PrestoMaths Privacy Policy

Last updated: 25 February 2025

PrestoMaths is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR).

Data Controller: PrestoMaths (sole trader)
Contact: [email protected]

1. What Data We Collect

When you register and use PrestoMaths, we collect:

Account data: Your name and email address.
Usage data: The activities, questions, and skillsets you create within the service.
Payment data: Payments are processed by Stripe. We do not store your card details.

2. Lawful Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

Contract: We process your name, email address, and usage data because it is necessary to provide the PrestoMaths service you have signed up for. Without this data, we cannot operate your account.
Consent: We only send you marketing or news emails if you have explicitly opted in to receive them in your account settings. You may withdraw this consent at any time by updating your preferences or contacting us.

3. How We Use Your Data

We use your data to:

Provide and operate the PrestoMaths service.
Send you essential account-related notifications (e.g. email verification, password resets).
Send you occasional site updates and news, only if you have opted in to receive these in your account settings.

We will never send you unsolicited marketing emails.

4. Cookies

PrestoMaths only uses cookies that are strictly necessary for the service to function (for example, to keep you logged in and remember your session). We do not use any analytics, advertising, or tracking cookies.

5. Data Sharing

We do not sell or share your personal data with third parties, except as described below:

Stripe: Payment processing. Please refer to Stripe's Privacy Policy for details.
Hetzner: Our hosting provider, who stores your data on servers located in Germany. Please refer to Hetzner's Privacy Policy for details.
Mailtrap: Our transactional email provider, used to send account-related emails such as email verification and password resets. Please refer to Mailtrap's Privacy Policy for details.
School colleagues: If you are a member of a school on PrestoMaths, your name and email address are visible to other members of that school. You will be clearly informed of this visibility when you receive your school invitation, and your acceptance of that invitation constitutes your agreement to this.

6. Where Your Data Is Stored

Your data is stored on servers located in Germany, operated by Hetzner. Germany is a member of the European Union, which the UK has determined provides an adequate level of data protection. All data transfers therefore comply with UK GDPR requirements.

7. Data Retention

We retain your personal data for as long as your account is active. If you request deletion of your account, all of your personal data — including your name, email address, and all content you have created (activities, questions, and skillsets) — will be deleted immediately and permanently, in accordance with our obligations under UK GDPR.

8. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Rectify any inaccurate or incomplete data.
Erase your data (the "right to be forgotten").
Restrict the processing of your data.
Data portability — receive your data in a structured, machine-readable format.
Object to the processing of your data.
Withdraw consent for any processing based on consent (e.g. marketing emails) at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at [email protected].

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of any significant changes by email. The latest version will always be available on this page.

10. Contact

For any privacy-related enquiries, please contact us at [email protected].