Data Protection
Last updated: 8 October 2026
Schoogle processes personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), and designs for children using the ICO Age Appropriate Design Code. This page summarises how. Full detail is in our privacy policy.
Our data protection principles
We process personal data only with a lawful basis under UK GDPR and explain what we do in plain language.
We collect only what the Service needs. We never store card details or tutor bank details; Stripe handles those.
High-privacy defaults, no advertising, no sale of data and no marketing profiling, in line with the ICO Age Appropriate Design Code.
For school accounts the school is the controller and we act as its processor under a data processing agreement.
Encryption in transit and at rest, row-level security in our database and role-based access for staff.
We aim to host personal data in the UK or EEA, and protect any international transfer with ICO-approved safeguards.
For schools
- We sign a data processing agreement with every school, setting out our obligations as processor under Article 28 UK GDPR.
- We support your data protection impact assessment (DPIA) with information about our processing, sub-processors and security.
- We help you respond to subject access and other rights requests within the statutory time limit.
- At the end of your contract we return or delete pupil data, as you instruct.
- We will notify you without undue delay if we become aware of a personal data breach affecting your data.
To request our DPA, sub-processor list or DPIA support pack, email schools@schoogleuk.com.
Safeguarding and data
Tutors working with under-18s must hold an Enhanced DBS check (AccessNI in Northern Ireland). Messages and sessions between tutors and learners stay on the platform so they can be reviewed if a safeguarding concern is raised. Where we have a safeguarding concern we may share information with the relevant school, local authority or police, as permitted by the Data Protection Act 2018.
Your rights
You can ask to access, correct, erase, restrict or port your data, and object to some processing. Email privacy@schoogleuk.com and we will respond within one month. If your account is managed by your school, we may pass your request to the school.
You can also complain to the Information Commissioner's Office at ico.org.uk.
Contact
Consulaw Tech Services Ltd, Data Protection