1. Introduction
Tykeoons Ltd ("we", "our", "us") is committed to protecting the privacy and personal data of our users. This Privacy Policy outlines how we collect, use, store, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to users of the Tykeoons platform, including subscribing schools and their nominated staff members.

2. Data We Collect
We only collect the personal data necessary to manage access to the Tykeoons platform. This includes:

• Full name of each registered user (e.g. teacher or staff member)
• School name and contact details
• Email address for account creation and support
• Referral information (if applicable)

We do not collect or process any data relating to pupils or children.

3. How We Use Your Data
We use the personal data we collect for the following purposes:

• To create and manage user accounts for authorised school staff
• To provide access to the Tykeoons platform and resources
• To issue renewal reminders and other subscription-related communications
• To manage our referral and discount programmes
• To collect testimonials and feedback for improving the service
• To display school name and logo on our website or promotional materials (in accordance with our Terms and Conditions)

4. Legal Basis for Processing
We process personal data under the lawful basis of:

• Contractual necessity – to fulfil our contractual obligations with the subscribing school
• Legitimate interests – for the ongoing improvement, support, and promotion of the Tykeoons platform

5. Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal data to third parties, except:

• Where required by law
• To trusted third-party service providers for IT hosting and support, under strict confidentiality agreement.

6. Data Retention
We retain user data for as long as the subscription is active. Following cancellation or non-renewal, user accounts are deactivated and associated personal data is retained for up to 12 months before secure deletion, unless required for legal or financial record-keeping.

7. Data Security
We implement appropriate technical and organisational measures to ensure a high level of security for all data processed via our platform. This includes encrypted storage, password protection, and access control protocols.

8. Your Rights
As a data subject under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data (subject to our legal obligations)
• Object to or restrict processing in certain circumstances
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us at connect@tykeoons.com.

9. Cookies and Analytics
The Tykeoons platform may use minimal cookies necessary for session management and performance optimisation. We do not use cookies to track user behaviour for advertising purposes.

10. Updates to This Policy
We may revise this Privacy Policy from time to time. All updates will be posted on our website, and where appropriate, we will notify registered users directly.