Privacy Policy

Your privacy and the protection of student data is our highest priority. This policy explains how we collect, use, and protect personal information.

Last Updated: January 2025Effective Date: January 2025

Quick Summary - What You Need to Know

Educational Purpose Only: We only collect data that helps students learn
Data Security: Data processed securely with appropriate protection measures
No Advertising: No commercial use of student data
Your Rights: You can see, correct, or delete data anytime
School Control: Schools control all data - we just process it for them
Transparent: Clear information about what we collect and why

1. Who We Are

Company: Dray's Learning Hub Ltd

Contact: drayslearninghub@consultant.com

Our ICO registration is currently in progress. We are fully committed to protecting the privacy and security of all users, particularly children and young people, in accordance with UK GDPR and the Data Protection Act 2018.

2. Information We Collect

Student Information

  • Personal Details: Name, date of birth, year group
  • Educational Data: Learning progress, assessment scores
  • Usage Data: Time spent learning, pages accessed

Teacher & School Information

  • Professional Details: Name, role, subject areas
  • Contact Information: School email addresses
  • Usage Data: Platform activity for improvement

3. How We Use Your Information

Educational Purposes

  • • Personalized learning experiences
  • • Tracking educational progress
  • • Generating reports for teachers
  • • Improving educational content

Communication

  • • Important service updates
  • • Responding to support requests
  • • Teacher-student-parent communication

Legal Compliance

  • • Meeting safeguarding obligations
  • • Educational regulations compliance
  • • Supporting school's mission

4. Data Storage & Security

Data Location

All data stored in the UK (AWS eu-west-2 London region)

• No data transferred outside the UK

• Secure cloud infrastructure with enterprise-grade protection

Security Measures

• End-to-end encryption for all data

• Multi-factor authentication

• Regular security audits

• ISO 27001 compliant infrastructure

5. Data Retention

Active Accounts

Data retained for duration of school relationship plus 2 years after account closure

Inactive Accounts

Automatically deleted after 2 years of inactivity

Backup Data

Retained for 90 days, then permanently deleted

System Logs

Maximum retention of 12 months for security purposes

6. Your Rights Under UK GDPR

Access

Request copies of personal data we hold

Rectification

Correct inaccurate or incomplete data

Erasure

Request deletion of personal data

Portability

Receive data in machine-readable format

Restriction

Limit how we process your data

Objection

Object to processing based on legitimate interests

For students under 13: Parents/guardians may exercise these rights on their behalf. To exercise any rights, contact us at drayslearninghub@consultant.com

Response Time: We will respond to all data subject requests within 30 days.

7. Special Protection for Children

Our Commitment

  • • Minimum data collection for educational purposes only
  • • Additional security measures for children's accounts
  • • Age-appropriate privacy information
  • • Close cooperation with schools for consent

No Tracking or Advertising

We use essential cookies only:

  • • Authentication cookies (to keep you logged in)
  • • Security cookies (protection against malicious activity)
  • • Functional cookies (remember preferences)

Essential and limited analytics cookies only, no advertising cookies.

Contact Us

Privacy Questions

drayslearninghub@consultant.com

Information Commissioner's Office

You have the right to lodge a complaint with the ICO if you believe we have not handled your personal data appropriately.

Website: ico.org.uk

Phone: 0303 123 1113

Download Our Data Protection Summary

For a comprehensive overview of our data protection practices, download our official Data Protection Summary document.

Download Data Protection Summary (PDF)