- A UK home education platform for finding, learning and saving.
Last Updated: 20 May 2025
Home Educators LTD (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website and services. It also outlines your rights under the UK General Data Protection Regulation (UK GDPR) and other applicable laws. We want to ensure you understand what information we collect and how we use it in plain English, so that you and your family can confidently use our educational resources, events, and services.
By using our website or services, you agree to the terms of this Privacy Policy. We encourage you to read it carefully. If you have any questions, please contact us using the details in the “Contact Us” section below.
Home Educators LTD is a private limited company registered in the United Kingdom. We offer digital educational resources, events, and family-led learning sessions for home-educating families. For the purposes of data protection law, Home Educators LTD is the “data controller” of the personal information collected on this website – this means we determine how and why your personal data is processed. You can find our contact and business details here:
Company Name: Home Educators LTD
Business Address: 20 Wenlock Road, London, N1 7GU, United Kingdom
Email: contact@homeeducators.co.uk
Telephone: 03300 888 978
If you have any concerns about your data or this policy, please reach out to us using the contact information above.
We only collect personal data that we need to provide our services to you. In general, we collect information directly from you when you interact with our site (such as when you register an account, make a purchase, or book an event). We do not collect significant personal information from casual visitors who are just browsing our site, except basic technical data via essential or consented cookies (see our Cookie Policy). Below are the types of personal data we may collect:
Identity and Contact Data: This includes information like your name, email address, telephone number, and postal/billing address. We collect these details when you create an account on our site or provide them during a purchase or event booking so we know who you are and can contact you if needed.
Account Credentials: If you register on our website, we collect the login information you provide (such as username and password). Passwords are stored in an encrypted/hashed form for security.
Order and Booking Information: Details about the products you purchase or events you book with us. For example, we record what digital resources you’ve bought or which learning session you’ve signed up for, the date and time of bookings, ticket quantities, and any reference or order numbers.
Child Participant Information: If you enroll a child or other family member in one of our events or sessions, we may ask for the child’s name and age, and any additional details you choose to provide for safeguarding. For instance, event registration forms might request information on any special educational needs (SEN/SEND) or medical conditions/notes for the participant’s safety. We only collect this sensitive information with your consent and for the specific purpose of ensuring a safe and accommodating experience for your family. (See “Special Category Data” below for more on how we handle sensitive data.)
Payment and Transaction Data: When you make a purchase or booking, we record information related to the transaction, such as the payment method (e.g. Stripe or PayPal), the amount paid, and an internal transaction/order ID. Important: We do not collect or store your full credit or debit card details on our servers. All card payments are processed securely by third-party payment providers (like Stripe or PayPal) on their systems. We only receive limited information from them (for example, a confirmation that payment was successful, a transaction ID, and possibly the last four digits of your card or the email address tied to your PayPal account).
Communication Data: Any information you voluntarily provide when communicating with us. For example, if you send us an email, fill out a contact form, or call us, we may keep a record of that correspondence. This could include your email address, the content of your message, and any other contact details or information you provide. Similarly, if we offer support chat or a forum in the future, any information you post or submit there would be collected.
Newsletter Subscription Data: If you opt-in to receive our newsletter or marketing emails, we will collect your email address (and name, if you provide it) for the purpose of sending you updates. We only add you to our mailing list if you have given clear consent (for example, by entering your email in a sign-up form and confirming). You can unsubscribe at any time.
Usage Data and Technical Information: When you use our website, we may collect technical data such as your IP address, browser type, device information, and browsing actions on our site (pages visited, time spent, clicks, etc.). We typically gather this via cookies or analytics tools only if you have given consent for analytics cookies – see our Cookie Policy for details. We use this information to understand how users navigate our site and to improve the user experience. We do not normally use usage data to identify you as an individual. For example, we might see that “50 users visited our Event page today” or use aggregated statistics, but not that you personally visited a specific page (unless you are logged in or have provided that information). Additionally, our web servers may log standard data such as IP addresses and device identifiers for security and debugging purposes. This technical data is used solely to maintain and secure our website environment.
We collect most personal data directly from you. For instance, you provide information when registering, placing an order, booking an event, or filling in forms. In some cases, we may receive data from third parties at your direction – for example, if you choose to log in via a social media account or payment service, or if a co-educator/partner you authorized provides us details (however, currently our site does not use social login). Apart from such scenarios, we generally do not obtain personal data about you from third-party data brokers or public databases.
Providing Children’s Data: Our services are intended for parents, guardians, and adult home educators. We understand that in the context of family learning sessions, parents may provide personal data about their children (e.g., name and age of a child participant). We expect that any information about children is given by a parent or guardian with the authority to do so. If you are under 13 years old, please do not register an account or send us personal information without your parent or guardian’s permission. The UK GDPR requires parental consent for offering online services directly to children under 13. We do not knowingly collect personal data directly from children under 13 without proper consent. If we discover we’ve received personal data from a child under 13 without parental consent, we will delete it.
We will only use your personal information for the following purposes, and only when we have a valid legal reason (lawful basis) to do so. This section describes what we do with the data and why. (For a summary of the lawful bases we rely on, please see “Lawful Bases for Processing” below.)
To Provide Our Products and Services: We use your information to fulfill the orders and services you request. This includes processing purchases of digital resources, handling event or session bookings, and delivering any digital downloads or confirmations. For example, we need to use your name and email to register you for an event or give you access to a purchased e-book. We also use contact information to send you booking tickets, order receipts/invoices, or to allow you access to online content you’ve paid for. Legal basis: This is generally necessary for the performance of a contract with you (i.e., to deliver the service or product you asked for).
Account Management: If you create an account on our site, we use your data to set up and maintain your user profile. This lets you log in securely, review your past orders or upcoming event bookings, download resources you’ve purchased, and manage your preferences. We may also use your email to verify your account and to assist with password resets or account-related queries. Legal basis: Performance of our contract with you (providing an account as requested), and our legitimate interest in offering a convenient service (since having an account is optional and meant for your benefit).
Communication and Customer Support: We use your contact details (email, phone) to communicate with you about your orders, bookings, or any inquiries you make. This includes sending important service-related messages such as order confirmations, event reminders, updates or changes to an event you’ve booked, and responses to any questions or support requests you send us. For instance, if an event’s schedule changes, we might email or call you to let you know. We may also notify you about critical information like website maintenance, security alerts, or policy updates. Legal basis: This is typically part of fulfilling our contract (we need to keep you informed about the services you’re using) or based on legitimate interests – ensuring you have a good customer experience and that you receive necessary information about the services you use. We will not send you promotional messages without consent (see next point).
Marketing and Newsletter Emails (with Consent): If you have explicitly subscribed to our newsletter or marketing communications, we will use your email address (and name, if given) to send you newsletters, updates on new resources, upcoming events, or promotions that we think may interest home-educating families. These communications are opt-in only – meaning you will only receive them if you chose to sign up. You can unsubscribe at any time by clicking the “unsubscribe” link in the email or contacting us. We do not spam and we do not share your email with third-party advertisers. Legal basis: Consent – you will have given clear consent for us to send you such emails (for example, by ticking a sign-up box or confirming your email subscription). If you do not give consent, we will not send you marketing emails. (Note: Even if you opt out of marketing emails, we may still send essential service emails as described above, since those are not promotional.)
Event Safety and Safeguarding: For our in-person or live family learning sessions, we use the information you provide about participants to ensure we can maintain a safe environment. For example, if you inform us about a child’s allergy or medical condition on an event registration form, we will use that information to make necessary accommodations or preparations (such as ensuring no allergen is present, or being aware of any medical needs). Similarly, information about special educational needs helps us tailor the session to be inclusive and supportive. We will only use this sensitive information for the purpose for which you provided it – i.e., safeguarding and appropriate care during the event. Legal basis: We treat this as explicit consent (you choose to provide the information for this purpose). In urgent situations, we may also rely on vital interests – for instance, if there is a medical emergency at an event, we might share a participant’s relevant health information with medical personnel to protect someone’s life or well-being. (See “Special Category Data” below for more on how we handle health/SEND information.)
Analytics and Improvement of Our Website: We want to ensure our website and resources are useful and easy to navigate. If you consent to analytics cookies, we use tools like Google Analytics to collect data about how visitors use our site (e.g. which pages are most popular, how long people spend on a page, what site referred them, etc.). This helps us understand user behavior in aggregate so we can improve site content, layout, and performance. For example, analytics might tell us that a lot of users are interested in science resources, so we might develop more of those. We may also look at technical data (like browser versions or device types) to ensure compatibility and a smooth experience for most users. Importantly, this analysis is typically done on an anonymous or aggregated basis – we look at trends and statistics, not at individual users’ browsing habits. Legal basis: Consent – we will only enable analytics tracking if you have accepted analytics cookies (see our Cookie Policy for how we obtain consent for this). If you decline cookies, our site will still function; we simply won’t collect analytics data about your visit.
Website Security and Fraud Prevention: We use personal data to protect our website, business, and users from fraud, abuse, or unauthorized access. This can include verifying account logins, using CAPTCHA or similar tools to prevent spam bots, and monitoring login or transaction activity for signs of suspicious behavior. Our security plugins (for example, SecuPress or similar WordPress security tools) may temporarily log users’ IP addresses or device information to detect multiple failed logins or to block malicious attacks. We also keep server logs and backups which might include IP addresses, as part of routine security and debugging. This data is only used to keep the site safe and is typically overwritten or auto-deleted after a short period unless it’s needed to investigate a security incident. Legal basis: Legitimate interests – it is in our (and our users’) legitimate interest to ensure the security of our services. This type of processing also helps us comply with legal obligations to safeguard personal data.
Legal Compliance and Duties: Lastly, we may need to process or retain certain personal information to comply with our legal obligations. For example, UK law requires us to keep transaction records and invoices for a certain period for tax and accounting purposes. We might also need to use or disclose personal data in response to lawful requests by public authorities (like complying with a court order or an investigation) or to fulfill responsibilities related to child safeguarding laws. Legal basis: Legal obligation – we will process personal data where we are legally required to do so. For instance, we keep business records (including purchase and payment details) for at least 6 years to comply with UK tax law. If the law obliges us to share data with regulators or law enforcement (for example, in case of an audit or a safety incident), we will only share what is necessary and required.
We will not use your personal data for purposes that are not compatible with those above without obtaining your permission or unless we are required or allowed by law to do so. We do not sell your personal information to third parties. We also do not use your data for any kind of automated decision-making or profiling that has legal or significant effects on you (like credit scoring or automated job offers). Any analysis we do is to improve content and is not used to make decisions about individuals.
Under the UK GDPR, we must have a valid “lawful basis” to collect and use your personal data. This means for each type of processing, there is a specific reason allowed by the law. We have described the applicable bases above alongside each purpose, but here is a summary of the lawful bases we rely on and what they mean:
Contract: We process some personal data because it is necessary to fulfill a contract with you or to take steps at your request before entering into a contract. In plain language, this covers situations where you ask us to do something and we need your data to do it. For example, when you buy a resource or book an event, we need to use your name, contact, and payment info to process that purchase and provide what you paid for. We couldn’t deliver your e-book or reserve your event spot without using these details. Similarly, if you create an account, we use your data to set up and manage that account as part of the service you requested. Without this information, we can’t perform the agreement between us.
Consent: We rely on your consent for certain types of data processing. “Consent” means you have given us a clear, affirmative permission to handle your data in a specific way. For example, we ask for your consent to send you marketing/newsletter emails – you’ll only get those emails if you opted in. Another example is analytics cookies or non-essential cookies: we will not activate those unless you consent via the cookie banner. Importantly, if we ever need to collect sensitive personal data (such as health information for event safety), we will ask for your explicit consent for that specific purpose. You have the right to withdraw your consent at any time. Withdrawing consent will not affect the legality of what we did with your data before you withdrew, but it means we will stop the particular processing going forward (e.g., if you withdraw consent for newsletters, we will stop emailing you). We make sure it’s as easy to withdraw as it was to give consent.
Legal Obligation: Some data processing is done because we are legally required to do it. This covers obligations under laws and regulations. A common example is retaining business transaction records for tax, accounting, or auditing purposes – UK companies are required to keep such records for a certain number of years. If you make a purchase, we must keep basic details of that transaction (like who bought what and when) to meet financial reporting laws. We may also have legal obligations related to safeguarding when working with children – for instance, if a serious incident occurs at an event, we might be required to provide information to authorities. In any scenario where the law compels us to process or provide certain data, we will do so to comply.
Legitimate Interests: This is a basis that applies when we use your data in a way that is necessary for our legitimate interests (or those of a third party) as a business, provided that this use is fair, balanced, and does not unduly impact your rights. We rely on legitimate interests for things like maintaining the security of our website and services, improving and developing our offerings, and communicating with our existing customers about similar services (within what is allowed by law). For instance, it’s in our legitimate interest to protect our site against fraud or attacks – so we might process IP addresses or use security tools to monitor activity for that purpose. We also have a legitimate interest in understanding how our users use the site (to improve navigation and content), but for analytics we will still seek your consent via cookies due to privacy regulations. Whenever we process data on this basis, we carefully consider and balance any potential impact on you (both positive and negative). We will not rely on legitimate interests for processing that is particularly intrusive or that you would not reasonably expect, and you have the right to object to processing done on this basis (see “Your Rights” below).
Special note: In addition to the bases above, in rare cases we might rely on “Vital Interests” as a lawful basis – this would only happen to protect someone’s life or health in an emergency. For example, if during one of our events a participant is in a medical emergency and is unable to consent, we might share their provided medical information with emergency responders to help save their life. Vital interests is a very limited ground and, fortunately, such situations are not common; it’s mentioned here for completeness.
We do not typically rely on “Public Task” (performing a task in the public interest) as a basis, since we are a private company (not a public authority). And as stated, we do not engage in automated decision-making that would require a separate basis.
If you have any questions about the lawful basis for any specific processing of your data, feel free to contact us and we will explain further.
Some personal information is considered more sensitive under data protection law – for example, details about health, disabilities, or medical needs. In the context of our services, the only time we might collect such “special category” data is when you voluntarily provide it for safeguarding purposes (e.g., informing us of your child’s medical condition, allergy, or special educational need when booking an event). We understand the importance of this information and treat it with extra care and confidentiality.
How We Handle Sensitive Data: If you provide health or SEND-related details for an event or session, we will use that information only for the specific purpose of ensuring safety, appropriate care, and accommodations during that event. For example, we might inform the event instructor that “Student A has a severe nut allergy” so that we can make the environment safe, or note that “Child B has an auditory processing disorder” so the instructor can use supportive communication techniques. We will not use this information for any other purpose, and we will not share it with anyone except those who need to know for the event (e.g., the session leader or a first-aid staff, if applicable). We will never use sensitive health information for marketing or profiling.
Consent and Protection: We will ask for your explicit consent at the time of collecting any such information (for instance, the event registration form will have a clear prompt asking for these details for safety reasons, and by providing it you consent to our using it for that purpose). If you choose not to provide such information, that’s absolutely fine – it’s voluntary. Just be aware that we won’t be informed of any special requirements, which might limit our ability to accommodate specific needs fully. Providing this information is completely at your discretion and meant to benefit you and your family’s experience.
Storage and Deletion: We do not retain sensitive personal data longer than necessary. Information like medical notes or special needs, provided for an event, will typically be deleted or anonymized once it is no longer required for the safeguarding purpose. In practice, this usually means we will securely delete that information after the event or session has taken place and any immediate need for follow-up has passed. For example, if you provided medical info for a workshop on June 1, once that workshop is over and we’ve ensured there were no incidents or further actions needed, we will remove that medical info from our records. We might keep a note that “accommodations were requested” for internal reporting, but not the specific medical details. The only exception to immediate deletion would be if we are required by law to retain it for a longer period (for instance, if an incident occurred and records are needed for legal reasons or insurance). In such a case, we would store it securely and only as long as required by those obligations.
By handling your sensitive data in this way, we aim to respect your privacy and protect your family while still ensuring that our events are safe and inclusive. If you have any concerns about providing such information, please contact us to discuss how we can accommodate your needs in a way that you’re comfortable with.
We treat your personal data with care and confidentiality. We do not sell your personal information to anyone. However, in order to run our business and provide services to you, we sometimes need to share data with third parties who are our trusted service providers or partners. Whenever we share data, we ensure it’s done securely, for legitimate reasons, and only the minimum necessary information is disclosed. Here are the types of third parties with whom we may share your personal data (and why):
Payment Processors (Stripe and PayPal): We use reputable third-party payment gateways to handle payments on our site. If you make a purchase or booking with a credit/debit card or via PayPal, your payment details are transmitted directly to these payment providers. For example, if you pay by card, the card information you enter is securely sent to Stripe, our card payment processor. Stripe then processes the payment and tells us if it was approved or declined. Similarly, if you choose PayPal, you are redirected to PayPal’s website to log in and approve the payment, and PayPal then confirms the transaction with us. We share with these providers the information needed to process the payment – this can include your name, email, billing address (for fraud prevention or receipt purposes), and the amount to charge. We do not see or store your full card number or PayPal login credentials; those go directly to the payment provider. After a successful transaction, Stripe/PayPal shares back with us a confirmation and details like the last four digits of your card (for receipts) or a transaction ID. This allows us to record that you’ve paid. These payment companies are data controllers in their own right for the payment information you provide to them, and they have their own stringent security and privacy policies. We encourage you to read Stripe’s and PayPal’s privacy policies if you want more information on how they handle your data.
Email Service & Newsletter Platform (Mailchimp): We use Mailchimp (or a similar email service provider) to manage our email newsletters and mailing list. If you subscribe to our newsletter, the email address (and name, if provided) you gave us is stored on Mailchimp’s system. We use Mailchimp to design and send out our newsletter emails in bulk. Mailchimp acts as a “data processor” on our behalf – meaning they hold and process that data only to send emails as we direct, and they will not use your email for their own purposes. When you unsubscribe from our newsletter, we will remove your email from our active mailing list on Mailchimp. (Mailchimp may retain some information about unsubscribed contacts to ensure they maintain your opt-out, as per their policies.) Mailchimp is based in the United States, so your email address might be stored on servers outside the UK – we address how we safeguard such transfers in the “International Data Transfers” section below.
Website Hosting and IT Service Providers: Our website is built on WordPress (with various plugins and tools as described earlier). We host our website and database on servers provided by a third-party hosting company. This means that all data you provide through the website (account info, order info, etc.) is stored in that server environment. Our hosting provider may technically have access to the data on the server, but they are not allowed to use it for anything other than hosting and maintaining the service. We also use certain plugins or services to help run the site – for example, if we use a backup service or a content delivery network (CDN) to speed up the site, those services might temporarily process data for performance and reliability. We ensure that any such provider has appropriate security and privacy measures in place. For instance, our host and key plugin providers are GDPR-compliant and only process data under our instructions.
Analytics Providers (e.g., Google Analytics): If you have consented to analytics cookies, we use Google Analytics to help us understand how users visit and use our website. Google Analytics will set cookies and collect usage data (like pages visited, time on site, IP address, etc.) and store that on Google’s servers (which may be outside the UK). Google provides us with aggregated reports – for example, it might tell us “X number of users visited the math resources page this week.” We do not receive information that personally identifies you from Google Analytics. We have configured Google Analytics to anonymize IP addresses where possible (this means the last digits of your IP are masked so it cannot be traced back to you easily). Google acts as a data processor for us in this context, and we have an agreement in place with them to protect the data. You can opt out of Google Analytics by not consenting to those cookies (via our banner) or using Google’s opt-out tools. (See our Cookie Policy for more.)
Event Partners or Co-Organizers: Currently, Home Educators LTD primarily runs events ourselves for our community. If in the future we collaborate with another organization or a co-host for an event (for example, if we co-host a field trip with a museum or hire a specialist instructor), we would only share the necessary details for that event with the partner. This might include a list of first names of attendees or the ages of children (so the museum guide knows the audience age range), or relevant health information if the event requires it (for instance, informing a venue if someone has mobility needs so they can accommodate). We will not share full contact details with event partners unless it’s absolutely needed for the event logistics, and we would inform you in advance if, say, a third-party venue needs you to sign in separately. In most cases, we keep attendee details internal and simply provide headcounts or anonymous info to venues (“we have 20 children ages 8–12 attending”).
Service Providers for Communications & Support: We might use third-party platforms to help us communicate with you or provide support. For example, if we use a service for sending transactional emails (order confirmations) other than our own mail server, or if we implement a customer support ticketing system or live chat, those providers will process your contact info and communications with us. One example is our email infrastructure: Home Educators LTD uses Google Workspace for our email and document management. So, if you email contact@homeeducators.co.uk, your email is actually hosted by Google (Gmail for business). Google will store that email communication on their servers, which is a form of processing. Similarly, if we maintain documents or spreadsheets with booking information or attendance lists, those might be stored on Google Drive (part of Google Workspace). Google is a third-party processor in these cases, and we rely on their robust security. We have confidentiality agreements in place and Google Workspace is a GDPR-compliant platform.
Security and Anti-Fraud Services: To protect our site and users, we use security plugins and possibly external security services. For example, our security plugin might use an external database of malicious IP addresses to compare against. If we suspect fraudulent activity (like someone using stolen cards), we might use a third-party fraud detection service or consult with payment processors. These scenarios are rare, but if they occur, any sharing of data is strictly for security risk assessment and prevention of fraud. For instance, Stripe (the payment processor) has its own fraud detection and may inform us or automatically block a transaction it finds suspicious. In some cases, we might share data with law enforcement or cybersecurity professionals if we detect unlawful behavior (see next point).
Legal Requirements and Protecting Rights: We may disclose personal information to third parties (such as regulators, law enforcement agencies, courts, or other authorities) when we believe in good faith that we are legally obligated to do so. For example, if HM Revenue & Customs (the UK tax authority) or another regulator requires access to our records, we must comply. We might also share information with law enforcement if required (e.g., in response to a court order or a subpoena). Additionally, if necessary, we may share data to enforce our terms and conditions or to protect the rights, property, or safety of Home Educators LTD, our users, or others. This could include sharing information with our legal advisors or insurers if a situation requires it (for instance, handling a dispute or insurance claim related to an event). We will only ever share the minimum information necessary in such cases and within the bounds of the law.
Business Transfers: If in the future our company undergoes a business transition such as a merger, acquisition by another company, or sale of all or part of our assets, user personal data might be one of the assets transferred to or evaluated by the new owner. For example, if Home Educators LTD is acquired by another educational company, the information we have (customer accounts, email list, etc.) would likely be transferred so that the service can continue under the new entity. In such cases, we will ensure that the new owner understands that they must honor the commitments we have made in this Privacy Policy. We will also notify users of any such change in ownership or control, and your choices regarding your personal data will remain (for instance, you could choose to delete your account if you do not wish to continue under new management).
In all cases of sharing, we aim to anonymize or pseudonymize data if full details are not needed. For instance, sharing analytics with a service might involve anonymized data. Or if we’re discussing user numbers with a partner, we don’t need to share individual identities.
Lastly, we require any third-party service providers to handle your data securely and lawfully. We have contracts or terms in place with our providers (such as Data Processing Addendums with companies like Mailchimp, Google, etc.) that legally bind them to protect your information and only use it for the specified purposes we’ve agreed on. They cannot use your data for their own unrelated purposes.
If you’d like more details about the third parties we use or have specific questions (for example, “Does your website use [X service] and what data do they get?”), feel free to contact us and we’ll provide as much information as we can.
Home Educators LTD is based in the UK. However, many of our service providers are located in other countries, or have servers and infrastructure in other countries. This means that your personal data may be transferred to, or stored in, a country other than the UK. In particular, note that:
Our email/newsletter provider (Mailchimp) and some of our technical service providers (like Google and Stripe) are U.S.-based companies. Data like your email address (for newsletters) or analytics information may be processed and stored on servers in the United States.
Some data may also be stored or backed up in the European Union (EU). For example, our website hosting or certain plugins might store data in EU data centers. The EU is currently recognized by the UK as having adequate data protection laws equivalent to UK standards, so transfers to the EU are permitted.
When we transfer data to the U.S. or any country that is not deemed “adequate” by UK data protection authorities, we take steps to ensure your data remains protected. Typically, this means that we rely on Standard Contractual Clauses (SCCs) – these are legal agreements approved by the European Commission (and recognized in the UK) that bind the recipient to protect your data to EU/UK standards. For instance, our contracts with Google, Mailchimp, and Stripe include standard data protection clauses. In some cases, providers may also be certified under frameworks like the EU-U.S. Data Privacy Framework (or any UK equivalent if one is established) which further ensure protection.
We will only transfer your personal data to a country outside the UK/EEA if appropriate safeguards are in place, as required by law. You can rest assured that regardless of where your data is processed, we treat it with the same level of care and security described in this Privacy Policy. Our aim is to ensure your rights and protections travel with your data.
If you have questions about international data transfers or want more details about the safeguards we use (for example, to obtain a copy of the standard contractual clauses we use), you can contact us and we’ll be happy to provide more information.
We keep your personal information only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. Different types of data may have different retention periods, based on the context and purpose of its collection. Here is an overview of how long we generally retain data:
Account Information: If you create an account on our site, we will keep your account data for as long as your account is active. You have the ability to log in and update or delete certain information in your profile at any time. If you decide to close your account or request that we delete it, we will remove or anonymize personal data associated with your account (except for any information we are required to retain for legal reasons, as noted below). If an account remains inactive for an extended period (we may consider accounts inactive after a few years of non-use), we may reach out to confirm if you want to keep it. If we cannot reach you or it’s clear the account is no longer used, we may delete the account and associated data as a housekeeping measure, but we will attempt to notify you before doing so.
Purchase and Booking Records: We retain records of purchases and event bookings (including invoices, transaction records, names, and contact info associated with orders) for a minimum of six (6) years from the end of the financial year in which the transaction took place. This retention period is in line with UK tax and company law requirements, which generally obligate businesses to keep accounting records for 6 years. Keeping these records allows us to have documentation in case of audits, to handle any possible disputes or refunds, and for our own financial record-keeping. In practice, this means if you made a purchase in 2025, we would keep a record of that purchase until at least 6 years after 2025. After the mandatory retention period, we will securely dispose of or anonymize those records if they are no longer needed. (Note: information that has been anonymized – stripped of personal identifiers – may be kept longer for statistical analysis, since it no longer identifies you.)
Event Registration Details: For event-related personal data (especially health or special needs information), as mentioned in “Special Category Data”, we typically delete those sensitive details shortly after the event. Basic event attendance records (e.g., “Person A attended Event X on date Y”) may be kept longer as part of our business records or for issuing certificates of attendance, etc., but any extra personal notes will not be kept beyond their purpose. If there were any incidents at an event, we might retain related records for as long as necessary to comply with legal obligations or to resolve the incident (potentially several years, depending on the situation).
Communications: If you contact us via email or contact form, we may retain that correspondence for our records. Typically, emails and customer service communications are kept for a few years (common practice is 2-3 years) in case we need to reference past conversations to assist you better or to train our staff. However, we don’t have a fixed limit for all communications; some may be kept longer if relevant to ongoing business (for example, if you had a long-term issue or a running conversation with us, we’d keep that until resolved). We regularly review old communications and securely delete those that are no longer needed.
Newsletter Mailing List: We will keep your email on our mailing list for as long as you remain subscribed. If you unsubscribe or if we receive repeated delivery failures (e.g., your email bounces), we will remove you from the active list. We might keep a record of your unsubscribe request (email address and date/time of unsubscribe) indefinitely to ensure we honor your choice and don’t accidentally re-add you, as required by law for demonstrating consent practices. But you will no longer receive communications once unsubscribed.
Analytics Data: Any analytics data we collect via cookies is typically retained as per Google Analytics’ settings. We currently use the default retention settings (which may keep aggregated Google Analytics data for 14 months or more, as configured). However, this data is not personally identifiable in our reports. We may retain aggregate analytics information indefinitely for trend analysis, but it will not identify individual users. If you clear your cookies or do not consent to analytics, we won’t have new analytics data for you.
Technical Logs: Our web server and security logs (which can include IP addresses and timestamps) are generally kept for a short period (a few weeks to a few months) and are used for security monitoring and troubleshooting. Unless a log reveals a security issue that we need to investigate longer, these logs are auto-deleted on a routine schedule. For example, we might keep server logs for 90 days before they are overwritten, unless an incident is being investigated.
When we no longer have a legitimate need to keep your personal data, we will delete it or anonymize it. For deletion, we use secure methods so that the data cannot be reconstructed or recovered. If data is stored in physical form (unlikely in our case, but say printed event sign-in sheets), those will be shredded or securely disposed of. For digital data, deletion might include removing it from our databases and requesting our processors (like Mailchimp) to delete it from their systems as well.
Backup copies: Keep in mind that when we delete data from our active systems, it might still reside for a time in our automated backups. We have backup systems to ensure data isn’t lost accidentally. These backups are kept securely and are only accessed if needed for disaster recovery. We do not use backed-up data for any other purpose. Backup files eventually cycle out and are overwritten with newer data as per our backup retention policy. So, it’s possible that traces of your data could remain in backup storage for a short period after deletion, but we will ensure it’s not restored or used improperly.
Finally, in all cases, if you exercise your right to erasure (“right to be forgotten”), we will delete your data as requested (assuming no legal exemptions apply) and will also instruct applicable third-party processors to do the same. We’ll outline more about that in the next section.
As a user of our website and services, and as a data subject under the UK GDPR, you have a number of important rights regarding your personal data. We want you to be aware of these rights and how to exercise them. Below is a summary of your key data protection rights:
Right to Be Informed: You have the right to be informed about the collection and use of your personal data. This Privacy Policy, along with our Cookie Policy, is intended to provide you with this information – such as what data we collect, why we use it, how long we keep it, and with whom we share it. We aim to be transparent and clear in these explanations. If anything in this policy is unclear or you have questions, you are entitled to ask us for more information.
Right of Access: You have the right to access the personal data we hold about you. This is often called a “Subject Access Request.” It means you can ask us to confirm if we are processing your personal data and, if so, provide you with a copy of that data, as well as details such as the purposes of processing and the categories of data we have. For example, you could ask us, “What information do you have about me?” and we will provide you with everything we have in a structured format. We will also give you supporting information (like what we use it for, who it may have been shared with, etc., as required by law).
Right to Rectification: You have the right to have inaccurate personal data corrected, or incomplete data completed. If you believe any information we hold about you is incorrect or outdated (for example, your name is misspelled or your email has changed), please let us know. We’ll update it. Many basic details you can also correct yourself by logging into your account on our website and editing your profile. We encourage you to keep your information up to date.
Right to Erasure: This is commonly known as the “right to be forgotten.” You have the right to request that we delete your personal data, provided there is no lawful reason for us to continue processing it. You can ask for erasure in scenarios such as: the data is no longer necessary for the purpose we collected it, or you initially consented to processing but now withdraw consent and we have no other lawful basis to keep it, or you object to processing and we have no overriding reason to continue, or if we handled your data unlawfully. For example, if you registered for an account and later decide you want it and all associated data removed, you can request deletion. We will then erase your personal data (and confirm to you that we’ve done so) so long as we are not required to keep it for legal or legitimate purposes. (Note: certain data we might need to retain – e.g., records of a purchase, we might keep minimally to satisfy legal obligations even if you delete your account, but we would tell you.)
Right to Restrict Processing: You have the right to ask us to restrict or “pause” the processing of your personal data in certain circumstances. This means we would store your data but not actively use it until the restriction is lifted. You might exercise this if, for example, you contest the accuracy of your data and we are verifying it, or if you have objected to processing (see below) and we are considering that objection. Another example: if we no longer need the data but you need us to keep it for a legal claim, we would mark it as restricted so it’s not used for other purposes. When processing is restricted, we will let you know and will only lift the restriction with your consent or for specific reasons allowed by law.
Right to Data Portability: For data that you provided to us and which we process by automated means based on your consent or a contract, you have the right to get that data from us in a structured, commonly used, machine-readable format. You also have the right to request that we transmit that data directly to another service provider (where technically feasible). In plain terms, this right is designed to make it easier for you to take your data elsewhere if you want. For example, if in the future we have a forum and you provided a lot of content or profile info, you could ask for an export of your posts and info to move to a different platform. Currently, for basic things like account info or order history, we can provide those in a CSV or similar format upon request.
Right to Object: You have the right to object to certain types of processing of your personal data. Notably, you can object to processing based on legitimate interests or public interest/task (ours is usually legitimate interest) if you feel it impacts your rights. If you make such an objection, we must stop processing your data for those purposes unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if we need to continue processing for the establishment or defense of legal claims. You also have an absolute right to object to your data being used for direct marketing purposes. For example, if we ever were to send marketing to customers under a legitimate interest basis (we currently don’t without consent, but hypothetically), you could opt out at any time and we would stop. In summary: if you don’t agree with how we’re using any data under legitimate interests, you have the right to object, and we will consider your request seriously and stop or limit processing unless we have a strong reason not to.
Right to Withdraw Consent: If we are processing any of your data based on your consent, you have the right to withdraw that consent at any time. This isn’t exactly a separate right under the law (it’s tied into the conditions of consent), but it’s very important. For instance, if you signed up for our newsletter and later decide you no longer want emails, you can withdraw your consent by unsubscribing. The effect is that we will stop the processing that was based on consent. Withdrawing consent does not affect the legality of what we did when we had your consent – in other words, it’s not retroactive. But once you withdraw, we will act promptly to stop the relevant processing. There is no penalty or consequence to you for withdrawing consent. We make it easy via opt-out links, cookie settings, etc., but you can always also contact us to do this for you.
Rights related to Automated Decision-Making and Profiling: Under GDPR, you have rights to not be subject to decisions made solely by automated means (including profiling) that have legal or similarly significant effects on you. We want to reassure you that we do not make any automated decisions or profiling on you that would trigger this right. There is no computer algorithm deciding anything about you in our processes – any important decision (like event participation approval or anything financial) involves human consideration. If that ever changes, we will inform you and ensure your rights are protected. If you feel that any decision has been made about you automatically, you have the right to request human intervention and to express your point of view or contest the decision. But again, this should not apply with Home Educators LTD’s current services.
Right to Lodge a Complaint: In addition to the above rights, if you believe we have not complied with data protection laws or handled your personal information properly, you have the right to file a complaint with the supervisory authority. In the UK, that is the Information Commissioner’s Office (ICO). You can contact the ICO for advice or to file a concern. More information is available on the ICO’s website (ico.org.uk). The ICO’s address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. They also have a helpline at 0303 123 1113. We would, however, appreciate the chance to address your concerns before you approach the ICO, so please consider reaching out to us first. We take privacy seriously and will do our best to resolve any issues.
How to Exercise Your Rights: You can exercise any of your rights by contacting us via email, phone, or mail (see the Contact Us section below). Typically, we will ask you to provide enough information to identify you (e.g., name, email, possibly verification of identity for sensitive requests) and to describe the request with enough detail for us to understand and respond. For example, if you’re requesting a copy of your data, it helps if you specify, “I’d like all data associated with my account/email.” If you’re asking for a correction, clearly state what is inaccurate or outdated.
We will respond to your request as soon as possible, generally within one month of receiving it. If your request is complex or we have received many requests, we are allowed to extend this by an additional two months, but we will inform you within the first month if an extension is needed and explain why. In most cases, we will fulfill your request or let you know the outcome within a month.
Exercising your rights is free of charge. We will not charge you for providing a copy of your data or carrying out your requests. The only exception could be if a request is manifestly unfounded or excessive (e.g., repetitive requests without good reason), in which case we might charge a reasonable fee or refuse, but we’d have to demonstrate why. This is very rare, and we have never done so – we aim to honor all genuine requests.
For deletion, restriction, or objections: we will confirm to you once we’ve taken the action (e.g., “Your account has been deleted as requested” or “We have stopped using your data for X purpose”). For access requests, we will provide your data in a secure manner (likely via email or secure download).
Please note that some rights are subject to certain limitations and exemptions under the law. If we cannot comply with a request in whole or in part, we will clearly explain why. For example, if you requested deletion of data that we are legally required to keep (say, an invoice for a past purchase), we would explain that we cannot delete that record until the legal retention period passes, but we would remove everything else that we can.
We are here to help and ensure you feel in control of your personal information. Don’t hesitate to reach out with any questions or requests regarding your data and privacy.
As mentioned earlier, our services and website are primarily aimed at adult members of home-educating families (parents or guardians). We do not actively target or offer services directly to children for independent use. However, we are very much a family-oriented business, and children’s personal data may be involved through their parents’ use of our services (for example, when a parent books a learning session for their child).
Parental Involvement: We expect that children (especially those under 13) will only use our website and services with the involvement of a parent or guardian. If you are a young person reading this: please seek your parent or guardian’s permission before providing any personal information about yourself on our site.
Consent for Children’s Data: The UK GDPR stipulates that only children aged 13 or over are able to provide their own consent for online services in the UK; for children under 13, consent from a person with parental responsibility is required. In our context, this means if any personal data of a child is to be submitted (e.g., signing up an older teenager for a workshop), a parent/guardian should do it or approve it. Generally, when child-related data is collected (like name/age for an event), it is done through a form that the parent fills out. By providing that information to us, you (the parent) are confirming that you consent to our handling of that child’s data as described.
No Direct Marketing to Children: We do not send marketing communications directly to minors. Any newsletter or marketing emails are sent to the parent/guardian contacts who signed up. We do not knowingly collect a child’s email or phone number for marketing.
Game/Forum/Community (Future Considerations): If we introduce community forums or allow user-generated content in the future, we will implement age guidelines. For instance, if a forum is created, users under 13 would likely need explicit parental permission to register, and we might put in place additional safeguards (like moderated discussions or restricted private messaging) to ensure a child-friendly environment in line with the UK Age Appropriate Design Code. We’ll update our policies accordingly and provide child-friendly privacy notices if applicable.
Educational Projects and Content: Any content (photos, artwork, etc.) featuring children that might be shared on our site (for example, if we ever showcase user-submitted success stories or event highlights) will only be posted with explicit permission from the parent/guardian. We do not publish children’s personal details (like full names or personal information) publicly without consent.
If you are a parent or guardian and have concerns about your child’s personal data in relation to our services, please contact us. If we learn that we have inadvertently collected personal information directly from a child under 13 without proper consent, we will take prompt action to delete such information from our records.
Our goal is to create a safe, family-friendly environment. We adhere to the principle that children’s data merits special protection and we take care to handle it securely and respectfully.
We take the security of your personal data very seriously. We have implemented a variety of technical and organizational measures to safeguard the information we collect against loss, misuse, or unauthorized access. While no website or electronic system can ever be 100% secure, we strive to follow industry best practices to protect your data. Here are some key security measures we have in place:
Website Encryption: Our website uses HTTPS encryption (TLS/SSL) for all traffic. This means that any data you send to us (or we send to you) through the website – such as when you fill out forms, log in, or make a purchase – is encrypted in transit. It’s like sealing the message in a secure envelope, so that if someone were to intercept the network traffic, they would not be able to read it. You can verify this by the padlock icon in your browser’s address bar when you visit our site.
Secure Hosting: We host our website with reputable hosting providers that employ strong security protocols. Our servers are protected by firewalls and regularly updated to patch security vulnerabilities. We ensure that the server software (including WordPress and all plugins/themes) is kept up-to-date with the latest security updates. Outdated software is one of the common causes of breaches, so we stay vigilant on this front. We also use server-level security tools (potentially including malware scanners and intrusion detection systems) to monitor and block suspicious activities.
Access Controls: Personal data stored in our systems (website database, Mailchimp, Google Workspace, etc.) is accessible only by authorized personnel who need it to perform their job. Within our small team, access to user data is limited on a need-to-know basis. For example, our event coordinator may have access to registration details to check attendees in, but not necessarily to the financial dashboard, etc. All staff/contractors who handle personal data are bound by confidentiality obligations. We also protect accounts with strong passwords and two-factor authentication where available, to reduce the risk of unauthorized login.
Payment Security: As noted, we do not handle or store credit card details directly. Our integration with Stripe and PayPal means that all sensitive payment information is processed on their secure, PCI-DSS-compliant systems. Stripe and PayPal are leaders in payment security and use measures like encryption and tokenization to keep payment data safe. On our end, any communication with these services is done via secure channels. We also follow best practices (like not asking you to send card details via email or any insecure method).
Regular Backups: We perform regular backups of our website database and files. This is more about data resilience than security, but it means in case of any technical failure or data corruption, we can restore data and not lose information. Our backups are stored securely (encrypted if stored off-site). We treat backup data with the same care as live data.
Security Monitoring: We utilize security plugins (such as SecuPress, Wordfence, or similar – as part of our WordPress plugin stack) that help monitor and protect the site. These tools can block common attacks (like repeated login attempts, known malicious IP addresses) and alert us to potential issues. We also keep an eye on user account activity for any signs of unauthorized access. If we detect anything suspicious (like an unknown device logging into your account or an unusual spike in certain activity), we investigate promptly.
Malware and Virus Protection: We scan our website for malware or vulnerabilities. Likewise, our endpoints (computers we use to access admin interfaces) are protected with updated antivirus/anti-malware software, and we follow safe practices (like not clicking suspicious links) to avoid compromising user data.
Data Minimization: From a design perspective, we try not to collect or keep more personal data than necessary. The less we have, the less can be exposed in the event of any issue. For example, if a piece of data is no longer needed, we delete it (as outlined in our retention section). Also, wherever feasible, we use pseudonymization or encryption for stored data. Certain sensitive fields may be encrypted in our database so that even if someone got in, they’d see scrambled data without the key.
Testing and Training: We periodically review our own practices and run tests. For instance, we may do test transactions or account creations to ensure data flows are secure as expected. We stay informed about the latest security threats and ensure our team is aware of phishing and social engineering risks (so we don’t fall victim to tricks that could compromise data). We also follow guidance from the Information Commissioner’s Office (ICO) and other cybersecurity recommendations for small businesses to continuously improve.
Despite all these measures, it’s important to acknowledge that no method of data transmission or storage can be guaranteed as 100% secure. Cyber threats evolve, and there’s always a residual risk. However, we are committed to doing our best to protect your information. In the unlikely event of a data breach that affects your personal data, we have a breach response plan in place. This means if something were to happen, we would quickly assess the scope and impact. If the breach is likely to result in a risk to your rights and freedoms (for example, a risk of identity theft or confidentiality breach), we will notify the ICO and inform you without undue delay, as required by law. We’d let you know what happened and what steps you should take to protect yourself, if any.
Your role: You also play a part in keeping your data safe. We encourage you to use a strong, unique password for your account on our site (if you create one) and to keep your login details confidential. If you use the same password on multiple sites and one of those sites is compromised, it could put your account here at risk. Using a password manager and enabling 2-factor authentication on your email and important accounts is a good practice. Also, be cautious of any communications that appear to be from us asking for sensitive information – we will never ask you for your password via email, and the only payment details you should enter are through our secure checkout, never by email or chat.
If you ever suspect any unauthorized access to your account or personal data related to Home Educators LTD, please notify us immediately so we can investigate and take action.
Our website may contain links to other websites or embedded content (such as videos, social media “share” buttons, or event partner information) that are not operated by Home Educators LTD. Please be aware that if you click on a third-party link or interact with third-party content, you may be providing data to those external platforms, and their own privacy policies will govern that data. We do not control the privacy practices of third-party sites.
For example, if we list a resource and link to an external educational website, and you follow that link, any data that site collects from you is subject to their policy, not ours. Or, if in the future we embed a YouTube video on one of our pages, playing that video might allow YouTube/Google to set cookies or collect usage info (which would be covered by YouTube’s privacy policy – we would warn you via our cookie consent mechanism in such cases).
We encourage you to review the privacy policies of any external websites you visit through our site. We try to only partner with or reference reputable organizations, but it’s always good to understand how any website handles your data.
That said, if you feel any site we link to is compromising your privacy or security, please let us know. We value your feedback and can reconsider the links or provide additional warnings if needed.
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. As our business grows and evolves, or as laws change, we might need to modify the policy to ensure it stays accurate and comprehensive.
When we make changes, we will post the updated Privacy Policy here, with a new “Last Updated” date at the top. If the changes are significant, we will take additional steps to inform you: for example, we might post a notice on our website’s homepage, or send an email notification to our registered users or newsletter subscribers informing them of the update.
Significant changes could include, for instance, adding new types of personal data we collect, new purposes for data processing, or changes in how you can exercise your rights. Minor changes (like clarifications or typographical corrections) may not be broadly communicated, so we encourage you to review this Policy periodically to stay informed.
If we were to ever change the basis on which we process your data (say we intend to rely on a new lawful basis that we haven’t before, or start processing existing data for a new purpose that isn’t compatible with the original purpose), and if your consent was required for that, we would seek your consent before doing so.
Your continued use of our website and services after any update to this Privacy Policy will constitute your acknowledgment of the changes and your agreement to be bound by the revised policy (of course, within the bounds of applicable law). If you do not agree with any changes, you should stop using our services and you may contact us if you have concerns.
We will always keep older versions of our Privacy Policy accessible (say, by archiving them or providing a version history upon request) so you can see how our practices have evolved. Our aim is transparency, and we will never materially reduce your rights under this Privacy Policy without obtaining your consent.
Your privacy is important to us, and we welcome any questions or feedback you have about this Privacy Policy or our data practices. If you would like to exercise any of your rights, or if you have any concerns about how we handle your personal information, please reach out to us. We are here to help.
Contact details for privacy inquiries or requests:
Email: contact@homeeducators.co.uk
Phone: 03300 888 978
Postal Address: Privacy Officer, Home Educators LTD, 20 Wenlock Road, London, N1 7GU, United Kingdom
To help us assist you better, please include your name and contact information and clearly describe your question or request. For example, if you are making a data access or deletion request, specifying the email associated with your account and the nature of your interaction with us (customer, newsletter subscriber, etc.) will speed up the process.
We will respond as promptly as possible – generally within a few business days for general inquiries, and within the timeframes mentioned above for rights requests.
Thank you for reading our Privacy Policy. We value the trust you place in Home Educators LTD to handle your data responsibly. We hope this document has helped clarify how we work to earn and maintain that trust.
Last Updated: 20 May 2025
This Cookie Policy explains how Home Educators LTD (“we” or “our”) uses cookies and similar tracking technologies on our website. We want to be transparent about what cookies are running when you visit our site, what they do, and how you can manage your preferences. This policy should be read in conjunction with our Privacy Policy (above), which provides further details on how we protect personal data. By using our website with cookies enabled (after seeing our cookie consent banner), you are agreeing to the use of cookies as described in this policy.
Cookies are small text files that are placed on your computer, smartphone, or other device when you visit a website. These files contain information that the website uses to recognize your device and store some details about your visit. In practice, cookies help things run smoothly and enable certain features – for example, keeping you logged in, remembering what’s in your shopping cart, or understanding your preferences.
Cookies can serve many purposes, from essential functions to personalization and analytics. Some cookies come directly from the website you’re visiting (these are called first-party cookies, which in our case are cookies set by Home Educators LTD’s website). Others come from third-party services integrated into the site (called third-party cookies – for example, a Google Analytics cookie or a Facebook “Like” button cookie).
Cookies can also be categorized by their lifespan:
Session cookies are temporary cookies that last only while your web browser is open. They are deleted automatically when you close your browser.
Persistent cookies remain on your device for a set period of time after your browsing session (they have an expiration date). They can survive across multiple visits to the website until they expire or you clear them.
Cookies themselves typically don’t run programs or infect your device with malware. They are more like passive data files. They can, however, store unique identifiers and information that may be considered personal data (like an IP address or a user ID). That’s why we treat them with care and ask for consent for certain types.
For more general information about cookies and how to manage or disable them, you can visit educational resources such as All About Cookies or Your Online Choices. These sites provide detailed guidance on cookies and advertising on the internet.
We use cookies on our site to enhance your experience and to ensure our services function correctly. When you first visit our website, you will see a cookie consent banner that lets you know we use cookies and gives you the option to allow or refuse different categories of them. We do not set non-essential cookies (like analytics or marketing cookies) unless you have actively given consent via this bannerico.org.uk. In other words, we respect your choices – if you decline optional cookies, we won’t use them.
Here are the main purposes for which we use cookies on Home Educators LTD’s website:
Essential functionality: Some cookies are strictly necessary for the website to operate properly. For example, if you add an item to your shopping cart or book an event session, an essential cookie will remember those selections as you navigate between pages (so your cart doesn’t reset every time). If you log into your account, essential cookies allow us to recognize that you are authenticated as you browse the site’s member-only areas. We also may use essential cookies for security purposes (for instance, to prevent cross-site request forgery or to enable our firewall to distinguish legitimate users from malicious bots). These cookies do not require consent because without them the services you request (like adding to cart, or logging in) cannot be provided.
Preferences and functionality: We use some cookies to remember your preferences and improve functionality. These are not strictly necessary for basic service, but they make your experience better. For instance, if our site has a feature to remember your login so you don’t have to sign in every time, a cookie would enable that (only if you choose “Remember me”). Or, if you select a preferred language (if we offer multiple languages) or you mute a notification pop-up, functional cookies store those choices so the site remembers them on your next visit. Another example might be event calendar settings – if you filter events by region or type, a cookie might save that filter so the next time you come, it shows you the same type of events. These cookies might also include certain third-party plugins that add site features (for example, a chat support widget might set a cookie to remember you’ve seen a greeting message). We treat these as functional cookies and will generally only use them if you allow them, although some might be bundled with essential operation.
Analytics and performance: We want to understand how users interact with our website so we can keep improving it. For this, we use analytics tools (like Google Analytics) which set cookies to collect information about website usage. These cookies gather data such as which pages you visit, how long you stay, how you found our site (e.g., via Google search or a link from another site), and general information about your device (like browser type, country, etc.). Importantly, the analytics cookies we use do not collect your name, email, or other direct contact info, and we have configured them, where possible, to anonymize data like IP addresses. The information is aggregated and used for statistics – for example, “100 people visited the Science Resources page this week” or “75% of users use mobile phones to browse the site.” This helps us identify trends (maybe we need to make the site more mobile-friendly if many are on phones, or create more content in popular categories). We only deploy analytics cookies if you consent to them in the banner. If you choose not to, rest assured the site still works; we simply won’t collect analytics on your visit. Accepting analytics cookies helps us a lot (we appreciate it!), but it’s entirely your choice. Any analytics data collected is used internally for our own understanding and site improvement – we do not use it to profile individual visitors, nor do we allow Google to use our analytics data for their own purposes like ad personalization. These analytics cookies help us maintain and improve our service performance.
Advertising and marketing: As of the last updated date of this policy, we do not display third-party ads on our website, nor do we actively use marketing cookies to target you with advertising. However, we mention this category for completeness and for future planning. Marketing or tracking cookies are those set by advertising networks or social media platforms to track browsing habits and show you relevant ads on other sites. For example, if in the future we use a Facebook Pixel on our site, that would set a cookie so that if you have a Facebook account, you might then see an ad for our upcoming event on Facebook later. Another example is affiliate tracking cookies – if we start an affiliate program or partner with affiliates, a cookie might record that you came via a certain affiliate link so that the affiliate gets credit if you sign up. These are all considered marketing/tracking cookies because they follow your web activity and can be used to build a profile of your interests. Again, we are not currently using any advertising networks or tracking pixels on Home Educators LTD’s site, and we have no third-party ads. If this ever changes, we will update this policy and ensure such cookies are only set with your explicit consent. We will always give you a clear option to opt in or out of marketing cookies. By default (if you just browse and never click “accept” on anything), no marketing cookies from us will be active.
Social Media and Embedded Content: We maintain a presence on social media (for example, we might have Facebook or Instagram pages), but our website currently doesn’t heavily embed social media features beyond basic share links. If we embed content from third parties – say a YouTube video in a blog post, or an Instagram feed – those third parties might set cookies of their own. For instance, YouTube might set cookies to track video views or to remember your volume preferences; Instagram might set cookies if you interact with an embedded post. These would fall under either functional or marketing categories depending on what they do (often they’re considered a type of marketing/tracking cookie since they can connect to your profile on those platforms). Our cookie consent system will block such third-party content from setting cookies until you’ve consented to the relevant category (e.g., “Marketing” if it involves tracking). We’ll also endeavor to use privacy-friendly modes where available (like YouTube’s “nocookie” privacy-enhanced mode for embeds). We’ll inform you when such content is present so you know what’s happening.
In summary, we group cookies on our site into a few categories and treat them as follows:
Strictly Necessary Cookies (Essential): Always active by default, as they are needed for core functionality (site will not function properly without them). These don’t require consent under the law, but we list them so you know they exist.
Functional (Preferences) Cookies: Not strictly required, but improve your experience. We ask consent for these if they are separate from necessary ones. Some may be set by us or by third-party tools that enhance site features.
Analytics (Performance) Cookies: Used only if you opt in. They help us understand website traffic and usage in an anonymous way.
Marketing (Advertising/Tracking) Cookies: Used only if you opt in. (Currently none in active use, but category exists for completeness and future.) These would track your visit to help with marketing efforts, such as retargeting ads or affiliate link tracking.
Below, we provide more specifics on each category and examples of cookies that fall within them.
Strictly Necessary Cookies: These cookies are essential for the operation of our website and for you to use its features. Without these cookies, certain services or functionalities you request (such as placing items in your cart, logging into your account, or proceeding through checkout) cannot be provided. For example, our site uses a cookie to maintain your session state – this allows you to navigate through pages without having to log in every time and remembers the contents of your shopping cart or booking selections. Another example is security cookies that help distribute website load or identify and prevent security threats – they ensure the website is stable and secure for your use. These cookies do not gather information about you that will be used for marketing or remembering where you’ve been on the internet. They are only used to make the site function correctly. In short, these cookies enable core functionality like security, network management, and accessibility. You cannot disable them via our cookie banner because the site won’t work properly without them (though you could block them in your browser, but then parts of the site may break). We only use strictly necessary cookies for purposes that align with providing you an online service at your request (for example, remembering what’s in your cart is part of the service of shopping online).
Functional Cookies: These cookies allow our website to remember choices you make and provide enhanced, more personal features. They are not strictly required for basic operation, but they improve your experience. For instance, a functional cookie may remember your site preferences, such as your username for quicker login (if you select “remember me”), or your preferred layout or font size (if we offer such customizations). If we have interactive features, a functional cookie might remember that you’ve completed a tutorial or have seen a certain message so it doesn’t show again. Another example: if our site offers to save your shipping address for future purchases, a cookie might store an ID referencing that info (securely) so it pre-fills next time. Functional cookies might also include those from third-party services that add convenience, like a live chat support tool storing your chat history for when you navigate to a new page, or a map service remembering your location preference. We may also categorize certain social media cookies here if they primarily provide a function (like enabling you to share content via social networks) rather than tracking. The key point is that functional cookies are intended to make your experience better and aren’t used to follow you outside our site or profile you for advertising. We ask for your consent for functional cookies because, while helpful, the site can technically run without them. If you choose not to allow these, some preferences may not be remembered, and you might need to input information or select options each time you visit.
Analytics and Performance Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often, how users move around the site, and if they get error messages on certain pages. They help us understand and improve our website’s performance. For example, analytics cookies can tell us that a lot of users struggled at a particular step of the checkout process – indicating we might need to simplify it. They might also reveal usage patterns, like what time of day our site gets the most traffic, so we can ensure support is available then. The data collected by these cookies is typically aggregated and anonymous. We do not use analytics cookies to identify you personally. We also do not obtain or store any sensitive personal information via analytics cookies – they mainly collect technical and usage data. We currently use Google Analytics as our primary analytics tool. Google Analytics sets cookies such as _ga, _gid, and others, which assign a random ID to distinguish unique users (so it can tell repeat visits vs. new visits) and throttle request rates (to manage the load of data reporting). The information from these cookies is transmitted to Google and compiled into reports for us. We have configured Google Analytics to anonymize IP addresses in our reports, meaning Google truncates your IP before storing it, adding an extra layer of privacy. We only enable these cookies if you give consent, as they are not strictly necessary. If you do consent, rest assured that the data is used for our internal analysis to make the site better and for no other purpose. If you do not consent, no Google Analytics cookies will be set, and it will not affect your ability to use the site – it just means we have a bit less insight into how that visit went. (And that’s okay! We respect your choice.)
Advertising and Marketing Cookies: These cookies are intended to track your browsing habits and activity across our site (and potentially others) in order to provide you with more relevant advertising or to measure the effectiveness of ad campaigns. Examples of marketing cookies include those set by social media platforms (like Facebook Pixel cookies) or advertising networks (like Google Ads cookies). They might record that you visited our site and what pages you looked at, and then use that info to show you ads elsewhere. Another use is if we send out email newsletters – some marketing cookies might work with email to see if you click a link from an email to our site, for campaign analytics. Currently, Home Educators LTD does not run third-party ads or use retargeting pixels on our site, so you should not encounter advertising cookies from us at this time. However, in the future, if we decide to run promotions or join an advertising network to reach more families, we may utilize such cookies. For instance, we might use Facebook or Google ads to advertise a new course – in doing so, we might place their tracking pixel on our site to know if someone who clicked an ad ended up registering. Or, if we launch an affiliate program, a cookie might track referrals so that we can credit the right affiliate for a sign-up. These cookies would typically collect info like the referral URL, your IP address, and possibly a device identifier, and they could potentially follow you to show relevant ads (e.g., “reminding” you of our content on another site via an ad). If we implement any marketing cookies, we will always ask for your opt-in consent first. By default, without your opt-in, no such cookies will be active. You are in control – if you choose not to accept marketing cookies, you simply might receive more generic advertising (or none at all from us), and any affiliate referrals might rely on alternative methods. We would also update this Cookie Policy to list the specific marketing cookies in use and their purposes at that time.
To give you a clearer picture, here are a few concrete examples of cookies that may be used on our site (as of now or in the near future), grouped by category:
Essential: PHPSESSID (a typical session cookie for PHP-based sites to identify your session on the server), woocommerce_items_in_cart and woocommerce_cart_hash (WooCommerce cookies to keep track of cart contents and changes), wp_woocommerce_session_* (a WooCommerce cookie containing a unique code for each customer so that it knows where to find the cart data in the database for each user). These ensure that when you add a product to cart, it stays in your cart as you browse. Also, if you’re logged in: wordpress_logged_in_* and wordpress_sec_* (set by WordPress to recognize you as a logged-in user and maintain your login securely), and wp-settings-* (to preserve some interface settings for you as an admin or user). Our security plugin might set a cookie like sp_session or similar to determine if you’ve passed certain security checks. These are all first-party, essential cookies.
Functional: elementor (if our site uses Elementor page builder, this cookie might be used by the builder to enable some editing features or remember widget states – typically doesn’t affect visitors, more for site previews), cookie_notice_accepted (if we have a basic cookie notice, this cookie would remember that you dismissed/accepted the banner so it doesn’t keep popping up – ironically, a cookie to remember your cookie preference). If we had a live chat, something like tawkUUID (for Tawk.to live chat) or other similar might appear to recall your chat state. If we integrate a booking calendar, a cookie might store the last viewed date or filter.
Analytics: _ga (Google Analytics main cookie, used to distinguish users with a random ID), _gid (Google Analytics, used for distinguishing users but has a shorter lifespan, typically 24 hours), _gat (Google Analytics, used to throttle request rate to Google’s servers). All these are third-party cookies served by Google (though they act as first-party on our domain with Analytics, technically). They help count visits and track metrics. As mentioned, with IP anonymization and our use case, these do not personally identify you.
Marketing: (None currently active.) In the future, possible examples could include fr (Facebook cookie for encrypted Facebook ID and browser ID, used by Facebook to show personalized ads to users who have visited our site), or tr (another Facebook Pixel cookie), or IDE (Google advertising cookie for their DoubleClick network) – but again, these are not in use now. If we ever use them, we’d list them and explain, and you’d have to opt in. Also, if we embed YouTube videos, YouTube might set cookies like VISITOR_INFO1_LIVE (to estimate bandwidth) or YSC (to track video views on a session basis), which could be considered targeting if tied to your YouTube account – we’d handle those under marketing cookies consent.
We keep an updated list of the specific cookies our site uses, which you can request or sometimes view in our cookie consent tool interface. (Our cookie banner or preferences panel may list them by name, purpose, and duration.)
When you first land on our website, you’ll see a cookie consent banner (or a pop-up) that notifies you that we use cookies and asks for your preferences. We believe in “privacy by default,” so we do not assume consent – you have to actively choose which cookies you’re okay with. Here’s how our cookie consent mechanism works:
Consent Banner: The banner gives a brief overview that we use cookies and may list broad categories (Necessary, Functional, Analytics, Marketing). You’ll typically have options such as “Accept All Cookies,” “Reject Non-Essential Cookies,” or “Customize/Preferences.” We understand that some users click “Accept All” to quickly move on, which is fine (and in that case, you’re agreeing that we can use all categories of cookies). If you click “Reject” or decline, we will not load any cookies except the strictly necessary ones that are needed for the site to run. You also have the option to click “Preferences” or “Customize” to choose category by category what you consent to. For example, you might allow Functional and Analytics but not Marketing, etc. The banner is designed to be clear and not sneaky – consent must be a clear affirmative action (no pre-ticked boxes). This is in line with legal requirements: we only store cookies on your device (that are not strictly necessary) if you have given consent.
Record of Consent: When you make your choice, our site will set a cookie (ironically, a cookie to remember your cookie decision!) that records what you’ve consented to. This way, we remember your preferences for the next time you visit – you shouldn’t see the banner every single time (unless you clear your cookies or we’ve added new cookies requiring consent, etc.). This consent-record cookie is usually considered strictly necessary (since it’s needed to enforce your preference). It typically doesn’t contain any personal info, just a yes/no flag for categories.
Duration of Consent: Your cookie consent choice will remain in effect for a certain period (often 6-12 months) before we might ask again, or if we significantly change our cookie usage. For instance, we might show the banner again in a year to confirm you’re still okay with your selections, or sooner if we add a new type of cookie that wasn’t covered before. Also, if you visit from a different device or browser, that will be a new scenario and you’ll see the banner there because your consent is browser-specific (cookies can’t magically propagate across different browsers or devices).
Changing your mind: Just because you set a preference once doesn’t mean you’re locked in. We provide ways for you to change your cookie settings at any time. This might be via a “Cookie Settings” link in our website footer or a small icon that stays visible (common icons look like a cookie or a shield) – clicking it will re-open the preferences panel so you can adjust toggles and re-consent or withdraw consent easily. If you can’t find such an option, you can always contact us, but generally we try to make it self-service. Alternatively, you can clear cookies in your browser (which will remove the cookie that remembers your consent, so on your next visit, you’ll be prompted again to make choices).
Implied Consent: We do not rely on “implied consent” through silence or just continuing to use the site. While simply browsing without clicking anything will result in only essential cookies being set, we won’t take continued use as consent for others. We explicitly wait for your input on the banner. If you ignore the banner and continue to browse without choosing, we treat that as a “no” for optional cookies (they remain blocked). The banner might remain for a while to remind you, but eventually some banners minimize so as not to annoy you while still respecting that non-consent.
In summary, we aim for a clear, upfront consent mechanism in compliance with UK regulations and guidance. The ICO requires that consent for cookies be active and clearly given (no pre-ticked boxes or assumptions) and we follow that.
We also ensure the cookie banner provides essential information – it tells you what cookies do in general and why we use them, at least in broad terms, and links to this detailed Cookie Policy for full info (fulfilling the requirement of providing clear and comprehensive information about cookies and purposes). Users must be able to understand the potential consequences of allowing cookies, and we strive to communicate that in plain language.
You have several options to manage or disable cookies, both via our website tools and through your own browser settings. We want you to have control, so here’s how you can manage cookies:
On Our Website: As mentioned, you can use our cookie consent banner or settings interface to allow or disallow categories of cookies. If you ever want to change those settings, look for a “Cookie Preferences” link (often in the footer of the site) or an icon. Clicking that will bring up the controls again. From there, you can usually toggle off categories that you previously allowed or vice versa. Remember to save/confirm your new choices. Our site will then respect those changes (for example, if you turn off Analytics after having it on, our site will stop loading the Google Analytics script). Keep in mind that turning something off won’t automatically delete cookies that were already set in the past; it just stops setting new ones. To remove existing cookies, you might need to clear them via your browser (see below). We do attempt, when feasible, to delete existing cookies if you withdraw consent (for example, we might be able to tell Google Analytics to delete its cookies when you opt out, using their provided methods), but the most reliable way is through your browser.
Using Your Web Browser: You can control cookies at the browser level, which gives you a lot of power over all websites, not just ours. Most web browsers (Chrome, Firefox, Safari, Edge, etc.) allow you to:
View what cookies are stored on your device.
Delete some or all cookies.
Block cookies from specific sites or block all third-party cookies.
Set preferences for certain types (some browsers have settings like “block cross-site tracking cookies” or “send Do Not Track signal”).
Receive notifications when a site is trying to set a cookie, to allow or not.
For example, in Chrome you can go to Settings > Privacy and Security > Cookies and other site data, to adjust settings and see all cookies stored. In Safari (on Mac/iPhone), you can go to Preferences > Privacy to manage cookies, and on Firefox, Options > Privacy & Security has cookie settings. You can typically remove all cookies when you close the browser (setting to clear on exit) or clear them manually. Please note: If you delete or block cookies, some parts of websites (including ours) may not work optimally. For instance, if you block all cookies, you might not be able to log in or add items to a cart on many sites. So a common approach is to block third-party cookies (which stops most cross-site tracking but keeps first-party functional cookies working).
If you’re not sure how to adjust these settings, the site AllAboutCookies provides browser-specific guides. Additionally, here are quick links to official guides for major browsers:
Google Chrome – Clear, enable, and manage cookies (Google’s support site)
Mozilla Firefox – Delete cookies to remove the information websites have placed on your computer
Safari for macOS – Manage cookies and website data
Microsoft Edge – Clear and manage cookies
Safari for iOS – Block cookies (on iPhone/iPad)
Chrome for Android – Clear, enable, and manage cookies (similar to desktop steps).
Using these settings, you can tailor your cookie experience globally. For example, some people choose to block all third-party cookies by default (which stops most ads and tracking) while allowing first-party cookies so websites still function.
Cookie Management Tools and Opt-Outs: Beyond the browser, there are also industry tools to opt out of certain cookie uses. For instance:
If we were using Google Analytics and you didn’t want to be tracked by it on any site, Google offers a browser add-on called the “Google Analytics Opt-out Add-on” which, once installed, prevents GA from running on any site you visit.
For interest-based advertising, the site YourOnlineChoices.eu (in Europe) provides a centralized opt-out for many advertising cookies. You can go there, select your country (UK), and see a list of companies, and opt out of targeted ads from each. It basically sets cookies to refuse those networks (so ironically you need to allow a cookie to say “no” to cookies – but that’s how it signals your choice). There’s also the Network Advertising Initiative (NAI) and Digital Advertising Alliance (DAA) websites in the US that have similar opt-out mechanisms for participating companies – these are relevant if you encounter US-based ad cookies.
Some browsers like Firefox and Safari have enhanced tracking protection by default which blocks known tracking cookies and scripts. You can enable those modes for an easier time without fine-tuning each cookie.
Do Not Track (DNT): Some web browsers have a “Do Not Track” signal that you can turn on, which is a way to tell websites you do not want to be tracked. However, DNT is only a voluntary signal – websites are not obligated to honor it (and many don’t, because there isn’t a consensus standard). At this time, our site’s cookie consent mechanism does not automatically respond to DNT signals; we rely on the explicit choices you make in the banner. We will, of course, not track if you opted out via our tools. But if you have DNT enabled in your browser, it’s still a good practice; just be aware to also set preferences in the banner.
Effect of Disabling Cookies: If you disable certain cookies, as mentioned, some features of our site may not work. For example, if you disable essential cookies, you won’t be able to log in or use the shopping cart. If you disable functional cookies, you might have to re-enter information or you might notice preferences (like a dismissible popup) not being remembered. Disabling analytics or marketing cookies will not affect core functionality, but will mean we get less data on usage and you’ll have a more “generic” experience (no targeted content, which honestly is often fine or even preferable to many users).
We respect your decisions. Even if you initially consent and then later clear cookies or change settings to withdraw consent, we won’t try to circumvent that. For instance, if you said “yes” to analytics but later changed your mind and opted out or blocked the GA cookies, we will abide by that and not attempt to set them in another way.
If you have any trouble managing your cookie preferences on our site (say, the preference link isn’t working properly, or you’re not sure if your changes took effect), please let us know. We can assist or apply preferences from our side if needed.
Just as with our Privacy Policy, we may update this Cookie Policy from time to time to reflect changes in our use of cookies, our services, or legal requirements. If we introduce new cookies or change the purpose of the cookies we use, we will update the information in this policy and adjust our consent mechanism accordingly.
When we make changes, we will revise the “Last Updated” date at the top. For substantial changes – for example, if we start using cookies for a new significant purpose (like introducing advertising cookies after initially having none) – we will also notify you in a more prominent way. This might involve re-displaying the cookie consent banner to all users so that you can review the new information and make an updated choice. It could also involve a brief notice on our website or, if appropriate, a message via email or our newsletter (especially if it’s a change that might be of interest or concern to users).
We encourage you to review this Cookie Policy periodically to stay informed about how we are using cookies. By continuing to use our site after any updates take effect, you acknowledge the revised policy. Of course, we will always obtain consent for any new cookies that legally require consent.
If you missed a change and have questions about it, you can contact us. We keep records of our past cookie configurations and policies, so we can clarify what changed.
If you have any questions or concerns about our use of cookies or your choices regarding cookies, please feel free to contact us. You can reach out using the same contact information provided in the Privacy Policy:
Email: contact@homeeducators.co.uk
Phone: 03300 888 978
Address: Home Educators LTD, 20 Wenlock Road, London, N1 7GU, United Kingdom
We appreciate your feedback. If something isn’t clear in this Cookie Policy, let us know – we want to make sure these explanations are understandable to everyone, including busy parents who might not be tech experts. Cookies can be a bit confusing, but we aim to demystify them.
For further details on how we handle any personal data collected via cookies (like IP addresses or unique IDs that might be in those cookies), please see our Privacy Policy. That document covers our overall data handling practices, of which cookies are just one part.
Thank you for taking the time to read our Cookie Policy. By being informed, you are taking control of your online privacy – and we think that’s great! Happy browsing, and we hope you and your family enjoy our website and services in a privacy-friendly way.
We use them to give you the best experience. If you continue using our website, We’ll assume that you are happy to recieve all cookies on this website.
