Privacy
Privacy notice
Who we are
Pyxion Learn (learn.pyxion.uk) is run by Pyxion, which is the controller of your personal information. To ask about this notice or use your rights, contact us and say it’s about privacy.
What we use, why, and for how long
Searching for schools (no account needed)
- Information
- The first part of the postcode you search (for example "B73"), your filters, and a code made from your IP address and browser that changes every day, so we can count visitors without identifying them.
- Lawful basis
- Legitimate interests: understanding how the service is used and improving it.
- How long
- 13 months, then deleted.
Your account
- Information
- Email address, a sign-in identifier, and when you first and last signed in.
- Lawful basis
- Contract: providing the account you asked for.
- How long
- While your account is open. You can delete it yourself at any time; your sign-in is removed within 30 days. Accounts unused for two years are deleted after a warning email.
Plans, invoices and saved reports
- Information
- The plan you have, who granted it and when, invoice references, and reports you choose to save (including the postcode area you searched).
- Lawful basis
- Contract. Invoices: legal obligation to keep accounting records.
- How long
- Plans and saved reports while your account is open. Invoice records 6 years.
Forms you send us (contact, access requests, demos, corrections, tuition providers)
- Information
- Your name, email, optional organisation and phone number, your message, and the page you sent it from.
- Lawful basis
- Legitimate interests: answering people who contact us. Access requests also: contract.
- How long
- 2 years. Plan requests linked to an invoice: 6 years.
Messages to a tuition provider
- Information
- Your name, email, optional phone and child’s school year, and your message.
- Lawful basis
- Consent: you tick the box to send it. The provider then holds its own copy as a separate controller.
- How long
- 2 years with us.
Key-dates reminder emails
- Information
- Your email address, nation, topics, any schools you follow, and the wording you agreed to.
- Lawful basis
- Consent, confirmed by the link we email you.
- How long
- Until you unsubscribe. We then keep your email address only so we don’t email you again. Unconfirmed sign-ups are deleted after 30 days.
Community
- Information
- Your display name (not your email), posts, comments, “helpful” marks and reports.
- Lawful basis
- Contract (the community terms). Moderation: legitimate interests.
- How long
- While public. You can delete your posts. Posts and comments we hide are deleted after 12 months.
Tuition provider pages and featured listings
- Information
- Business name, postcode, website, phone, the description agreed with you, and the email addresses for enquiries and your results page.
- Lawful basis
- Contract.
- How long
- While your page or listing is live, then as business records.
Which post or link brought you (only if you agree)
- Information
- The name of the post or link, where it was shared and the page you arrived on, linked to a plan request or plan if you make one.
- Lawful basis
- Consent, given in our cookie choices. You can withdraw it at any time.
- How long
- Cookie: 30 days. With a request or plan: as long as that record.
Security
- Information
- Server logs: IP address, browser, page requested and time.
- Lawful basis
- Legitimate interests: keeping the service secure and preventing abuse.
- How long
- 365 days. Backups: 30 days.
Where we rely on legitimate interests, we have checked that our use is necessary and doesn’t override your rights; you can object (see below). We delete information automatically when its period ends.
What we don’t do
- We don’t sell personal information or share it for advertising.
- We don’t use advertising cookies, social media tracking pixels or third-party analytics.
- Tuition providers who pay for featured listings receive no information about you unless you message them.
- We don’t make decisions about you by automated means alone.
- We don’t ask for children’s names, dates of birth or photos.
Who we share it with
| Who | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, database, storage, sign-in (Amazon Cognito) and logs. Acts on our instructions. | Ireland (EU) |
| Resend (Plus Five Five, Inc.) | Sends our emails: form notifications, key-dates reminders and messages to providers. Acts on our instructions. | United States |
| Tuition providers you message | Receive your enquiry, only when you tick the box to send it. | UK |
| OpenStreetMap tile servers | Your browser fetches map images from them, so they receive your IP address. | UK and EU |
| postcodes.io | Receives the postcode you type, to find its location. It isn’t linked to you. | UK |
Transfers outside the UK. Information held in the EU is covered by the UK’s adequacy regulations for the EU. Resend processes information mainly in the United States; it is certified under the UK Extension to the EU–US Data Privacy Framework, and its data processing terms also include the EU standard contractual clauses with the UK Addendum.
We may also disclose information where the law requires it, for example to the police with a valid request.
Children
Pyxion Learn is for adults: accounts and the community are for people aged 18 and over. Teenagers may use it with a parent or carer. We don’t knowingly collect information from children. If you think a child has given us information, contact us and we’ll delete it.
Cookies
We use cookies to keep you signed in and remember your choices, and, only if you agree, to remember which post or link brought you. See our cookie policy or change your choices in .
Your rights
Under UK data protection law you can ask us to:
- give you a copy of your personal information;
- correct information that is wrong or incomplete;
- delete your information;
- restrict how we use it, or object to our use based on legitimate interests;
- give you the information you provided in a portable format, where we rely on contract or consent.
Where we rely on consent, you can withdraw it at any time: unsubscribe from any email, or change your . This doesn’t affect anything we did before.
Signed in, you can download your data or delete your account yourself on your account page. For anything else, contact us. We’ll reply within one month, and won’t charge you. We may need to check your identity first.
If you’re unhappy with how we use your information, please tell us first. You can also complain to the Information Commissioner’s Office: ico.org.uk, or 0303 123 1113.
Changes to this notice
We update this notice when we change how we use personal information, and change the date at the top. If a change affects something you agreed to, we’ll ask you again.