Privacy Policy
Your privacy and the protection of student data is our highest priority. This policy explains how we collect, use, and protect personal information.
Quick Summary - What You Need to Know
1. Who We Are
Our ICO registration is currently in progress. In the meantime, we operate in full accordance with UK GDPR and the Data Protection Act 2018, and are fully committed to protecting the privacy and security of all users, particularly children and young people.
2. Information We Collect
Student Information
- Personal DetailsName, date of birth, year group
- Educational DataLearning progress, assessment scores
- Usage DataTime spent learning, pages accessed
Teacher & School Information
- Professional DetailsName, role, subject areas
- Contact InformationSchool email addresses
- Usage DataPlatform activity for improvement
3. How We Use Your Information
Educational Purposes
- • Personalised learning experiences
- • Tracking educational progress
- • Generating reports for teachers
- • Improving educational content
Communication
- • Important service updates
- • Responding to support requests
- • Teacher-student-parent communication
Legal Compliance
- • Meeting safeguarding obligations
- • Educational regulations compliance
- • Supporting school's mission
4. Data Storage & Security
Data Location
✓ All core platform data stored in the UK (AWS eu-west-2 London region)
✓ We do not transfer personal data outside the UK
✓ Secure cloud infrastructure with enterprise-grade protection
Security Measures
✓ Encryption in transit (TLS) and encryption at rest
✓ Multi-factor authentication
✓ Regular security audits
✓ Security controls aligned with ISO 27001 principles
5. Data Retention
Active Accounts
Data retained for duration of school relationship plus 2 years after account closure
Inactive Accounts
Automatically deleted after 2 years of inactivity
Backup Data
Retained for 90 days, then permanently deleted
System Logs
Maximum retention of 12 months for security purposes
6. Your Rights Under UK GDPR
Access
Request copies of personal data we hold
Rectification
Correct inaccurate or incomplete data
Erasure
Request deletion of personal data
Portability
Receive data in machine-readable format
Restriction
Limit how we process your data
Objection
Object to processing based on legitimate interests
For students under 13: Parents/guardians may exercise these rights on their behalf. To exercise any rights, contact us at drayslearninghub@consultant.com
Response Time: We will respond to all data subject requests within 30 days.
7. Special Protection for Children
Our Commitment
- Minimum data collection for educational purposes only
- Additional security measures for children's accounts
- Age-appropriate privacy information
- Close cooperation with schools for consent
No Tracking or Advertising
We use essential cookies only:
- Authentication cookies (to keep you logged in)
- Security cookies (protection against malicious activity)
- Functional cookies (remember preferences)
Essential and limited analytics cookies only, no advertising cookies.
Contact Us
Privacy Questions
Information Commissioner's Office
You have the right to lodge a complaint with the ICO if you believe we have not handled your personal data appropriately.
Website: ico.org.uk
Download Our Data Protection Summary
For a comprehensive overview of our data protection practices, download our official Data Protection Summary document.
Download PDF Summary