Home About Weekly Lessons FREE Guides FAQs
Contact Login

Privacy Policy 

Privacy Policy

Effective Date: November 1st 2025
Last Updated: October 28th 2025

GCSE TOOLKIT LIMITED (“we,” “us,” “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our website www.gcsetoolkit.co.uk (the “Website”) and services.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws.

  1. Data Controller

GCSE TOOLKIT LIMITED is the data controller of your personal data.
Contact: [email protected] 

  1. Information We Collect

We may collect and process the following categories of data:

a) Information you provide directly

  • Parent/guardian name, student name (where applicable)
  • Email address, phone number, postal address
  • Payment details (processed securely via third-party providers)
  • Information submitted via forms (e.g., enquiries, downloads, sign-ups

b) Student-related information

  • Year group, age range, school year, study focus areas
  • Learning progress, quiz/test results, resource usage

c) Automatically collected information

  • IP address, browser type, operating system
  • Usage data (pages visited, time on site, referral source)
  • Cookies and tracking technologies (see our Cookie Policy)

d) Marketing & communication preferences

  • Your choices for receiving newsletters, guides, promotions, or ads
  1. How We Use Your Information

We process your data for the following purposes:

  • Service delivery – to provide access to guides, downloads, courses, and accounts.
  • Communications – to send updates, reminders, offers, and newsletters (with your consent).
  • Payments – to process orders securely and deliver digital content.
  • Analytics – to understand how our Website is used and improve user experience.
  • Marketing – to deliver relevant ads (e.g., via Facebook Pixel, Google Analytics).
  • Legal obligations – to comply with applicable laws, regulations, and safeguarding responsibilities.
  • Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR:

  • Consent – for newsletters, marketing emails, and cookies.
  • Contract – to deliver services you purchase from us.
  • Legal obligation – where processing is required by law.
  • Legitimate interests – for analytics, fraud prevention, and improving our services.
  1. Sharing Your Information

We do not sell or rent your personal data. We may share it with:

  • Service providers – e.g., hosting providers, payment processors, email platforms.
  • Analytics & marketing tools – e.g., Google Analytics, Meta (Facebook/Instagram) Ads.
  • Legal/regulatory authorities – where required to comply with the law.

All third parties are required to protect your data and may not use it for their own purposes.

  1. Data Transfers Outside the UK

Some service providers may process data outside the UK (e.g., cloud hosting in the US). Where this occurs, we ensure adequate safeguards, such as UK-approved standard contractual clauses (SCCs).

  1. Data Retention
  • We keep your data only as long as necessary for the purposes collected.
  • Account data is retained while your account is active.
  • Marketing data is retained until you unsubscribe or withdraw consent.
  • We may retain limited records where required for legal or tax purposes.
  1. Security of Your Data

We use appropriate technical and organisational measures to protect your data, including:

  • Secure servers and encryption for sensitive data.
  • Restricted access to authorised staff only.
  • Regular monitoring and testing for vulnerabilities.
  1. Children’s Privacy & Safeguarding
  • Our services are aimed at students aged 11–16, but accounts must be created by a parent/guardian.
  • We do not knowingly collect personal data from children without parental consent.
  • Parents/guardians are responsible for supervising their child’s use of our Website and services.
  • If we become aware that we have collected data from a child without consent, we will delete it immediately.
  1. Your Rights

Under UK GDPR, you have the right to:

  • Access – request a copy of your personal data.
  • Rectification – request correction of inaccurate data.
  • Erasure – request deletion of your data.
  • Restriction – limit how we process your data.
  • Portability – receive your data in a portable format.
  • Objection – object to processing (including marketing).
  • Withdraw consent – at any time for marketing communications.

To exercise these rights, contact us at [Insert Email].

  1. Marketing Communications
  • We will only send marketing emails if you have opted in.
  • You can unsubscribe at any time by clicking “unsubscribe” in the email.
  • We may still send service-related communications (e.g., account notices).
  1. Cookies

We use cookies and tracking technologies to enhance your experience. Details are provided in our Cookie Policy.

  1. Complaints

If you have concerns about our data handling, please contact us first.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk | Tel: 0303 123 1113

  1. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be posted on our Website.

  1. Contact Us

For questions or requests regarding this Privacy Policy:

GCSE TOOLKIT LIMITED
[email protected]