Privacy Policy

1. Who is responsible for your data

The Curriculum Foundry ("we"), of 6 Mellow Fields, Laughton en le Morthen, Sheffield S25 1YW, is the data controller for personal data collected through this website. Contact: hello@thecurriculumfoundry.co.uk.

2. What we collect and why

• Order information: your name, email address, school or trust name, and order details, used to deliver what you bought, provide receipts and invoices, and keep required accounting records. Legal basis: performance of a contract, and legal obligation for accounting records.
• Payment information: card payments are processed by Stripe; your card details go directly to Stripe and never touch our systems. We receive confirmation of payment and the last four digits only. Stripe's own privacy notice applies to its processing.
• Enquiries: emails you send us, used to reply and kept for reference. Legal basis: legitimate interests.
• Technical data: our hosting provider processes IP addresses in server logs for security and reliability. Legal basis: legitimate interests.
• Document requests: when you ask for our brochure or the free parent guide, we use your email address to send you that document. Legal basis: performance of your request. We keep no copy of your address for this alone.
• Mailing list: when you request a document or place an order, a pre-ticked box offers to keep you informed about new releases; untick it and we store nothing for marketing. If you leave it ticked, we store your email address with our email provider, Resend, and use it to tell you about new releases. Legal basis: the soft opt-in for customers and sales enquiries, with an opt-out offered at the point of collection, or your consent. Every email carries a one-click unsubscribe, and you can also opt out by emailing us; either removes your address promptly.

We do not sell personal data, we do not share it with advertisers, and we do not send marketing emails unless you have asked for them (and you can opt out at any time).

3. Who processes data for us

We use a small number of service providers to run the business: Stripe (payments), Vercel (website hosting), Supabase (order database), Resend (transactional email and, with your consent, the mailing list), and Google Workspace (email). Each processes data on our instructions under their own security and data-processing commitments. Some providers process data outside the UK under recognised international transfer safeguards.

4. How long we keep it

Order and invoice records are kept for six years after the end of the relevant financial year, as required for tax purposes. Enquiry emails are kept as long as they remain relevant. Data that is no longer needed is deleted.

5. Cookies

This site uses only the cookies and similar technologies that are strictly necessary for it to function, such as remembering your basket. We do not use advertising or cross-site tracking cookies.

6. Your rights

You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to data portability, in each case subject to the limits in data protection law. To exercise any of these, email hello@thecurriculumfoundry.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

7. Changes

We will update this notice if our practices change, and the current version will always be at this address.