Privacy Policy
Version 1.0 | Last updated: 23 September 2026
How we look after your information, and your child’s information
| Item | Detail |
|---|---|
| Controller | The Confident Learning Collective Ltd, a company registered in England and Wales under company number 17431771, whose registered office is at 49 Station Road, Polegate, East Sussex, BN26 6EA, trading as The Confident Learning Co. |
| Address | 49 Station Road, Polegate, East Sussex, BN26 6EA |
| Information Commissioner’s Office registration | ZC239734 |
| Data protection contact | privacy@theconfidentlearningco.org |
| Version | 1.0 |
| Effective from | 23 September 2026 |
1. Who we are
The Confident Learning Co. is the trading name of The Confident Learning Collective Ltd, a company registered in England and Wales under company number 17431771, whose registered office is at 49 Station Road, Polegate, East Sussex, BN26 6EA, trading as The Confident Learning Co. We help parents of children aged 6 to 16 who have lost confidence in learning, through parent education and parent coaching. This policy explains what information we collect about you and your child, why, and what your rights are.
We are the data controller for the information described in this policy, and we are registered with the Information Commissioner’s Office under reference ZC239734. If you have any question about it, email privacy@theconfidentlearningco.org.
If you ask for new articles by email on our articles page, we hold the email address you gave us, the date, and the fact that it came from that form, in Kit. We use it only to send you those articles, until you unsubscribe, which you can do from any of them. That sign-up is separate from any purchase.
2. What we collect
| What | When | Why |
|---|---|---|
| Your name and email address | When you complete the Reflection, buy something, or join the community | To send you what you asked for and to run your account |
| Your full legal name | When you buy the Guide or join the community | Because we need to know who our members are |
| A confirmation that you are eighteen or over | At checkout | The community is for adults only. We ask you to confirm it rather than asking for your date of birth, which we do not want |
| A record of which version of the community rules you accepted, and when | At checkout, and again whenever the rules change | So we can show which rules were in force for you at any point, and enforce them fairly |
| Your answers to the Reflection or the Fit Check | When you complete one | To give you your result and to understand what parents are finding hard |
| A record that you ticked a box, when you ticked it, and the exact wording you were shown | At checkout, and before you start the Fit Check | So that we can show later what you actually agreed to, rather than asking you to take our word for it |
| Your child’s first name, school year and age band | When you complete the Reflection, when you buy, or during a Pathway call | To make the help specific to your family |
| Your child’s education setting | During a Pathway call | So that we point you towards the right kind of help. Our Pathway Coordinator records it during the call as one of five set options. It is not a form field, it is not free text, and it is never treated as a description of your child |
| What you tell us about how learning is going | During calls, programme work and in the community | To do the work you have paid for |
| Payment records | When you buy | To take payment, and because tax law requires us to keep them |
| Your posts in the community | When you post | To run the community |
| Attendance at live sessions | When you join a session on Zoom | To confirm who attended and to evidence any refund |
| A safeguarding record, if one is ever needed | Only if we become concerned about a child’s safety | Explained in full at section 6 |
2.1 What we never collect
- Your child’s contact details, email address, phone number or address. We hold none of these, and your child does not have an account with us.
- Your card or bank details. Stripe handles payment and we see only the last four digits.
- A diagnosis, a medical report, or clinical information. We do not ask for any of it.
- Your child’s date of birth, other than in the single circumstance described at section 6. We do not ask for your date of birth either, which is why the age question is a confirmation rather than a field.
- Recordings of live sessions. We do not record them, and recording is disabled at the platform level so none exists.
3. Why we are allowed to hold it
| What we do | Legal basis |
|---|---|
| Deliver what you bought, run your account, take payment | Contract |
| Hold information about your child so we can help you | Contract, and our legitimate interest in providing the service properly. We have written that assessment down and will show it to you on request |
| Record your child’s education setting so that we route you correctly | Our legitimate interest in giving you accurate guidance, and in being able to show why a school was or was not contacted if a concern is ever raised |
| Keep a record of the consents and confirmations you gave us, including which version of the rules you accepted | Legal obligation, and our legitimate interest in being able to evidence what was agreed |
| Keep payment and tax records | Legal obligation |
| Send you emails about products and services | Your consent, which you can withdraw at any time |
| Improve what we offer, based on general patterns | Our legitimate interest, using information that cannot be traced to you |
| Record and act on a concern about a child’s safety | Legal obligation and legitimate interests, with the additional condition described at section 6 |
| Use your words as an anonymised quote | Your consent, which you can withdraw at any time |
4. Who we share it with
We do not sell your information and we never will. We use the following providers. Each is bound by a contract that limits what it may do with your information.
| Provider | What it does | Where |
|---|---|---|
| Vercel | Hosts our website: the public pages, your account, and every checkout | Processing agreement in place. We have asked in writing for confirmation of the region where your information and the backups are held, and will state it here as soon as we have it |
| Neon | The database behind our website. Holds your account, what you have bought, and the record of what you agreed to | Processing agreement in place. Region to be confirmed, as above |
| Circle | Hosts the Inside the Loop community, the resource library and the live session links. It takes the monthly membership payment | United States |
| Stripe | Processes payments | United States and Ireland |
| Kit | Sends our emails and holds consent records | United States |
| Resend | Sends our order, consent and account emails from the website | United States, on servers in the European Union where available |
| ScoreApp | Hosts the Reflection and the Fit Check | United Kingdom |
| Zoom | Hosts our live sessions and one to one calls | United States |
| Sync.com | Stores our internal records, encrypted | Canada |
| Namecheap | Provides our email | United States |
Where a provider is outside the UK, the transfer is covered either by an adequacy decision or by the UK approved contractual safeguards. Michela and Jane work only on our instructions, see only what they need in order to do the work, and are held to the same standards we hold ourselves to.
When you comment on one of our posts on Facebook, Instagram or TikTok, your comment is public, and the platform holds it under its own terms as well as ours. We read comments so that we can reply where something needs a reply. When you send us a message on Facebook or Instagram, Meta’s own messaging tools send you an automatic reply telling you that the inbox is not monitored and how to reach us by email. We do not read or answer those messages, no other provider receives them for us, and we delete them from our inbox 90 days after the last message. Messages on TikTok are switched off. We cannot delete your comments or messages from the platforms’ own systems on your behalf, and if you want them removed there you will need to remove them yourself.
5. Your child’s information
The short version
We hold very little about your child, and none of it comes from your child.
What we hold is their first name, their school year, and what you have chosen to tell us about how learning is going for them.
Your child has rights over this information even though they have no account with us. As they get older, they gain more say over it. If your child ever asks us what we hold about them, we will tell them, and we will help them understand it.
We do not contact children, we do not market to children, and we do not profile children. Nothing we do is designed to be used by a child.
We cannot send a privacy notice to your child directly, because we have no way to reach them. This section is written so that you can show it to your child if you want to, in words they have a chance of understanding.
If you would like us to reduce what we hold about your child, email privacy@theconfidentlearningco.org and we will do it.
6. Safeguarding
Please read this part before you tell us something difficult
If we became worried that a child was at risk of harm, we would act on it. That might mean contacting your local authority children’s services, the police, your child’s GP, or your child’s school.
We would tell you first wherever it is safe and appropriate to do so, but we would not ask your permission before acting, and this is not something you can opt out of. A delay could put a child at risk.
We would make a written record of what was said, what we decided, and what we did.
The law allows this. We rely on the substantial public interest condition at Article 9(2)(g) of the UK GDPR, together with paragraph 18 of Schedule 1 to the Data Protection Act 2018, which covers safeguarding children and individuals at risk. We have a written Appropriate Policy Document explaining how we comply, and we will provide it to the Information Commissioner on request.
Where a safeguarding record is made about a child, we record their date of birth. It is the only circumstance in which we do. We need it so that we know when to delete the record, and so that we can find the right record if that person asks us about it years later, as an adult. A first name and a school year would not be enough to identify them reliably.
We keep a safeguarding record about a child until that child’s twenty fifth birthday. That is longer than we keep anything else, and we keep it that long for two reasons. Someone who was a child when a concern was recorded cannot bring a claim in their own name until they are eighteen, and the record is the only evidence that we handled the concern properly. Where a safeguarding record concerns an adult, we keep it for six years from the last entry.
Access to safeguarding records is limited to Adam and Michela. They are held encrypted, and they are never stored on the community platform, in email, or on a personal device.
7. How long we keep things
| What | How long | From when |
|---|---|---|
| Reflection responses | 24 months | The date you completed it |
| Fit Check responses | Deleted at our next quarterly clear-out, and never longer than 4 months. If you go on to book a Pathway call, they are kept with your call records instead. Separately, a short routing value is written to your email record so that we do not offer you something that would not suit you. It holds no answer and no description of anything you told us, and it stays for as long as that record exists | The date you completed it |
| The record of a consent or confirmation you gave us | 6 years after your membership ends | The date your membership ends |
| Your email address, if you agreed to marketing | 24 months of no engagement | Your last open, click or purchase |
| Your email address, if you did not agree to marketing | 6 months | The date the record was created |
| Your member account | Your membership plus 12 months | The date your membership ends |
| Your posts in the community | 12 months after your membership ends | The date your membership ends |
| The record of which rules version you accepted | 6 years after your membership ends | The date your membership ends |
| Our weekly membership reconciliation report | 12 months | The date of the report |
| Workshop bookings and attendance | 12 months | The date of the session |
| Pathway call notes, your child’s education setting and your Your Way Forward plan | 12 months | The date of the call |
| Payment records | 6 years | The end of the tax year the sale falls in |
| Programme and Reset records | 6 years | The end of the programme |
| Emails between us | 24 months | The last message in the thread |
| Messages sent to us on Facebook or Instagram | 90 days | The last message in the conversation |
| A safeguarding record about a child | Until their 25th birthday | Their date of birth |
| Testimonials and their consent forms | 6 years after withdrawal or expiry | The date of withdrawal |
Our full Data Retention Policy is available on request. If you unsubscribe, we keep a minimal suppression record so that we never email you again by mistake. That is the only reason we keep it.
8. Cookies
Our website sets one cookie, and only if you have an account: it keeps you signed in. It is strictly necessary. Our website runs no analytics, no advertising pixels and no session recording of any kind, so it has no cookie banner and nothing for you to accept or refuse.
Three things are supplied by other companies, and they set cookies of their own. When you pay, you leave our website for Stripe’s secure payment page, and Stripe sets fraud prevention cookies there. The Reflection quiz is supplied by ScoreApp and sits inside one of our pages; nothing from ScoreApp loads until you press Start, and one of the cookies it then sets is not essential. Inside the Loop runs on Circle, which sets the cookies needed to sign you in and also runs its own analytics inside the community. When we checked, Circle set those analytics cookies before its banner was answered and kept them after Decline all. We cannot change how Circle’s banner works, and we are pressing Circle to put it right.
Our Cookies and tracking page lists every cookie we know of, who sets it and how long it lasts: theconfidentlearningco.org/cookies.
The Fit Check is opened as a link rather than embedded in one of our pages, so any cookie it sets is set by ScoreApp on their own address rather than by us on ours. Their notice covers it, not this one.
Cookies are governed by the Privacy and Electronic Communications Regulations, which is a separate set of rules from the rest of this policy. If we ever introduce a cookie of our own that is not strictly necessary, we will ask you before we set it.
9. Your rights
You can ask us to show you what we hold about you, correct anything wrong, delete it, restrict how we use it, object to how we use it, or send it to you or someone else in a portable form. Where we rely on your consent, you can withdraw it at any time. Where we rely on our legitimate interests, you can object, and we will either stop or explain in writing why we cannot.
Email privacy@theconfidentlearningco.org. We will reply within one calendar month. We will not charge you.
Some things we cannot delete. Payment records have to be kept for tax purposes, a safeguarding record is kept for the reasons at section 6, and where you have bought something we keep the record of what you agreed to for as long as a claim about that purchase could still be brought. If you ask and one of those applies, we will tell you plainly rather than quietly keeping it.
If a request is about information recorded about you when you were a child, we may ask you for proof of identity. We ask because the email address on the record belongs to a parent rather than to you, and giving a safeguarding record to the wrong person would be a serious harm.
10. Complaints
If you are unhappy with how we have handled your information, tell us at privacy@theconfidentlearningco.org. We will acknowledge it within five working days and respond within 30 days.
For anything else, including an order, a refund or a service complaint, email complaints@theconfidentlearningco.org.
If you are unhappy with anything we have done with your personal information, please tell us first: email privacy@theconfidentlearningco.org. We will acknowledge your complaint within five working days and respond within 30 days. Complaining to us costs nothing and does not affect any other right you have.
You also have the right to complain to the Information Commissioner’s Office, the independent authority for data protection in the United Kingdom, at ico.org.uk/make-a-complaint or on 0303 123 1113, at any time and whether or not you have complained to us. Our registration reference is ZC239734. If you believe your rights have been infringed, you may also seek a remedy through the courts.
11. Changes to this policy
We may update this policy. The version in force is the one published here, and the date it was last updated is at the top. If we make a change that materially affects how we use your information, we will tell you by email.
Adam, Michela and Jane do not diagnose, treat, or assess any condition.