Privacy Policy

1. Who We Are

SchoolSteps UK (schoolsteps.uk) provides free interactive education tools and guides for UK parents and students. SchoolSteps UK is the data controller for any personal data collected through this website.

Contact: privacy@schoolsteps.uk

2. What Data We Collect

We may collect the following personal data:

• Email address — if you voluntarily subscribe to our newsletter
• Usage data — pages visited, tools used, referring URL, browser type, device type (collected via server logs)
• IP address — for security, rate limiting, and abuse prevention

We do not use client-side analytics trackers (Google Analytics, Microsoft Clarity, Meta Pixel, or similar). We do not run display advertising.

3. Legal Basis for Processing

Under UK GDPR, we process your data on the following lawful bases:

• Consent — when you subscribe to our newsletter or accept non-essential cookies
• Legitimate interests — to operate and secure the website, prevent abuse, and understand general usage patterns

4. How We Use Your Data

• To send newsletters and education updates (with your consent)
• To operate and maintain the website
• To protect against abuse and enforce rate limits
• To generate aggregated, non-personal usage statistics

5. Third-Party Processors

We use the following third-party services that may process your data:

• Vercel (USA) — website hosting and edge delivery
• ConvertKit / Kit (USA) — email newsletter service (pending integration)

Where data is transferred outside the UK/EEA, it is protected by appropriate safeguards including Standard Contractual Clauses or UK adequacy decisions.

6. Cookies and Similar Technologies

A cookie is a small file placed on your device. We use cookies and browser local storage in accordance with the Privacy and Electronic Communications Regulations (PECR).

Strictly Necessary

These are required for the site to function and cannot be switched off. They include storing your cookie consent preference in browser local storage.

Analytics (optional)

We do not currently use any analytics cookies. If we add analytics in the future, these cookies will only be set after you give explicit consent via the cookie banner.

Marketing (optional)

We do not use marketing or advertising cookies. We do not run display advertising on this site.

You can change your cookie preferences at any time using the “Manage Cookies” link in the footer of every page.

7. Data Retention

• Email addresses — retained until you unsubscribe or request deletion
• Server logs — retained for up to 30 days, then deleted
• Rate limiting data — temporary, purged automatically within minutes

8. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data
• Restriction — ask us to restrict processing
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, email privacy@schoolsteps.uk. We will respond within one month.

9. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113

10. Children's Privacy

This website provides educational tools that may be used by young people. We do not require registration or collect personal data from users beyond optional newsletter sign-up. We do not knowingly collect personal information from children under 13. If a parent or guardian believes their child has submitted personal information via our email sign-up, please contact us at privacy@schoolsteps.uk and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated date. We encourage you to review this page periodically.