1. Who is responsible?
SchoolRivet Ltd is responsible for personal information collected through this website. The company is registered in England and Wales, company number 17548262. Its registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
For privacy questions or requests, use our contact form, or write to the registered office marked “Privacy request”. Please keep the initial message general so we can agree a suitable way to handle your request.
2. Information we collect
The enquiry form asks for your name, school or organisation, work email address and message. All four fields are required so we can understand and respond to your request. Please keep messages general and do not include identifiable pupil information, staff records, passwords or other sensitive personal data. The form does not accept attachments.
When the website is hosted on Netlify, its hosting and form-processing services may also process technical information such as IP addresses, browser/request details, submission times and spam-screening information. This is separate from the four details you type into the form.
3. Why we use it and our lawful basis
We use enquiry information to understand your requirements, reply to you, discuss suitable work and keep relevant correspondence together. We do not use the form to subscribe you to marketing or make automated decisions about you that have legal or similarly significant effects.
Our lawful basis for ordinary business enquiries is legitimate interests: responding to people who contact us about our services and managing those conversations. We consider the necessity of the processing and your rights and reasonable expectations. Submission is not treated as consent to marketing. If you enquire personally about entering a contract, steps taken at your request before that contract may instead use the contract basis where applicable.
4. Hosting, form processing and other services
Netlify hosts the website and processes form submissions on our behalf. Accepted submissions are managed in the Netlify Forms dashboard. Netlify documents spam filtering using Akismet as part of its Forms service, in addition to the hidden honeypot field on this form. We have not added a separate form service, CAPTCHA widget, CRM or newsletter integration.
When we reply to an enquiry, our business email service processes the correspondence. If submission email notifications are enabled, they create additional copies with the selected email service. We use Microsoft 365 for business email; its processing terms are available through Microsoft's Data Protection Addendum.
Access to enquiry records is limited to the founder and service providers needed to operate the enquiry process. We may also need to disclose information where required by law. We do not sell enquiry information.
5. International processing
Netlify, Microsoft and their subprocessors may process information outside the UK. This website does not promise UK-only storage.
Our providers' processing terms describe the safeguards for international transfers. Netlify's Data Processing Agreement includes standard contractual clauses and provisions for the UK international data transfer addendum where applicable. Microsoft's processing terms also describe its transfer safeguards. You can contact us for information about the safeguards relevant to your enquiry.
Netlify privacy information and Netlify Forms spam filtering provide further service information.
6. How long we keep enquiries
We keep information only for as long as needed to deal with your enquiry, conclude any follow-up and meet any applicable legal obligations or justified need to establish or defend a claim. Relevant records needed for agreed work are handled under the arrangements for that work, rather than keeping all enquiry data indefinitely.
We review enquiry records when the enquiry is resolved and delete information that is no longer needed. These criteria apply to Netlify submissions, spam records, exports, replies and any notification emails. Service providers may retain restricted backup copies in accordance with their processing terms and deletion cycles.
7. Your rights
Depending on the circumstances, you can ask to access your personal information, correct it, erase it or restrict its use. Data portability applies only where the relevant legal conditions are met, including certain automated processing based on consent or contract. These rights are not absolute.
You have the right to object to processing based on legitimate interests. Please tell us the circumstances of your request so we can consider it.
Use our contact form or write to the registered office to exercise your rights. We may need proportionate information to verify your identity. We will handle requests within the applicable statutory timescale. You can also complain to the UK Information Commissioner's Office through its complaints service.
8. Cookies, analytics and tracking
This website does not use analytics, advertising pixels, third-party embeds, externally loaded fonts or non-essential cookies or browser storage. The Trips demonstrations use local images and in-memory controls.
Netlify processes hosting request logs and spam-screening information to operate and protect the service. If we introduce non-essential tracking or browser storage, we will update this notice and obtain consent where required before enabling it.
9. Changes to this notice
We will update this notice when the enquiry process or services change. The effective date above identifies this version. For a question about it, contact SchoolRivet.