Privacy Policy

1. Introduction
Educode Learning Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our educational platform, website, and associated services under the CodeBash brand.

2. Information We Collect
2.1 Personal Information
- Name and email address for account registration
- School affiliation and class membership
- Educational progress and assessment data
- Code submissions and programming exercises

2.2 Technical Information
- IP address and browser/device data
- Usage patterns and platform interactions
- Session data and authentication tokens

3. How We Use Your Information
We process your personal data to:
- Provide educational services and track academic progress
- Facilitate communication between teachers and students
- Improve platform performance and educational content
- Ensure security and prevent misuse of the platform

4. Legal Basis for Processing
Under the UK GDPR, our processing is based on:
- Legitimate Interests – delivering educational services, improving our platform, and ensuring security
- Consent – for optional features, marketing communications, or cookies
- Legal Obligation – safeguarding requirements and regulatory compliance

5. Data Sharing and Third Parties
We do not sell or rent your personal data. We may share limited data with:
- Your school and authorised teachers within your educational institution
- Trusted service providers who assist us in delivering our services:
  • Cloud hosting providers for data storage and platform operation
  • Email service providers for system communications
- Law enforcement or regulatory bodies where legally required

All third-party service providers are bound by strict data protection agreements and process data only as instructed by us.

6. International Data Transfers
Your personal data is processed and stored within the UK/EU. We do not transfer personal data outside the UK/EU without appropriate safeguards and your school's consent where required.

7. Data Retention
We retain personal data for as long as needed to provide services and meet legal requirements:
- Active student/teacher accounts: Duration of service agreement with your school
- Inactive accounts: 12 months after last login
- Educational records and submissions: 3 years for educational record purposes
- System logs and security data: 12 months

Individual retention periods may vary based on your school's specific requirements or applicable legal obligations.

8. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure of your data ("right to be forgotten")
- Restrict or object to certain processing
- Request data portability
- Withdraw consent where processing is based on it

To exercise these rights, please contact us using the details below.

9. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss, including:
- Encryption of data in transit and at rest
- Secure authentication and access controls
- Regular security monitoring and updates
- Secure data centres with physical access controls

10. Children's Privacy
Our platform is designed for educational use by students aged 11-18. For users under 13, we process data based on consent provided by schools acting in loco parentis under their duty of care.

11. Cookies and Tracking
Our platform uses essential cookies for functionality and security. We also use analytics cookies to improve our service. You can control cookie preferences through your browser settings. By continuing to use our platform, you consent to our use of cookies as described.

12. Changes to This Policy
We may update this policy from time to time to reflect changes in law or our practices. Material changes will be communicated via email to registered users or through your school. The latest version will always be available on our website.

13. Contact Us
For any data protection or privacy-related concerns, please contact:

Data Protection Officer
Email: eoin@educode.co.uk
Address: Educode Learning Ltd, 48 Crest View Drive, Petts Wood, Orpington, England, BR5 1BY

This Privacy Policy complies with UK GDPR and data protection legislation. If you have concerns about how your data is processed, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO).