Privacy Policy

Last updated: 17th February 2026

1. Who We Are

Totally English for Kids (“we”, “us”, “our”) is an English learning platform designed for children.

We are the data controller for the personal information we collect.

If you have any questions about this Privacy Policy or how we use personal data, you can contact us:

Email: enilno.sdikrofhsilgneyllatotobfsctd-884f4d@aivlys
Address: 5 Brayford Square, London E1 0SG, UK

2. Our Commitment to Children’s Privacy

We are committed to protecting children’s personal data and respecting their rights.

We follow:

• The UK General Data Protection Regulation (UK GDPR)
• The Data Protection Act 2018
• The Children’s Code issued by the Information Commissioner’s Office

We design our services with children’s privacy and safety as a priority.

3. Who This Policy Applies To

This Privacy Policy applies to:

• Children using Totally English for Kids
• Parents or legal guardians
• Teachers or schools (where applicable)

For children under 13, we require parental consent before collecting personal data.

4. What Information We Collect

We collect only the information that is necessary to provide our service.

1. Information Provided by Parents/Guardians

• Parent/guardian name
• Email address
• Payment details (processed securely via third-party payment providers)
• Account login details

1. Information About Children

• First name or nickname
• Age or age range
• Learning progress and activity data
• Voice recordings (if using speaking exercises)
• Submitted answers or uploaded work (if applicable)

We do not require children to provide their full name, home address, or unnecessary personal details.

5. How We Use Personal Data

We use personal data to:

• Create and manage accounts
• Provide English lessons and track progress
• Personalise learning experiences
• Communicate with parents about progress or updates
• Process payments
• Improve our platform
• Keep children safe online

We do not use children’s personal data for advertising or profiling for marketing purposes.

6. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Consent (especially for children under 13)
• Performance of a contract (providing our learning services)
• Legal obligation (where required by law)
• Legitimate interests (such as improving platform security and functionality, balanced against children’s rights)

Parents can withdraw consent at any time.

7. Parental Consent

For children under 13, we:

• Require verifiable parental consent
• Allow parents to review, update, or delete their child’s data
• Allow parents to withdraw consent

If we learn that we have collected a child’s data without proper parental consent, we will delete it promptly.

8. How We Keep Information Safe

We use appropriate technical and organisational measures, including:

• Secure servers
• Encrypted connections (HTTPS)
• Restricted staff access
• Regular security reviews

We only allow authorised staff to access personal data when necessary.

9. Data Sharing

We do not sell children’s personal data.

We may share data with:

• Secure payment providers
• Hosting and cloud service providers
• IT and technical support providers
• Schools (where the account is school-managed)

All third-party providers must comply with UK data protection laws and process data under written agreements.

10. International Transfers

If personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations
• Standard contractual clauses

11. How Long We Keep Data

We keep personal data only as long as necessary to:

• Provide services
• Meet legal or accounting requirements
• Resolve disputes

Inactive accounts are reviewed and may be deleted after [insert timeframe, e.g., 24 months].

Parents may request deletion at any time.

12. Children’s Rights and Parents’ Rights

Under UK data protection law, individuals have the right to:

• Access their data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Data portability

Parents can exercise these rights on behalf of their child.

If you are unhappy with how we handle data, you may complain to the Information Commissioner’s Office at www.ico.org.uk.

13. Cookies and Tracking

We use limited cookies and similar technologies to:

• Keep users logged in
• Improve performance
• Understand how the platform is used

We do not use tracking cookies for behavioural advertising aimed at children.

Parents can manage cookie preferences through their browser settings.

14. Automated Decision-Making

We do not use automated decision-making that produces legal or similarly significant effects on children.

Some automated systems may suggest lesson levels based on performance, but these do not have legal impact and can be reviewed.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make significant changes, we will notify parents by email or through the platform.

16. Contact Us

If you have any questions or concerns about privacy, please contact:

Email: enilno.sdikrofhsilgneyllatotobfsctd-515ea7@aivlys
Address: 5 Brayford Square, London E1 0SG, UK