How we use personal data on BlueAcorn Education.
BlueAcorn Education ("we", "us") provides an educational platform for schools. This Privacy Policy explains how we handle personal data when you use the platform.
Contact: [email protected]
When a school (or local authority/academy trust) uses the platform, the school is typically the data controller for student personal data it provides and student activity data generated through use of the service. We typically act as a data processor and process that data on the school’s instructions to provide the service.
If you are a student, your school is usually the best point of contact for questions and requests about your data.
Depending on role (student/teacher/admin) and how the school configures the platform, we may process:
For school-provided student data, the school typically determines the lawful basis and provides instructions. For our own processing (e.g. security logs), we generally rely on legitimate interests (security and fraud prevention) and/or contract (to provide the service to the school).
We do not sell personal data and we do not run advertising. We may share data with service providers who help us run the platform (e.g. hosting, databases, email delivery), under appropriate contractual protections.
If any of our service providers process data outside the UK, we use appropriate safeguards (such as the UK Addendum to the EU Standard Contractual Clauses) where required.
We retain personal data only as long as needed to provide the Service and meet legal, security, and operational requirements.
If a school (as controller) instructs us to delete student data, we will take steps to delete it within 30 days (subject to any legal obligations and the backup retention period above).
UK GDPR provides rights such as access, rectification, erasure, restriction, objection, and portability (where applicable). For student data, requests typically go through the school (the controller). For staff accounts, you can also contact us.
You also have the right to complain to the ICO (Information Commissioner’s Office).
We use essential cookies for login sessions (for example, a session cookie to keep you signed in). We do not use advertising cookies. If we add non-essential analytics cookies in future, we will update this policy and implement appropriate consent mechanisms.
We may update this policy from time to time. We will post changes on this page and update the “Last updated” date.