TODO: describe the data collected via the placement quiz and email capture forms (email address, quiz answers, placement level, submission date, IP/consent timestamp).
TODO: describe use of data for course delivery, marketing emails (with consent), and support. Name the processor (Brevo) and note contacts are added via a double opt-in flow.
TODO: standard UK GDPR rights language — access, rectification, erasure, objection/unsubscribe, and how to exercise them (contact email TODO).
TODO: how long contact and quiz data is retained.
TODO: privacy contact email / data controller details.