– this policy should be read in conjunction with our Terms and Conditions
We care about helping you learn. Your trust is very important to us.
This is why at Edplus (company name Edtopia Limited, company number 10018990) we take your privacy and online safety extremely seriously.
We are a data controller. This means we have a legal responsibility to protect your personal information or data under the European Union’s General Data Protection Regulation (“GDPR”).
It is our duty to make sure you have knowledge of and control over your own personal data, which we are bound to keep safe at all times.
It explains what personal information or data we collect from you, what we do with it and how we protect it. It sets out your rights in relation to the personal data we hold or process for you.
Why do we collect personal data?
Edplus is committed to improving the way you learn. The purpose of our products and services is to help with users’ education and knowledge development. We have a legitimate business interest in collecting the limited personal information needed in order to be able to provide our personalised tuition service. This legitimate interest is the legal basis we have for collecting and processing your personal information. However we will not collect any personal data from you without your express consent, which is given when you first use the service.
Who do we collect personal data from?
What personal data do we collect from you?
We collect the minimum amount of personal data necessary to provide the Edplus service you request.
- Information you give us
You can choose to provide us with more or less information, depending on the level of service you require from us, and you have the option to remain anonymous.
The personal information you give us when you sign up to use our service or receive news updates from Edplus comprises:
- your name and in some cases email address;
- your user ID (which is generated by us and allocated to you when you first use our app or play our games);
- details of the learners with a profile on our database i.e. given name (or nickname) and, if applicable, year of birth;
- financial information (for example payment card details) if you are using a subscription;
- your progress, if you choose to have progress saved and tracked
- Information we collect automatically
We also automatically collect certain other information when you use our games apps (Seal Saver, Planet Zorg and Match Shake) in order to provide a high level of service or help with troubleshooting. We note:
- your device’s ID, make, model and operating system;
- the geographical location in which you are using the device;
- login times;
What we do with your personal data
We only use your personal information to provide and develop the Edplus service. This means we only use it where it is necessary for our legitimate interests and where your interests and fundamental rights do not override those interests.
- We use each user’s personal data to build their personal dynamic knowledge profile if you choose to have progress saved and tracked.
- We use your personal data to compile and send you real-time reports and updates of your or your child’s progress and detailed performance statistics. By creating an account, you are agreeing to receive emails concerning your or your child’s progress. You may unsubscribe from these.
- You may also consent to receive news or promotional material. We use your personal data to send this to you. You may unsubscribe from these communications.
- To prevent or investigate fraud, crime or abuse and protect the security and integrity of the Edplus service.
- Should you contact us for troubleshooting, support, complaints, comments or any other reason, we will use your personal information in order to successfully deal with your query.
How do we protect your personal data?
Because some of our users may be children, we have taken special care to design our all our data processing with the most sensitive users in mind from the beginning and we take a precautionary approach by-default.
We always seek informed consent from a responsible adult before collecting personal information.
We believe that children should not be exposed to large amounts of advertising on their devices. Therefore, we never carry paid advertisements for anyone else on our apps designed for children under 13.
We do not currently have any social media platforms on our app, so information about you is never visible to other users.
Within our company, we have put technical and organisational security systems in place to protect your information against risks such as accidental loss, unauthorised access or use, destruction or damage.
Except for our own company and our trusted partners – which you can see on our marketplace – and service providers, we do not allow anyone else to access your personal information, unless required to do so, for example by law.
In the context of a corporate merger or acquisition involving our company, your personal information may be shared on a strictly controlled and confidential basis.
All our partners and service providers and any potential investors are required to protect your personal data to the same extent that we do and must comply fully with all relevant laws and regulations.
Data storage and processing
Your personal information is stored and processed on our servers and those of our service providers. While your information is being transferred to our servers, it is encrypted. This helps to protect it in transit. In order to keep your personal information safe, we regularly update our rigorous cyber security programmes.
If the data that we collect from you is transferred to, and stored at, a destination outside the European Economic Area (“EEA”), we will ensure your information receives an equivalent level of protection to that under the GDPR.
For security reasons, payment card details are not held by us and are stored instead by our payment service provider.
Data retention – how long do we keep your personal information?
We do not hold your personal data for longer than necessary to fulfil the purposes for which we collected it, including to satisfy any legal, accounting or reporting requirements.
We hold your data for as long as you are an account holder. When you close your account, your personal information is deleted and your user history is irrevocably anonymised. This means it is no longer possible for anyone to link your or your child’s learning profile to your personal information or to identify them.
In certain circumstances we may need to keep your personal data to comply with our legal obligations in the event of a legal dispute, that is, until the statute of limitations for bringing a civil court claim expires. Usually six years in the UK.
What happens if someone accesses your personal information without permission?
If there is any breach of our data protection and security systems, for example by unauthorised persons or hackers, we will let you know without delay and will also notify the relevant authorities as soon as possible within the time limits set out by law.
What are your rights in relation to the personal data we hold about you?
Your personal information belongs to you, and you have many rights in relation to this information:
- You have a right to access your personal information, that is to find out exactly what personal information of yours we hold.
- You have a right to rectify your personal information, or change it. It is important that the personal data we hold about you is correct and up-to-date. Please keep us informed of any changes to your personal information.
- You have a right to request that we delete your personal information.
- You may limit how we process it.
- You may also request the transfer of your personal information to another party.
You can do all of this by sending an email to email@example.com. We will respond to you promptly within the time limits set out by law.
Data Protection Supervisory Authority
If you are an EU citizen or if our use of your personal data is subject to the European Union’s General Data Protection Regulation, you also have the right to lodge a complaint about how we handle your personal data with a EU data protection supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO).
Last Updated 18 September, 2019