PRINCE2 Exam Prep · operated by PRAXIS LABS BV, trading as Thryzen Consult · last updated 29 July 2026
This policy describes exactly what this service collects, why, and who else sees it. It describes what the software actually does — not a template. If something here does not match what you experience, tell us and we will correct one or the other.
PRAXIS LABS BV, trading as Thryzen Consult — Tervurenlaan 90 A b0, 1040 Etterbeek, Belgium. Company number 1038.806.850. We are the controller for the personal data described below, under the GDPR (Regulation (EU) 2016/679).
Questions, or any request under the rights listed further down: use the contact page. We answer within 30 days, usually far sooner.
| Data | Why | Legal basis |
|---|---|---|
| Your email address | It is your account. Sign-in works by emailing you a one-time link, so without it there is no way to let you back in. Also used for your order confirmation and for service messages about the product you bought. | Performance of a contract (Art. 6(1)(b)) |
| Study progress — which questions you answered, right or wrong, and when | This is the product. The readiness dashboard and the drilling schedule are computed from it; without it the app cannot tell you what to revise. | Performance of a contract (Art. 6(1)(b)) |
| Purchase record — what you bought, when, and the payment reference | To grant access to what you paid for, and because Belgian law requires us to keep accounting records. | Contract, and legal obligation (Art. 6(1)(c)) |
| A session cookie | To keep you signed in between pages. It is strictly necessary for the app to function, so no consent banner is shown for it. | Strictly necessary (ePrivacy) |
Your card details never reach us. Payment happens on Stripe's own hosted checkout. We receive confirmation that a payment succeeded and a reference for it; we never see or store your card number.
Stated plainly, because these are the things people reasonably assume are happening:
Only the suppliers the service genuinely runs on. Each is a processor acting on our instructions, under a data-processing agreement.
| Processor | What for | Where |
|---|---|---|
| Stripe | Taking payment and holding the payment record | EU / US, under Stripe's standard contractual clauses |
| Railway | Hosting the application and its database | EU region |
| Our email provider | Delivering sign-in links and order confirmations | EU / US, under standard contractual clauses |
Where a processor is outside the EEA, transfers rely on the European Commission's Standard Contractual Clauses.
Under the GDPR you can ask us to: give you a copy of your data, correct it, delete it, restrict what we do with it, object to processing, or send it to another provider in a portable format. Exercise any of these through the contact page — no particular form of words is needed.
Deleting your account deletes your email and your study progress. It does not delete the accounting record of your purchase, which we are legally required to keep for seven years.
If you think we have handled your data badly, you are entitled to complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels — dataprotectionauthority.be. We would rather you told us first.
Traffic is encrypted in transit (HTTPS). We do not store passwords at all — sign-in is by one-time emailed link, so there is no password to leak. Access to the production database is limited to the operator.
This is a professional certification study aid and is not directed at children. We do not knowingly collect data from anyone under 16.
If this policy changes materially we will update the date at the top and, where the change affects how we use data you have already given us, email you about it rather than relying on you to re-read this page.
Terms & FAQ · Contact · Home