Privacy Policy

Kickstone Learning Ltd builds tools for UK primary schools.

• Company: Kickstone Learning Ltd
• Company number: 17039595
• Registered office: Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ
• Data protection contact: David Hunter — david@kickstone.uk
• ICO registration: C1880892

This policy explains what personal data we collect, why we collect it, and what we do with it. It covers the Kickstone Learning website (kickstone.uk) and our products, currently including KS Fluency and KS DISCOVER. As we launch additional products, this policy will be updated and existing users notified.

When you visit our website

If you use our contact form, we collect the information you provide (name, email address, and your message). We use this only to respond to your enquiry.

When you use KS Fluency

When you use KS DISCOVER

KS DISCOVER also processes book page images uploaded by teachers for text extraction (OCR). These images are deleted immediately after extraction — they are not stored. The extracted text is used to generate lesson content via AI. No personal data is sent to the AI provider. KS DISCOVER does not collect or store any pupil data — assessments and curriculum tracking operate at class level only.

When you join Kickstone Base Camp

Kickstone Base Camp is our free professional membership for UK primary school teachers. When you join (for example, by downloading a free teaching resource), we collect:

As a Base Camp member, you receive a free teaching resource every month, teaching tips, and updates about products you have engaged with. Optional fields do not gate the service — if you only provide your email, you still receive everything.

1. Provide our products — delivering the service you signed up for
2. Process payments — managing subscriptions and billing through Stripe
3. Communicate with you — responding to enquiries and service updates
4. Improve our products — understanding usage patterns and fixing bugs
5. Deliver Base Camp membership — your lead magnet, monthly resources, teaching tips, and relevant product updates
6. Meet legal obligations — tax records, regulatory compliance

Base Camp and legitimate interest

When you join Kickstone Base Camp, we rely on legitimate interest (Article 6(1)(f)) to send you monthly resources, teaching tips, and updates about products you have engaged with. This is permitted under the PECR “soft opt-in” rule because you provided your details when joining a free service, the emails relate to our own similar products, and every email includes a one-click unsubscribe link.

You can stop receiving Base Camp emails at any time by clicking the unsubscribe link in any email, or by emailing david@kickstone.uk.

We use a small number of service providers to deliver our products. Each processes data only on our instructions and under appropriate agreements.

International data transfers

Some of our service providers process data in the United States. Where personal data is transferred outside the UK, we ensure it is protected by appropriate safeguards including the UK-US Data Bridge and Standard Contractual Clauses (SCCs). You can request details by contacting david@kickstone.uk.

• All data is encrypted in transit (TLS/HTTPS)
• Payment data is handled entirely by Stripe — we never store card details
• We conduct regular security reviews

KS DISCOVER uses AI (Anthropic Claude) to generate non-fiction lesson content based on curriculum parameters and text extracted from book pages. No personal data is sent to the AI — only curriculum parameters and literary text. Teacher identity is not included in AI requests. Anthropic's terms prohibit use of inputs and outputs for model training.

We conduct Data Protection Impact Assessments for our products. We have completed DPIAs for KS Fluency and KS DISCOVER. Schools and teachers can request a copy by emailing david@kickstone.uk.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and contact affected individuals where the risk is high.

When data is no longer needed, it is securely deleted.

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Restrict processing in certain circumstances
• Port your data to another service
• Object to processing based on legitimate interest

To exercise any of these rights, email david@kickstone.uk. We will respond within 30 days.

We use only cookies that are strictly necessary for our products to work (for example, remembering your session). We do not use analytics, advertising, or tracking cookies.

We may update this policy as we launch new products or services. When we make material changes, we will notify existing users by email. The “last updated” date at the top shows when this policy was last revised.

If you are unhappy with how we handle your data, please contact us first at david@kickstone.uk and we will do our best to resolve your concern.

You also have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113