Privacy notice

Who we are

The EduShare.uk platform is run by Getech Limited, Solutions Centre, Knightsdale Road, Ipswich, Suffolk, IP1 4JQ (company number 2436537). We are the data controller for the information described here and are registered with the Information Commissioner’s Office under Z7161654.

Our Data Protection Officer is Darrell Felton — DPO@getech.co.uk · 01473 243 470.

Who this is for

This platform is for education professionals. It is not intended for children, and accounts are created by adults signing in with a Google account. We ask members not to post information that identifies a pupil, and we automatically screen submissions for it — see “Protecting pupil data” below.

What we collect

When you sign in. We use Google sign-in, which gives us your email address, your name and your profile picture. We store these to create your account, attribute your contributions and, for Getech staff addresses, grant administrator access.

Your profile. Anything you choose to add or edit — display name, profile picture, your “about” text and your theme preference. Some community activity information is visible to other members by default, including your display name, contributions, comments, stars or votes, activity points, badges and leaderboard position. Where profile settings allow, you may be able to hide selected profile details, but content you publish to the community will remain visible unless it is removed. We do not record which school or trust you work for.

What you contribute. Prompts, apps, skills, gems and their attachments; comments; chat messages; stars and votes; and the activity points these earn. This is content you deliberately publish, and other members can see it once it has been approved.

Events and training activity. If you register for or attend platform-related events, webinars or community sessions, we may record your registration or attendance so we can administer the event and understand community participation.

How you use the platform. A “last seen” timestamp so the community chat can show who is online, a record of when you accepted the Code of Conduct, your account status, any moderation or disciplinary action, and your marketing preference.

When you contact us. The name, email address, phone number and message you submit through the enquiry form, support tickets, feedback and any content reports you raise.

Why we use it, and our lawful basis

• To run your account, control access, attribute your contributions and host what you publish — our legitimate interest in operating a restricted professional customer community.
• To moderate content and keep the platform safe, including screening for pupil data and safeguarding concerns — our legitimate interest in a safe community, and our duty of care to the schools we serve.
• To recognise community participation, including stars, votes, activity points, badges and leaderboards — our legitimate interest in supporting engagement, while making clear what other members can see.
• To manage inactivity, deletion requests, misuse, suspension and bans — our legitimate interest in administering the service fairly, protecting the community and preventing re-registration after serious misuse.
• To send you marketing — only with your consent, which you record when you register and can withdraw at any time from your profile.
• To meet legal obligations — where we are required to keep records.

Protecting pupil data and confidential information

Every prompt is checked before it is published. We block submissions that appear to name a pupil alongside a class or year group, that contain a postcode, or that mix a name with sensitive terms such as EHCP or child protection. Text that looks like a safeguarding disclosure is held for review rather than published. Please still anonymise anything you share — use “a Year 9 pupil” or “Pupil A”.

You must not upload or share pupil data, safeguarding information, confidential school or trust information, unnecessary personal data, copyrighted material you are not authorised to use, or any other information you do not have permission to share. If you share AI-generated or AI-assisted material, you are responsible for reviewing it before posting and ensuring it does not include personal, confidential or unauthorised content.

Who we share it with

Google provides sign-in and the anti-spam check on our enquiry form, and hosts the platform and its database on Google Cloud in the London (europe-west2) region, so your information stays in the United Kingdom. If you allow analytics cookies, Google Analytics records how you use our public website (pages viewed, approximate location, device and browser type); it is never used inside the members’ portal. Google may process this analytics data outside the UK, under the UK’s data transfer safeguards. We do not sell your information, and we do not share it with advertising providers, because we do not use any.

How long we keep it

We keep your account and contributions for as long as your account is open.

If your account is inactive, we may send a reminder after 6 months and a final warning after 12 months. Where there is still no activity, we may close the account after allowing a further reactivation period of up to 3 months.

Once anything is deleted — by you or by us — we remove or anonymise the information that identifies you and make sure deletion or anonymisation is completed across relevant systems within 90 days, unless we need to keep limited information for legal, security or misuse-prevention reasons.

If an account is permanently banned for misuse, we will remove personal account data so far as practicable. We may retain the email address used for registration for up to 24 months solely to prevent re-registration and protect the integrity and safety of the community. We will not use that email address for marketing, profiling or community participation. Any longer retention would require documented justification, for example where needed for a legal investigation, legal claim, regulatory requirement or other lawful security purpose.

Your session cookie expires after 14 days. Records we are required to keep for legal or financial reasons are held for as long as the law requires.

Deleting your account

You can delete your account yourself, at any time, from your profile page. We will ask you to confirm first, because it cannot be undone.

When you delete your account, or ask us to delete it, we may need to confirm your identity and intention before completing the request. We aim to do this within one month. Once confirmed, we remove or anonymise information that identifies you, including your email address, name, profile picture and biography, and remove your comments, chat message text, marketing preference and leaderboard position where applicable.

The prompts, apps, skills and gems you shared stay in the library so the community does not lose them. They are credited to “Deleted member”, and nothing connects them to you any more. Deletion or anonymisation will then propagate through relevant systems within 90 days, unless we need to retain limited information for legal, security or misuse-prevention reasons.

Cookies

We use a small number of cookies and similar technologies. Analytics cookies are used on our public website only if you allow them, and none are used for advertising. Our cookie policy lists every one, what it does and how long it lasts, and you can change your choice at any time from the Cookie settings link in the footer.

Your rights

You have the right to ask for a copy of your information, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent you can withdraw it at any time.

Contact DPO@getech.co.uk and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner’s Office on 0303 123 1113 or at ico.org.uk/make-a-complaint.