top of page

Privacy Policy

We need to store information about our subscribers and their students in order to fulfil our contractual requirements to you and grant you access to the restricted content on the Website.

If you are a subscriber (including a subscriber on a trial basis), your personal information (for example your full name, email address and contact details) will be used to enable us to verify that you are a subscriber and to deliver any restricted content on the Website to you.

We also request personal information from you when you contact us with subscription queries, technical issues, to comment on the Website, or when you ask for information about how best to use the services and its features. Personal information submitted by you via the contact us page will be used to reply to you regarding your query and to send you promotional emails about our service. You can opt out at any time by following the instructions in the literature. Statistics regarding the types of queries submitted to us via the contact us page may be collated by us in aggregate form so that we can effectively monitor the Website and improve levels of service.

1 - What kind of information do we collect?
To the extent of what we are allowed under relevant law, we collect different kinds of personal data about you and any individual whose details you provide to us.

● Identity Data includes first name, last name, title, class code, email address.
● Contact Data includes billing address, delivery address, email address and telephone numbers.
● Financial Data includes bank account details and details about payments from you.
● Technical Data includes IP address, login data, device type, operating system, browser type/version, time zone setting/location and other technology on the devices you use to access the website.
● Profile Data includes your username, initial password (as soon as you modify your password, it gets encrypted) and orders made by your institution.
● Usage Data includes information about how you use our website.

The above types of data from/about you is collected via different methods when you:
● Subscribe to our service (including free trials);
● Place an order (online form, phone, fax or email);
● Complete online forms;
● Contact us by phone, fax, email, post or online form.

We may also, when necessary, add to the personal data we already have with information we obtain from third parties that are allowed to share that information (for example the Department for Education). We will only collect what is allowed by relevant laws.

If you intend to give us personal information about someone else, you are responsible for ensuring that you follow any responsibilities and consent responsibilities under relevant data protections laws. As required by relevant data protection laws, you must ensure that you have their clear agreement to do so and that you explain to them how we collect, use, share and keep their personal information or tell them to read our Privacy Notice.

2 - How do we use your information?
Most commonly we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you, including account creation, analysing data, generating reports, product renewal notices, administration of accounts, payment validations, including taking and processing payments, statistical analysis and support.

  • Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.

  • Where we need to comply with a legal or regulatory obligation.

    Here are all the ways in which we intend to use your perso
    nal data:

Aim                                                                                  Type of Data                                       Basis

Registrating you as a new customer                                        Identity                                                            Fulfilling the contract between us



Processing and delivering your order                              Identity                                                             Fulfilling the contract between us




Management of our relationship                                      Identity                                                             Fulfilling the contract between us




Delivery of relevant content/services                               Identity                                                             Fulfilling the contract between us

                                                                                         Contact                                               In our legitimate interest



Improvement of our services by using web analytics       Technical                                                  In our legitimate interest



3 - Use of cookies
Our website uses cookies. A cookie is a small file of letters and numbers that we put on your computer. These cookies allow us to distinguish you from other users of the website which helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

Our cookies
The names of the cookies that we use on our website, and the purposes for which they are used, are set out below:

Cookie Name                               Purpose                                                                                             Duration                        Cookie Type

XSRF-TOKEN                              Used for security reasons                                                                  Session                        Essential
hs                                                 Used for security reasons                                                                  Session                         Essential
svSession                                     Used in connection with user login                                                   12 months                     Essential
SSR-caching                                Used to indicate the system from which the site was rendered        1 minute                        Essential
_wixCIDX                                     Used for system monitoring/debugging                                             3 months                      Essential
_wix_browser_sess                      Used for system monitoring/debugging                                            Session                        Essential
consent-policy                              Used for cookie banner parameters                                                 12 months                     Essential
smSession                                   Used to identify logged in site members                                           Session                        Essential
TS*                                               Used for security and anti-fraud reasons                                          Session                        Essential
bSession                                      Used for system effectiveness measurement                                   30 minutes                    Essential
fedops.logger.X                            Used for stability/effectiveness measurement                                  12 months                     Essential
wixLanguage                                Used on multilingual websites to save user language preference   12 months                     Functional


Digital Analytics Cookies


We use Google Analytics to carry out statistical analysis of page use, page interactions and paths through the Website to evaluate and develop our Website. This is known as 'digital analytics'. We may also record certain information that customers provide during a Website purchase or other process.

This information allows us to understand individual behaviours and needs more accurately using the reports created for us.

For more information on how Google uses the data collected via this service, see here:

To opt out of being tracked via Google Analytics, you can also use Google's opt-out browser add-on:

4 - How secure is your data?
We will keep your information secure by taking appropriate technical and organisational measures against its unauthorised or unlawful processing and against its accidental loss, destruction or damage.

We will do our best to protect your personal information but we cannot guarantee the security of your information which is added to our website via an internet or similar connection.

If we have given you (or you have chosen) a password to access certain areas of our website, please keep this password safe – we will not share this password with anyone and we will never ask you to share your password under any circumstances.

We also expect our customers to adopt strong security practices, such as ensuring that your computers are adequately protected from viruses, worms, malware, trojan horses, key-loggers and potential misuse, and that login credentials and passwords are not shared.

If you believe your account has been compromised, please contact us at .

5 - Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

We employ policies regarding the retention of your data in order to:

● Meet business continuity requirements to recover services and customer data in the event of business disruption;
● Retain customer and pupil data for the purposes of subscription renewal and statistical analysis;
● Retain personal information for ongoing subscriptions;
● Retain personal information related to your school orders for no longer than 5 years for lapsed or cancelled subscriptions;
● Retain personal information related to your pupils’ personal data uploaded to our products by your account administrator for no longer than 6 months for lapsed or cancelled subscriptions;
● Retain anonymised statistical information for no more than 5 years.

When a school terminates their subscription with us we will, unless requested otherwise, retain the data for a further 6 months past their ‘renewal’ date in order that any subsequent re-subscription will allow the customer to access their historical data. Past this period of 6 months, all the school’s associated data will be permanently deleted from our servers and will not be recoverable.

6 - Your information and your rights
We are registered with the information commissioner’s office, Registration Number: ZB546488

You have the right to:

  • ask us to show you the personal data that we hold about you.

  • ask us to correct any inaccuracies in any of the data we hold about you. If we hold any information about you which is incorrect or if there are any changes to your details, please let us know so that we can keep our records accurate and up to date though we may have to verify the accuracy of the new data you provide to us.

  • ask us to erase any personal data that we hold about you where there is no good reason for us continuing to process it.

  • request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

  • request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

  • withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

7 - When do we share information?
We do not sell your personal information to third parties.
We do not share your personal information with third parties.

If we believe that your use of the Website is unlawful or damaging to others, we reserve the right to disclose the information we have obtained through the Website about you to third parties to the extent that it is reasonably necessary in our opinion to prevent, remedy or take action in relation to such conduct.

We may also disclose or share your personal data in order to comply with any legal obligation; in order to enforce or apply any agreements or licences with you; or to protect the rights, property, or safety of Class Diagnostix Ltd. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

If any part of our business (including those of our affiliates) is sold or integrated with another business, your details may be disclosed to our advisers and any purchasers, prospective purchasers and their advisers.

8 - Updating your details and contacting us
If you have any questions or queries regarding this privacy policy or if any of the information that you have provided to Class Diagnostix Ltd changes e.g. if you change your e-mail address, please contact us by sending an e-mail to


9 - GDPR – Frequently Asked Questions
What type of data is held by Class Diagnostix Ltd?
We hold the following:

  • The name of the school.

  • The title, name and email address of the authorised representative for the school.

  • First name, last name and title of each student.

  • The year group of each student.

  • The class code of each student.

  • An email address and initial password for school - they are encrypted on upload.

Passwords can be changed by the authorised representative at any time and we recommend they do this.
Once changed we can never see the passwords, they are always encrypted.

Where does Class Diagnostix Ltd get that data from?
We get the data directly from schools.
We ask them to put student information on a template and return it to us.

What is the purpose of holding the data?
We hold the data so that we can create a report which is then made accessible through our website


Is Class Diagnostix Ltd a Data Controller or Data Processor?
We act as a Data Controller as we make decisions about processing activities. We exercise overall control of the data being processed and are ultimately in charge of and responsible for the processing of the data.

How is the data kept up-to-date?
The authorised representative of the school can ask us to update the data for them.

How often is the data backed-up?
The data is backed-up every week on Sunday between 3.30am and 4.30am (UK time).

Is the data shared by Class Diagnostix Ltd with anyone?
It is never shared with anyone outside of Class Diagnostix Ltd.

Where and how is the data stored?
It is stored on servers which are all within the UK.

How long is the data kept for?
We keep it for as long as the account is active or until the authorised representative at the school requests its deletion.
For Y11 leavers, the data is deleted 6 months after the end of the academic year.
If a subscription is cancelled we wait for 6 months and then delete all data for that school.
If an institution requests it be deleted sooner, we always do this.

How is the data destroyed?
It is permanently deleted.

Are you registered with the Information Commissioners Office?
Yes, we are. Our registration number is ZB546488

bottom of page