Privacy Policy
Last updated: August 2026
1. Data Controller
Classpot ("we", "our", "us") operates the website classpot.co.uk. We are a school comparison platform helping families find the right school in England.
Trading name: Classpot
Registered in: England and Wales
Email: hello [at] classpot.co.uk
2. Information We Collect
2.1 Information you provide directly
Email address if you create an account, submit a school suggestion, write a review, buy a report, or contact us. If you use the Parent Cabinet, we store the optional child nickname or display label you choose, admission phase, Nursery start month or Primary/Secondary entry year, postcode (not a full address), search radius, up to three priorities, plan title, and the providers you save. Private provider data may include notes, manual order, decision, visit and application or enquiry state, timestamps, and tasks or reminders with their title, details, kind, due date, completion state and optional provider link. We also store report entitlements attached to your account. A child label is optional and does not need to be a legal name.
The Parent Cabinet does not request a child's exact date of birth, full address, faith or religion, SEND or EHCP information, health information, or documents.
If you use the School Portal, we store the school or provider and URN you claim, your account email and verified-email state, your stated professional role, the claim status and verification route, the relevant imported school-email or website domain used as evidence, and claim and review timestamps. Manual review may also record a decision and review note. After verification, we store your OWNER or EDITOR membership, how it was established, its status and revocation history, plus limited school-level security and audit events.
The School Portal stores draft and historical versions of school-provided content: a short description, website, public and admissions contacts, and structured open-day information. It also stores requests to correct official information, including the current official value, proposed value, explanation, status and review outcome. Only the current published school-provided version is public, only while the school authority remains verified, and it is labelled as provided by the school with its publication date. The free verified badge and its school-authority verification date are also public while that authority remains verified. We do not publish the login identity, claim email, claimant role, verification evidence, membership, draft, manual-review, correction or audit records. Parent Cabinet, child, plan, purchase and private-report data never crosses into the School Portal or its public projection. A login email becomes public only if an authorised school member separately enters it as a published school contact.
2.2 Information collected automatically
- Location data: approximate geolocation (with your explicit permission) to display nearby schools. We do not store your location on our servers.
- Hosting and security data: IP address, request details and device or browser information may appear in essential hosting and security logs.
- Error and performance data: technical error reports, including browser type, device information, and error context, collected via Sentry to help us diagnose and fix issues.
- Optional public demand measurement: if enabled, PostHog receives only two cookieless events from a public school profile: opening the Claim School interest form and an HTTP-successful interest-registration response. We do not send email, school name or identifier, URL/query, account/session information, form values or saved-list data. This is not enabled on accounts, Parent Cabinet, School Portal, sign-in, admin or private report pages; it does not use cookies, persistent browser identifiers, session replay, pageviews, autocapture, heatmaps, surveys or advertising IDs.
2.3 Information collected during a purchase
If you start or complete a school-report purchase, we collect your email address and optional postcode. A private checkout intent temporarily stores an emailed continuation credential, the rendered continuation-email content, and the frozen Stripe request needed for crash-safe, duplicate-charge-resistant replay. If payment completes, the purchase record keeps the email address and order reference so we can deliver the report and maintain the transaction record. Payment card details are processed exclusively by Stripe, Inc. and are never transmitted to or stored on our servers.
2.4 Information kept only in your browser
Before sign-in, Save can keep up to three provider identifiers and their admission phase in local browser storage. Public favourites and comparison selections (including comparison phase) are also stored on that device. These entries contain provider identifiers, not child or account details. A successful cabinet import removes only the exact pending saves that were reconciled; favourites and comparisons are not erased. You can remove this data with the product controls or by clearing site data in your browser.
After sign-in, if no compatible admission plan exists, one provider identifier and phase may be held in a private server-side handoff tied to the current sign-in session. It is usable for up to 15 minutes and is removed immediately after an exact successful save or discard. An expired record is no longer usable and is physically removed by exact-session cleanup or the next bounded hourly housekeeping run (normally within about 75 minutes of creation, subject to backlog or an outage); deleting the session also removes it.
3. Lawful Basis for Processing
Under UK GDPR (Article 6), we rely on the following lawful bases for processing your personal data:
| Processing Activity | Lawful Basis | Details |
|---|---|---|
| Providing the school comparison service | Legitimate interest | Necessary for the core purpose of the platform |
| Providing an account, private school plan or School Portal workspace | Contract | Necessary to save and return the private service you request across devices |
| Geolocation to show nearby schools | Consent | Browser permission prompt; revocable at any time |
| Error monitoring (Sentry) | Legitimate interest | Necessary to maintain service reliability and diagnose technical issues |
| Cookieless public demand measurement (PostHog, if enabled) | Legitimate interest | Narrow, aggregate product-demand measurement on public school profiles only; it is never required for the service and does not set cookies or persistent browser identifiers |
| Processing school submissions, provider claims, corrections and attributed school information | Legitimate interest | To prevent unauthorised school control and maintain accurate, attributable directory information |
| Responding to enquiries | Legitimate interest / Contract | Necessary to respond to your request |
| Processing paid report purchases | Contract | Necessary to fulfil a purchase you have made |
4. How We Use Your Information
We use the personal data we collect for the following purposes:
- To provide and improve our school comparison service.
- To authenticate you and save the child/intake context, priorities, shortlist states, notes, tasks and report library you choose to add to private admission plans.
- To display relevant schools based on your approximate location (with your consent).
- To monitor and diagnose technical errors and maintain service reliability.
- To process school submissions and reviews.
- To verify School Portal claims and grant, revoke or suspend school-management authority.
- To let authorised school members draft and publish attributed school information and open-day entries.
- To process requests to correct official imported school information and maintain proportionate claim, revision and security history.
- To respond to your enquiries.
- To deliver paid school reports you have purchased.
We do not use your personal data for email marketing purposes.
5. Third-Party Services and Data Sharing
We do not sell your personal data. We use the following third-party services, each of which may process data on our behalf or as an independent controller:
| Service | Purpose | Data Processed |
|---|---|---|
| Vercel | Website hosting | Server logs, IP addresses (as part of hosting infrastructure) |
| Sentry | Error monitoring and diagnostics | Browser type, device info, error context, IP address |
| PostHog (optional, cookieless) | Aggregate public Claim School demand measurement | Two event names and a fixed public-surface label; no email, school identity, URL/query, account/session or form data |
| Resend | Transactional sign-in and report emails | Email address and email delivery metadata |
| Google Identity (optional) | Account sign-in when you choose Google | Google account identifier, verified email, name and profile image provided by Google |
| Stripe, Inc. | Payment processing for paid reports | Email address, payment card details, billing information. Stripe acts as an independent data controller. See stripe.com/gb/privacy |
Each of these providers acts under their own privacy policies. We recommend reviewing them for detailed information.
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies independently.
6. International Data Transfers
Some of the third-party services we use (Vercel, Sentry, Resend, Google Identity and Stripe) are operated by companies based in the United States. This means your personal data may be transferred to, and processed in, countries outside the United Kingdom.
Where such transfers occur, we ensure that appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO).
- The UK International Data Transfer Agreement (IDTA) or UK Addendum to EU SCCs, where applicable.
- Adequacy decisions by the UK Secretary of State, where available.
If you would like further information about the specific safeguards applied to international transfers of your data, please contact us at hello [at] classpot.co.uk.
7. Digital Products and Your Right to Cancel
School reports are digital products delivered immediately upon purchase. Under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, you ordinarily have a 14-day right to cancel a distance purchase. However, by completing your purchase and accessing the report, you expressly consent to immediate delivery and acknowledge that your right to cancel is lost at that point.
If you experience a technical issue preventing delivery, or if the report contains a material error, please contact us at hello [at] classpot.co.uk and we will assess your request on a case-by-case basis.
8. Cookies and Similar Technologies
Cookies are small text files stored on your device when you visit our website.
8.1 Types of cookies we use
| Category | Purpose | Provider | Consent Required |
|---|---|---|---|
| Strictly Necessary | Essential site functionality | Classpot | No (exempt under UK PECR) |
8.2 Non-essential technologies
Google Analytics, Google AdSense, Microsoft Clarity, Vercel Analytics and Vercel Speed Insights are currently disabled. They do not load on an initial visit. The only optional exception is the narrow PostHog mode described above: it is disabled by default, has no cookies or persistent browser storage, and may be enabled only for the two explicit public Claim School demand events. We will not enable other non-essential analytics or advertising without a default-deny consent mechanism and an updated policy. Essential account/session and browser-storage functions remain available; clearing site data removes device-local entries and signs you out.
9. Data Retention
We retain personal data only for as long as necessary for the purposes set out in this policy:
| Data Type | Retention Period |
|---|---|
| Review submissions and school suggestions | For as long as they remain published and relevant |
| Contact enquiries (email) | Up to 12 months after resolution |
| Completed paid-report purchase records (email address, order reference) | 7 years (UK tax and accounting obligations) |
| Abandoned or unresolved paid-report checkout intents | An unused pre-provider intent is usable for 30 minutes and is normally deleted by the next bounded hourly run (within about 90 minutes of creation, subject to backlog or an outage). Crash replay is allowed for less than 23 hours. An unresolved provider call then fails closed for manual review: postcode, continuation credential and email HTML, and frozen provider payload are redacted within 72 hours of the first provider call, and the intent email is removed within 30 days. A pseudonymous duplicate-charge tombstone remains until reviewed. A reviewed no-session audit is deleted within 30 further days. Provider-confirmed expired and unpaid attempts and their PENDING rows are deleted in intent-first order; completed purchases follow the separate seven-year row above. |
| Account and school-plan data | Until you ask us to delete the account, subject to legal and security backup retention |
| School Portal account identity and claim email | Until the related account is deleted or a rights request requires earlier action. Account deletion atomically withdraws pending claims, revokes memberships and removes direct User IDs and the claim-email snapshot from retained School Portal history. |
| School-level claim, membership, revision, correction and audit history | Retained while needed to preserve publication provenance, prevent unauthorised control and maintain the integrity of the school record. After account deletion, its dedicated User foreign keys are detached and SchoolClaim.claimantEmail is cleared. Independently entered contacts, correction text or other retained information may still identify a person; it continues to be treated as personal data and remains subject to applicable rights and retention review. |
| Guest saves, favourites and comparisons stored in your browser | Until you remove them, clear site data, or exact pending saves are successfully imported |
| Sign-in sessions | Up to 30 days unless you sign out or the session is revoked sooner |
| Signed-in provider handoff | Usable for up to 15 minutes; exact save/discard removes it immediately, while expired rows are normally physically removed within about 75 minutes of creation by bounded hourly housekeeping (subject to backlog/outage) or with session deletion |
| Stripe transaction data | Per Stripe's retention policy (stripe.com/gb/privacy) |
| Sentry error data | 90 days (Sentry default) |
| Optional PostHog public-demand events | Retained only for the configured PostHog project retention period; before enabling, the operator must set and record that period and ensure it is no longer than necessary for the stated demand review |
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted connections (HTTPS), restricted access to personal data, and the use of reputable third-party infrastructure providers. However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
11. Automated Decision-Making
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects, as described under Article 22 of the UK GDPR. Parent Cabinet next actions are selected by deterministic, explainable rules; Classpot does not generate an admissions probability or opaque fit score.
12. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation, you have the following rights in relation to your personal data:
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can request correction of inaccurate or incomplete data.
- Right to erasure — you can request deletion of your data in certain circumstances.
- Right to restrict processing — you can request that we limit how we use your data.
- Right to data portability — you can request your data in a structured, machine-readable format.
- Right to object — you can object to processing based on legitimate interest.
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at hello [at] classpot.co.uk. We will respond within one calendar month. If we require additional time (up to two further months), we will inform you and explain the reason.
When an authenticated account-erasure request is accepted and the account is deleted, pending School Portal claims are withdrawn and active memberships are revoked in the same database operation. If that account is the last active OWNER, the school authority is suspended first, so its verified state and school-provided content stop appearing publicly. If another active OWNER remains, the authority and independently owned school content may remain active. The deleted User ID, claim email and User actor references are detached from retained School Portal history; free-text claim review notes are cleared. The canonical public School record is not account data and is not deleted. You may separately ask us to correct or remove personal information contained in school-provided contact details or other retained material.
13. Right to Complain
If you are not satisfied with how we handle your personal data or your rights request, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
14. Children's Privacy
Our service is designed for parents, guardians, and educators. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected data from a child, please contact us immediately at hello [at] classpot.co.uk, and we will take steps to delete such data without undue delay.
We are aware that younger users may visit the site. Non-essential behavioural advertising and analytics technologies are currently disabled, apart from the optional, cookieless and non-identifying public-demand measurement described above.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any material changes will be posted on this page with an updated "Last updated" date. Where changes are significant, we will make reasonable efforts to notify you (for example, via a prominent notice on our website).
16. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your data is handled, please contact us:
Email: hello [at] classpot.co.uk