Privacy Policy

At Scoresheet, we are committed to protecting the privacy and security of personal data. This privacy policy outlines how we collect, use, store, and share personal information in compliance with the UK General Data Protection Regulation (GDPR).

1. Data We Collect

We collect and process the following categories of personal data from schools for the purpose of generating dashboard reports:

  • Student names

  • Teacher names

  • Form groups

  • Demographic data (not limited to: gender, ethnicity, age)

  • Exam results

2. Purpose of Data Processing

The personal data collected is used solely to generate detailed reports and dashboards for the school, analysing student performance and tracking various indicators to aid the educational development of students.

3. Legal Basis for Processing

We process personal data under the lawful basis of legitimate interest to assist schools in monitoring and improving student outcomes. This processing is in line with educational objectives and school policies.

4. Data Storage and Security

All data is stored securely in accordance with industry-standard security practices. Access to the data is restricted to authorized personnel within Scoresheet and school staff who are directly involved in student performance analysis. Data is protected against unauthorized access, loss, or misuse through encryption and secure servers.

5. Data Sharing

We do not share student data with third parties. Access to the data is only provided to school staff as authorised by the school's own privacy policy. Our role is to act as a data processor, and we work in compliance with the school’s instructions regarding data use and access.

6. Data Retention

We will retain personal data for as long as is necessary to fulfil the purposes outlined in this notice, or as required by applicable law. Once the data is no longer needed, it will be securely deleted.


7. Data Subject Rights

In accordance with GDPR, individuals have the right to:

  • Access their personal data

  • Request correction of inaccurate or incomplete data

  • Request deletion of personal data where applicable

  • Restrict or object to the processing of their data

  • Withdraw consent where processing is based on consent

8. Contact Information

For any inquiries related to this privacy policy or the processing of personal data, please contact us through the contact form.