1) Summary
Kids' Smart provides online extracurricular learning for children aged 5–16. This Privacy Policy explains how we collect and use personal data when parents or guardians browse our website, create an account, communicate with us, or enrol a child in courses.
We aim to collect only what we need to deliver lessons, support families, and maintain safety. We do not sell personal data. We do not knowingly use children’s data for targeted advertising.
2) What personal data we collect
The types of personal data we collect depend on how you use our services. We may collect data directly from you (for example, when you fill in a form) and automatically (for example, basic technical data needed to display pages securely).
Typical categories include: parent/guardian name and contact details; limited child information needed for course placement (such as age group); communication history with support; and technical data such as device type and approximate location derived from IP address.
3) Children’s data and parental responsibility
Kids' Smart is designed for children aged 5–16, but our services are managed through parents or guardians. We ask parents/guardians to provide consent where required and to supervise account creation and communications.
We minimise the child data we collect. In many cases, an age band is sufficient to place a child in an appropriate course. If a lesson requires sharing a child’s work (such as a drawing or a coding project), sharing is limited to the class environment and the parent account, depending on the course setup.
We do not request sensitive categories of data (such as health information). Please do not submit sensitive personal information through the contact form.
4) Lawful bases for processing (UK GDPR)
When the UK GDPR applies, we process personal data under one or more lawful bases, depending on the activity:
- Contract: to provide courses and related support.
- Legitimate interests: to keep the platform secure, prevent abuse, and improve service quality.
- Consent: for optional analytics cookies and certain communications when required.
- Legal obligations: to comply with applicable laws and requests from authorities where valid.
6) Security
We use administrative, technical, and organisational measures designed to protect personal data. This includes access controls, account security features, and monitoring for misuse.
No method of transmission or storage is completely secure. If you believe your account has been compromised, contact us promptly.
7) Your rights
Depending on your location and applicable law, you may have rights to access, correct, delete, or restrict the processing of your personal data, as well as to object to certain processing and request portability.
To submit a request, email [email protected]. We may ask for information to verify your identity and your relationship to the child account.
If you are in the UK, you may also lodge a complaint with the Information Commissioner’s Office (ICO).
9) Data retention
We keep personal data only as long as necessary for the purposes described in this policy, including delivering services, meeting legal obligations, resolving disputes, and enforcing agreements.
Retention periods vary based on the type of data, course participation, and support needs. When data is no longer needed, we take steps to delete or anonymise it.
10) Contact and updates
If you have questions about this policy or want to exercise a privacy right, contact us using the details below. We may update this policy from time to time to reflect changes in our services or legal requirements.