What we hold, and what we do not.

The short version

We collect what we need to teach you and to prove you did the work. Nothing about you is published unless you choose to publish it. We do not track you, and this site sends no data to anyone else.

What this site does when you visit it

Nothing beyond serving pages. There is no analytics, no advertising, no tracking pixel, no embedded video, no social widget, and no cookie set for tracking. Fonts and scripts are served from this domain, so loading a page makes no requests to any third party at all. Our web server keeps ordinary request logs, which include IP addresses.

Request logs are kept only as long as we need them to keep the site running securely, and are then deleted.

If you apply or enrol

What we collect

Your name, email address, and the information you give us on the application form, including what you tell us about your circumstances so we can set your fee.

Why

To assess the application, to teach you, to mark your work, and to issue a certificate if you complete.

Who sees it

Staff who need it for those purposes. Your fee circumstances are seen only by the people setting fees, and are never visible to mentors or other students.

Your work

Assignments and grades live in Poseidon, our own grading platform. Your work is visible to you and to the staff marking it. It is not published.

If you are under 18

Club participation is recorded as aggregate counts only. For each club and year we hold how many students enrolled and how many completed. We do not hold names, contacts or records for individual club members, and the table that could store them is deliberately left empty.

Guardian consent paperwork stays with your school. We do not receive or store it. Turning individual record keeping on would be a policy decision requiring guardian consent handling first, and it has not been made.

Our safeguarding policy covers this in more detail.

Alumni profiles are opt in

Completing a course does not put you on the website. Every alumni record starts private. It becomes public only when you claim it yourself and choose what to show, and you can hide it again at any time. Nobody publishes a profile on your behalf, including us.

Photographs and written stories each need their own separate consent, recorded against your record. Consent to one is not consent to the other.

Certificates are pseudonymous

The verification page confirms the programme, the cohort and whether a certificate is valid. It does not show the holder's name unless that holder has chosen to publish it. Certificate IDs are random rather than sequential, so seeing one certificate tells you nothing about any other and the set cannot be enumerated.

Who else we share with

No one, for marketing or advertising, ever. We do not sell or rent personal data. We share only where we must: with a school for its own students' club participation, with a funder in aggregate form that identifies nobody, or where the law requires it.

We use a small number of infrastructure providers to host this site and send email. Write to us and we will tell you exactly who they are and where your data is held.

Your rights

You can ask us what we hold about you, ask for it to be corrected, ask for a copy, or ask us to delete it. Deleting an enrolment record may mean we can no longer verify a certificate we issued you, and we will tell you before doing anything irreversible.

To exercise any of these, get in touch and we will respond within 30 days.

Changes

If this policy changes in a way that affects what we do with information we already hold, we will say so on this page and date the change rather than quietly editing it.

Last reviewed 01 August 2026.