Privacy Policy

A short summary first

Skylark 11+ is used by parents on behalf of their children. We only collect what's needed to run the diagnostic, generate a learning plan, and track progress — we don't sell data, we don't run advertising trackers on the site, and a child never creates their own account or enters their own information; everything is entered by the parent.

1. Who this applies to

This policy covers parents/guardians who create an account, and the children whose profiles they add. Because this service is likely to be accessed by children (even though accounts are held by adults), we've written it with the UK Information Commissioner's Office's Children's Code (the Age Appropriate Design Code) in mind: settings default to the most privacy-protective option, and we collect the minimum needed to provide the service.

2. What we collect

• Parent account data: name, email address, and a securely hashed password (we never store your actual password).
• Child profile data: first name, year group, target exam type, target school (optional), and 11+ exam date — entered by the parent.
• Performance data: answers given, time taken per question, and the resulting scores/ratings, used to run the adaptive engine and build the readiness report.
• Payment data: if you subscribe, payment is handled entirely by Stripe — we never see or store your card details. We keep a record of your subscription status and Stripe customer reference only.
• Basic technical data: standard server logs (IP address, browser type) kept briefly for security and debugging.

3. What we don't do

• We don't run third-party advertising or tracking scripts on the site.
• We don't sell or rent personal data to anyone, for any reason.
• We don't let a child create their own login or enter data unsupervised — every account is a parent account.
• We don't use a child's performance data for anything beyond running this service (no profiling for advertising, no sharing with third parties for marketing).

4. Why we process this data

To create and secure your account, run the diagnostic and adaptive practice engine, generate and update the personalised learning plan, process payment for the paid tier, and send you service-related communications (e.g. progress updates, once that feature is live). We rely on your consent (given when you register and add a child) and, for paid accounts, on performing our contract with you.

5. Who we share it with

Only the service providers needed to run Skylark 11+: our hosting/database provider, Stripe for payment processing, and an email provider (Resend) to send account and password-reset emails. We do not share data with data brokers, advertisers, or any other third party. None of our processors are permitted to use your data for their own purposes.

6. How long we keep it

For as long as your account is active. If you delete your account (or ask us to), we'll delete your and your children's personal data within 30 days, except where we're required to keep limited records for legal/accounting reasons (e.g. payment records).

7. Your rights

Under UK GDPR, you can ask to see the data we hold about you or your child, ask us to correct it, ask us to delete it, or ask us to export it. You can also delete your account and all of your data yourself at any time from your account page. To ask us anything about your data, contact us at skylark11plus@gmail.com. You also have the right to complain to the ICO (ico.org.uk) if you think we've handled your data wrongly.

8. Contact

Skylark 11+ is operated as a sole trader business based in Birmingham, UK. For any question about this policy or your data, email skylark11plus@gmail.com.