Your Data Rights (GDPR)

We handle personal data in line with the UK GDPR and the Data Protection Act 2018. Because children’s accounts are set up and supervised by a parent or guardian, the parent exercises these rights on the child’s behalf. For the full detail of what we collect and why, see our Privacy Policy.

1. Your rights at a glance

• Be informed — know what data we hold and how we use it (this page and our Privacy Policy).
• Access — request a copy of the personal data we hold about you and your child.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete personal data (the “right to be forgotten”), subject to records we must keep by law.
• Restriction — ask us to pause certain processing while a concern is resolved.
• Portability — receive your data in a common, machine-readable format.
• Object — object to processing based on our legitimate interests.
• Withdraw consent — where we relied on consent (e.g. marketing email), withdraw it at any time.

2. How we protect children’s data

• We collect the minimum needed and encourage a display name instead of a real name.
• Children’s accounts are controlled by the parent, not marketed to directly.
• We do not use children’s data for advertising or profiling for marketing.
• We follow the ICO’s Age Appropriate Design Code (Children’s Code).

3. How to make a request

Email admin@elevenplusprep.com from the parent account email address, telling us which right you want to exercise and which child account it concerns. To protect accounts, we may need to verify your identity before we act.

We respond to valid requests within one month. We can extend this by up to two further months for complex requests and will tell you if we need to. There is normally no charge.

4. Complaints

We would like the chance to resolve any concern first, so please contact us. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk or by calling their helpline.