Data Protection Policy
Last updated: January 2026
1. Our Commitment
Happy Home Education is committed to ensuring the security and protection of the personal information we process, and to providing a compliant and consistent approach to data protection.
2. Data Protection Principles
We adhere to the data protection principles set out in UK GDPR:
- Lawfulness, fairness, and transparency: We process data lawfully and openly
- Purpose limitation: We only use data for specified, legitimate purposes
- Data minimisation: We only collect data that is necessary
- Accuracy: We keep data accurate and up to date
- Storage limitation: We don't keep data longer than necessary
- Integrity and confidentiality: We keep data secure
- Accountability: We demonstrate compliance with these principles
3. Safeguarding Children's Data
As an educational platform serving families, we take extra precautions with children's data:
- All children's data is managed through parent/guardian accounts
- We never directly market to children
- Children's progress data is only visible to their parent/guardian
- Photos and work samples uploaded are stored securely and not shared
- Tutor communications are monitored and logged for safeguarding
4. Security Measures
We implement robust security measures including:
- SSL/TLS encryption for all data in transit
- Encrypted storage for sensitive data at rest
- Regular security audits and penetration testing
- Staff training on data protection and security
- Access controls limiting who can view personal data
- Secure backup procedures
5. Third-Party Processors
We use carefully selected third-party services to help deliver our platform. All processors are required to:
- Process data only on our documented instructions
- Ensure confidentiality of processing
- Implement appropriate security measures
- Assist us in responding to data subject requests
- Delete or return data at the end of the relationship
6. Data Breach Procedures
In the event of a data breach, we will:
- Assess the risk to individuals' rights and freedoms
- Notify the ICO within 72 hours if required
- Inform affected individuals without undue delay if high risk
- Document the breach and our response
- Take steps to prevent future breaches
7. International Transfers
We primarily store and process data within the UK and European Economic Area. Where data is transferred outside these areas, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
8. Contact Our DPO
For any data protection queries or to exercise your rights, contact our Data Protection Officer:
Email: dpo@happyhomeed.com
Post: Data Protection Officer, Happy Home Education Ltd, [Address]