Privacy Policy

Last Updated: 2 February 2026

1. Introduction

Pedagogue Ltd ('we', 'us', or 'our') is committed to protecting the privacy and security of your personal data. This policy explains how we collect, use, and protect your information when you use the Pedagogue platform, including our learning management system, Governance Wizard, and administrative tools.

2. Data Controller Information

Pedagogue Ltd is the data controller for the personal data processed through our services. We are registered in England and Wales under company number 15154171.

For any data protection queries or to exercise your rights, please contact us at hello@pedagogue.io with the subject line 'Data protection query'. Our ICO registration number is ZB837272.

3. Data We Collect

We collect the following categories of personal data:

  • Account data: name, school email address, job title, and school affiliation.
  • Learning data: course progress, quiz responses, time spent on modules, and completion records.
  • Governance Wizard responses: specific inputs provided if you use our tool to generate school policies or board statements.
  • Technical data: IP address, browser type, device information, and operating system.
  • Cookie data: information about your interactions with our platform (see our Cookie Policy for details).

4. How We Use Your Data

We process your data for the following purposes:

  • To provide the platform: creating your account and allowing access to learning modules (Legal basis: Contract).
  • To generate credentials: issuing verifiable AI Passports and certificates upon completion (Legal basis: Contract/Legitimate Interests).
  • To provide governance tools: generating bespoke policy documents based on your inputs (Legal basis: Contract).
  • To improve our services: analysing anonymised usage data to refine our curriculum and AI tutorbot (Legal basis: Legitimate Interests).
  • To communicate with you: sending account updates, security alerts, and support responses (Legal basis: Contract/Legitimate Interests).

5. Data Sharing

We do not sell your personal data to third parties. We share data only in the following circumstances:

  • With your school: if your account is part of a school or organisation licence, your administrator can view your progress and certification status.
  • With technology partners: we use trusted sub-processors to host our platform and provide specific features:
    • Supabase (Database and Authentication)
    • Google Cloud Platform (Hosting and Infrastructure - UK/EU regions)
    • Anthropic (AI processing for our tutorbot and document generation)
  • Legal requirements: if required to do so by UK law or regulatory bodies.

6. AI and Your Data

Our platform employs AI features, including a tutorbot and the Governance Wizard.

  • Processing: your queries or wizard inputs are processed by Anthropic (Claude).
  • No Training: our AI providers are contractually prohibited from using your personal data to train their models.
  • Anonymisation: where possible, we strip identifying metadata before processing AI queries.

7. Data Retention

We retain data only for as long as necessary:

  • Account data: retained while your account is active, plus 2 years following inactivity.
  • Learning records: retained long-term to ensure your AI Passport remains verifiable by future employers.
  • Governance documents: retained for 7 years to meet school audit requirements.
  • Technical logs: deleted after 90 days.

8. Your Rights

Under UK GDPR, you have the right to:

  • Request access to your personal data.
  • Request rectification of inaccurate data.
  • Request erasure of your data ('the right to be forgotten').
  • Object to or restrict the processing of your data.
  • Request the transfer of your data to another service.
  • Withdraw consent at any time.

To exercise these rights, please email hello@pedagogue.io with the subject line 'Data rights request'.

9. Data Security

We implement strong security measures, including encryption in transit (TLS) and at rest (AES-256). Access to personal data is strictly limited to authorised Pedagogue personnel who require it to perform their roles.

10. International Transfers

We prioritise UK-based data residency. However, some processing via Anthropic may occur in the United States. In such cases, we ensure standard contractual clauses are in place to maintain a level of protection equivalent to UK law.

11. Children's Data

Pedagogue is a professional development platform for adult school staff. We do not knowingly collect data from children under the age of 18.

12. Contact and Complaints

If you have questions about this policy, please contact us at hello@pedagogue.io. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.