Privacy Policy

1. Introduction
Educode Learning Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our educational platform, website, and associated services under the CodeBash brand.

2. Information We Collect
2.1 Personal Information
- Name and email address for account registration
- School affiliation and class membership
- Educational progress and assessment data
- Code submissions and programming exercises

2.2 Technical Information
- IP address and browser/device data
- Usage patterns and platform interactions
- Session data and authentication tokens

3. How We Use Your Information
We process your personal data to:
- Provide educational services and track academic progress
- Facilitate communication between teachers and students
- Improve platform performance and educational content
- Ensure security and prevent misuse of the platform

4. Legal Basis for Processing
Under the UK GDPR, our processing is based on:
- Legitimate Interests – delivering our educational services
- Consent – for optional features or communications
- Legal Obligation – safeguarding and compliance

5. Data Sharing and Third Parties
We do not sell or rent your personal data. We may share limited data with:
- Your school and authorised teachers
- Trusted service providers (e.g. hosting, analytics)
- Law enforcement or regulatory bodies where legally required

6. Data Retention
We retain personal data for as long as needed to provide services and meet legal requirements. Typically, student data is retained for the duration of enrolment plus up to 6 years, unless an alternative retention period is required by law.

7. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure of your data ("right to be forgotten")
- Restrict or object to certain processing
- Request data portability
- Withdraw consent where processing is based on it

To exercise these rights, please contact us using the details below.

8. Data Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss.

9. Children's Privacy
Our platform is intended for educational use by students aged 11–18. For users under 13, we rely on consent provided by schools acting in loco parentis.

10. Cookies and Tracking
Our platform uses cookies and similar technologies to enhance user experience, track usage, and secure sessions. For more information, please refer to our Cookie Policy.

11. Contact Us
For any data protection or privacy-related concerns, please contact:

Data Protection Officer
Email: privacy@codebash.co.uk
Address: Educode Learning Ltd, Crest View Drive, Orpington, Kent, UK

12. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or through your school.