Privacy Policy

1. Introduction

EduGenie Way Limited ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

We are registered in England and Wales under company number 12345678. Our registered office is at 25 Tech Innovation Centre, Birmingham Science Park, Birmingham B7 4BJ, United Kingdom.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, and institutional affiliation when you contact us or subscribe to our newsletter
• Educational Information: School name, teaching subjects, and curriculum interests when you register for our services
• Communication Data: Any information you provide when you contact us for support or enquiries

2.2 Information We Collect Automatically

• Usage Data: How you interact with our website, including pages visited, time spent, and navigation patterns
• Technical Data: IP address, browser type, device information, and operating system
• Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy for details)

3. How We Use Your Information

We process your personal data for the following purposes under the legal bases specified:

3.1 Legitimate Business Interests

• Providing and improving our educational resources and services
• Analysing website usage to enhance user experience
• Detecting and preventing fraud or abuse
• Maintaining website security and functionality

3.2 Consent

• Sending you marketing communications and newsletters (you can withdraw consent at any time)
• Using analytics and marketing cookies (as per your cookie preferences)

3.3 Contractual Necessity

• Delivering services you have requested
• Processing payments and managing accounts
• Providing customer support

3.4 Legal Compliance

• Complying with legal obligations and regulatory requirements
• Responding to legal requests and court orders

4. How We Share Your Information

We do not sell your personal data. We may share your information in the following circumstances:

• Service Providers: Trusted third-party providers who help us operate our website and deliver services (e.g., email service providers, analytics tools)
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with mergers, acquisitions, or asset sales (with appropriate protections)
• Consent: When you have given explicit consent for specific sharing

All third-party service providers are contractually bound to protect your data and use it only as instructed by us.

5. International Data Transfers

Some of our service providers may be located outside the UK/EEA. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK/EU authorities
• Standard contractual clauses approved by the UK/EU
• Other legally recognised transfer mechanisms

6. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy:

• Newsletter subscribers: Until you unsubscribe or after 3 years of inactivity
• Contact enquiries: 2 years from last contact
• Website analytics: 26 months (Google Analytics default)
• Marketing data: Until consent is withdrawn or after 3 years of inactivity

We regularly review and delete data that is no longer needed.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, contact us at [email protected] or +44 121 456 7890. We will respond within one month.

8. Security Measures

We implement appropriate technical and organisational measures to protect your personal data:

• SSL/TLS encryption for data transmission
• Regular security assessments and updates
• Access controls and employee training
• Secure data storage and backup procedures
• Incident response and breach notification procedures

9. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie usage, please see our Cookie Policy.

You can manage your cookie preferences through our cookie consent tool or your browser settings.

10. Children's Privacy

Our services are intended for educational professionals and institutions. We do not knowingly collect personal data from children under 16 without appropriate consent from parents, guardians, or educational institutions.

If you believe we have collected information from a child without proper consent, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will:

• Post the updated policy on our website
• Update the "last updated" date
• Notify you of significant changes via email or website notice
• Obtain your consent for material changes where required by law

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority:

ICO: ico.org.uk
Phone: 0303 123 1113