Who we are
Learn Academy Limited is the data controller for anything you give us through this site, the portal, or the app. You can reach us at admin@learn-academy.co.uk or by post at Unit 2a, 41 Landor Street, Birmingham, B8 1AE.
What we collect
When you arrange a review
- Your name, email address, and phone number if you give it.
- The age of each child you are home educating and how long you have been doing it.
- What you tell us about your week and what you want from the review.
If you become a client
- Your account details for the portal or app: name, email, and sign-in records.
- Your child’s first name and year group or age, and the baseline notes we agree with you.
- The individual learning plan, and what you choose to log against it: notes, photos of work, and messages to the Education Director.
- Reviews written by the Education Director.
Automatically
- Server logs including your IP address, used for security and rate limiting, and kept for no longer than 30 days.
- We do not use analytics or advertising cookies. See Cookies.
Children’s information
Everything we hold about a child comes from the parent. We do not collect information from children directly, we do not create accounts for children, and we ask for the minimum: a first name, an age or year group, and what you choose to log. You can remove any of it at any time.
Why we use it, and the legal basis
- To reply to your review request: your consent, which you give on the form.
- To deliver the service to you as a client: our contract with you.
- To keep the site and portal secure: our legitimate interest in running the service safely.
We do not sell your information and we do not use it for advertising.
Who else sees it
Only the companies that process it on our behalf, under contract, and only for the purpose above:
- Supabase, which hosts our database and sign-in.
- Resend, which sends our emails.
- Upstash, which provides rate limiting for the site.
- IONOS, which hosts the site.
We never share your information, or anything you log about your child, with a local authority, a school, or anyone else, unless you ask us to in writing or the law requires it. Your record is yours. You decide who sees it.
How long we keep it
- Review requests: 12 months from the date you send them, so we can follow up.
- Client records: for as long as you are a client, and 12 months after the relationship ends, unless you ask us to delete them sooner.
- Anything can be deleted earlier on request. Ask and we will confirm when it is done.
Your rights
You can ask us at any time to:
- send you a copy of everything we hold about you and your child;
- correct anything that is wrong;
- delete it;
- stop using it in a particular way, or restrict what we do with it;
- export your record in a portable format.
Email admin@learn-academy.co.uk. We will respond within one month. If you are not happy with how we handle your information you can complain to the Information Commissioner’s Office at ico.org.uk.
Security
Data is encrypted in transit and at rest. Access to the database is restricted by role, so a parent can only see their own family’s records. We review access and retention regularly.
Changes
If we change this policy in a way that matters, we will tell clients by email. The date at the top is when it was last reviewed.