This policy defines how MyTransferTeacher collects, uses, stores, and protects data in a privacy-first manner.

The platform is intentionally designed to:

•Collect minimum personal data

•Avoid sensitive data

•Comply with UK GDPR / Data Protection Act

•Protect children’s privacy

 

MyTransferTeacher is the data controller responsible for handling personal data processed through the platform.

All data processing decisions follow strict internal rules defined in the product architecture.

 

This policy applies to:

•Parents using MyTransferTeacher

•Schools using MyTransferTeacher

•Students accessing the platform via parent or school accounts

Students do not register independently and do not submit personal data directly.

 

For parent accounts, only the following data is collected:

•Parent email address

(used for login, communication, and account identification)

•Student name

(used only for display, test attribution, and reports)

No other personal data is collected.

 

For school accounts, only the following data is collected:

•School name

•Official school email address

•Number of students (for licence sizing only)

No individual student personal details are collected at registration.

 

MyTransferTeacher does not collect, request, infer, or store:

•Phone numbers

•Home or postal addresses

•Date of birth or age

•Gender

•Ethnicity, religion, or health data

•Precise location data

•Government identifiers

•Parent or student photographs

Any future feature must comply with this restriction.

 

•Students do not create accounts themselves

•Student access is always linked to:

•A parent account or

•A school account

•School-issued student logins use system-generated identifiers

•No personal student profiles are created

 

Data is processed only for the following purposes:

•Account authentication

•Access control and licence enforcement

•Test delivery and scoring

•Basic analytics and performance reporting

•Platform security and misuse prevention

•Customer support (when contacted)

 

Data is not used for:

•Advertising

•Behavioural profiling

•Third-party marketing

 

During free access periods:

•Users may submit feedback

•Feedback includes ratings and optional comments

•Feedback is:

•Not linked to identity beyond the account

•Used only for product improvement

•Not shared externally

 

The platform maintains technical logs for:

•Login attempts

•Device changes

•Access denials

•Test activity

•Plan changes

 

These logs:

•Contain minimal identifiers

•Are used for security and auditing

•Are not used for profiling

 

If AI-powered features are used:

•AI processes only anonymised or minimal data

•AI does not access sensitive personal information

•AI outputs are used to assist learning, not to make legal or academic decisions

•Data is stored securely on protected servers

•Data is retained only as long as necessary:

•Active account → retained

•Inactive / deleted account → data scheduled for deletion

•Aggregated, anonymised data may be retained for analytics

 

MyTransferTeacher does not sell or rent data.

Data may be shared only with:

•Payment providers (for transactions)

•Hosting and infrastructure providers

•Legal authorities (if legally required)

All third parties are required to comply with data protection laws.

 

Users have the right to:

•Access their data

•Request correction of inaccurate data

•Request deletion of their account

•Object to processing where applicable

Requests can be made via official support channels.

 

•The platform is designed for parental or school-supervised use

•Children must not use the platform independently

•Parents and schools are responsible for supervising access

 

This policy may be updated to reflect:

•Legal changes

•Product updates

•Security improvements

Material changes will be communicated appropriately.