable result codes. No internet or storage system is completely secure. You are responsible for device and email security and for not sharing one-time codes, backup access codes or administrator credentials.

11. Rights and requests

Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent, and may complain to a competent data-protection authority. Marketing consent can be withdrawn through the unsubscribe method in a campaign or through Contact Support. Use Contact Support and provide enough information to locate and verify the record. We may retain limited data where law, fraud prevention, accounting or dispute defence requires it.

12. Children

This professional maritime service is not directed to children. Do not submit a child's information. If such information is identified, contact support for review.

13. Changes and questions

We may update this policy as the service, providers or law change. Material changes will be published with a new effective date. Privacy questions and requests can be submitted through Contact Support.