Privacy notice

Effective [date]

Who we are

Code & Commerce Quizzes is run by [Operator name, e.g. your name trading as your brand]. Contact: [contact email]. ICO registration: [ICO registration number].

Teachers

When you sign up we hold your name, email address, a securely hashed password and the classes, quizzes and results in your account. We use them to provide the service and to email you about your account. We are the controller of this data. Our lawful basis is the contract with you.

Pupils

Pupils do not create accounts and never give an email address. For each class a pupil joins, we hold only their first name and the initial of their last name, and the answers they give to quizzes. Their school is the controller of this data and we process it on the school's behalf under our data processing agreement. We do not use pupils' data for advertising or profiling, and we do not share it with anyone except our hosting provider.

Buying lesson packs

When you buy a lesson pack from our resources pages we hold the order number, the school or organisation name you give us, your email address, what you bought and which licence, and how many times the files have been downloaded. We print the school name and order number in the files so they can be traced if they are shared; your email address is never printed in them. We use your email address only to send your download links, updated versions and messages about your order. Our lawful basis is the contract with you, and keeping records for tax.

We use these processors: Stripe (Stripe Payments Europe, Ltd.) takes your payment on its own secure pages (we never see your card details); [file storage provider, e.g. Cloudflare R2 (EU jurisdiction)] stores the stamped files; and [email provider, e.g. Postmark] delivers our emails. We keep order records for 6 years after the purchase, for tax records, and then delete them along with the stamped files.

Cookies

We use only cookies that are strictly necessary: one that keeps a teacher or pupil signed in, and one that protects forms against forgery. We do not use analytics or advertising cookies, so we do not ask for cookie consent.

Where data is kept and for how long

Data is stored in the United Kingdom. A teacher can remove a pupil, delete a class (with its pupils and results) or delete their whole account at any time from the app; deleted data is removed permanently.

Your rights

You can ask to see, correct or delete your data. Teachers can download all their account data from Settings. Pupils and parents should contact the school first. If you are unhappy with how we use data you can complain to the Information Commissioner's Office (ico.org.uk).