Not ready for launch: 3 gaps in square brackets still to fill in, highlighted in pink below.
Privacy notice: The Study Lab
Last updated: [date of launch]
The Study Lab is a GCSE maths practice service run by The Study Room Tuition, 200 Penn Road, Wolverhampton, WV4 4AA. This notice explains what information we collect about you and your child, why we collect it, and your rights over it.
If you have any questions, or want to use any of your rights, email thestudyroomtuitionuk@gmail.com.
We are the "data controller" for this information. ICO registration number: [add once registered].
What we collect
About you (the parent or carer):
- your name and email address
- your consent to your child using The Study Lab, and when you gave it
- your subscription and payment status. Card details are taken and held by our payment provider, Stripe. We never see or store your card number.
About your child:
- first name only, school year (7 to 11), GCSE tier (Foundation or Higher) and exam board (AQA, Edexcel, OCR or not sure)
- a username and a PIN. We store the PIN in scrambled (hashed) form, so nobody, including us, can read it.
- their answers to skills checks and Lab sessions, their scores, and which topics are mastered, shaky or gaps
- when they log in and complete sessions, so we can report completion and streaks to you
We don't ask for your child's surname, date of birth, school, address, photo or email address, and we don't need them.
Why we use it, and our legal basis
| What we do | Why | Legal basis (UK GDPR) |
|---|---|---|
| Run your account and your child's account, set Lab sessions and mark answers | To provide the service you've signed up for | Contract with you |
| Use your child's results to build their personal plan | This is how the service works | Contract with you, and your consent as their parent |
| Send you the weekly progress report and, if sessions are missing, a reminder | Part of the service | Contract with you |
| Take payment and work out earn-back credit | To charge for, and reward, the service | Contract with you |
| Keep accounts and payment records | The law requires it | Legal obligation |
| Look at anonymised, combined results to improve questions | To make the service better | Legitimate interests |
We don't sell your information or use it for advertising, and we don't send marketing emails without asking you first.
Automated decisions. Your child's plan is chosen automatically from their results (for example, "work on fractions next"). This shapes their practice only. It has no legal or similarly significant effect, and you can ask us to review it at any time.
Who else handles it
We use a small number of trusted providers to run the service. Each one only processes information on our instructions:
- Supabase, which hosts our database and logins. Your data is stored in London.
- Vercel, which hosts the website. Pages are served from London.
- Stripe, which takes payments.
- [Email provider, to be confirmed], which sends the weekly report and reminders.
Some of these companies are based in, or use support teams in, the United States. Where information leaves the UK, it's protected by approved safeguards, such as the UK International Data Transfer Addendum or the UK–US Data Bridge.
If your child also has tuition at The Study Room, their tutor may see their Study Lab progress so tuition and practice support each other.
How long we keep it
- While the subscription is active: we keep everything above.
- After cancellation: we keep your child's results for 12 months in case you come back, then delete them. You can ask us to delete them sooner.
- Payment and invoice records: 6 years, because the law requires it.
Keeping it safe
Every account can only see its own information. A parent sees only their own children, and a student sees only themselves. The connection to the website is encrypted. After five wrong PIN attempts the account locks for 15 minutes. Access to the admin area is limited to The Study Room.
Cookies
We only use the cookies needed to keep you logged in. We don't use advertising or tracking cookies, so we don't ask you to accept them.
Your rights
You can ask us to:
- give you a copy of the information we hold about you or your child
- correct anything that's wrong
- delete your or your child's information
- stop or limit how we use it, or object to a use
- give you your child's results in a format you can take elsewhere
- withdraw your consent at any time. This stops your child's use of the service, but doesn't affect anything we did before.
Email thestudyroomtuitionuk@gmail.com. We'll reply within one month. There's normally no charge.
Complaints
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
Changes to this notice
If we change this notice in a way that affects you, we'll email you before the change takes effect.