Privacy policy
Privacy policy
Who we are
Online Ready is a product built by Abity. If you have any questions about this policy or your data, contact hello@abity.co.uk.
What we collect, and why
From students
- Name — so a certificate can be issued in their name.
- Quiz answers and scores — to confirm they've completed each module.
- Written reflections — only if they choose to set a PIN to continue on another device, in which case they're stored encrypted and unreadable without that PIN.
- A hashed PIN — never the PIN itself — only if they choose to set one.
From teachers and schools
- Name, email, school name — provided when requesting seats.
- Finance contact email — used only to send an invoice.
Legal basis
We process student data on the basis of the school's own legitimate educational and safeguarding interest in delivering online safety education, acting as a data processor on the school's behalf. We process teacher and finance contact details to perform the contract of supplying the course.
Children's data
This product is used directly by children. We collect the minimum needed to run the course and issue a certificate, reflections are encrypted client-side by default, and nothing is used for advertising or profiling.
How long we keep data
[To confirm: a retention period needs setting here — e.g. for the academic year plus a fixed period, then deleted. This needs deciding before publishing.]
Who else sees it
Data is hosted with Supabase (database) and processed for email delivery via a transactional email provider. We don't sell or share data with advertisers.
Your rights
Schools, as the data controller for student data, can ask us to provide, correct, or delete a student's data at any time by contacting hello@abity.co.uk.
Cookies
See our separate cookie policy.
Changes to this policy
We'll update the date at the top of this page whenever this policy changes.