Privacy Policy
How we collect, use, store, and protect personal data under UK GDPR.
Introduction
AI Comprehensions (“we”, “us”, “our”) is a UK-based educational technology platform operated by Patrick Fordham (sole trader).
We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our website, platform, or contact us. It also sets out your rights under the UK General Data Protection Regulation (“UK GDPR”) and related data protection laws.
Please read this policy carefully.
1. Data Controller
For the purposes of UK GDPR:
Data Controller: AI Comprehensions (operated by Patrick Fordham, sole trader)
Contact email: patchfordham@gmail.com
Where personal data is uploaded or managed on behalf of an organisation (for example by a tutor, school, or institution), AI Comprehensions may act as a Data Processor, with the organisation acting as the Data Controller for that data.
2. Information We Collect
Information You Provide Directly
We collect information you provide when you:
- create an account (student, parent, tutor, or teacher)
- use the platform
- contact us for support or enquiries
This may include:
- name and email address
- user role (student, parent, tutor, teacher)
- age or year group (students only)
- account login and authentication details
- communications sent to us
When creating or managing an account for a child, you confirm that you have the appropriate parental or guardian authority and consent.
Information Generated Through Use of the Platform
When you use AI Comprehensions, we collect data necessary to deliver the educational service, including:
- comprehensions created, assigned, or completed
- progress tracking, scores, and performance analytics
- interactions with AI-generated content
- activity logs, timestamps, and feature usage
This data exists solely to operate, improve, and secure the platform. It is not used for unrelated profiling or advertising.
Technical and Usage Information
We may automatically collect limited technical information, including:
- device type, browser type, and operating system
- IP address (anonymised where possible)
- referral source and usage patterns
- cookies and similar technologies
See Section 10 for cookies.
3. Information From Other Sources
We do not routinely enrich user profiles using:
- social media scraping
- third-party data brokers
- public profile aggregation
Any exception would only occur where legally permitted and clearly disclosed.
4. Lawful Basis for Processing
We process personal data under the following lawful bases:
- Performance of a contract: to provide access to and operate the platform
- Legitimate interests: to improve services, maintain security, and respond to enquiries
- Legal obligation: where required by law
- Consent: where specifically requested (for example, optional communications)
Where we rely on legitimate interests, we ensure those interests do not override your fundamental rights and freedoms.
5. How We Use Your Information
We use personal data to:
- create and manage user accounts
- deliver personalised educational content
- track learning progress and share insights with parents and tutors (where applicable)
- respond to enquiries and provide support
- improve platform performance and usability
- maintain platform security and integrity
- process payments via third-party providers
Payments: All payments are handled securely by third-party payment processors. We do not store card or payment details.
7. Data Storage and Security
Where Data Is Stored
Personal data is stored securely within the United Kingdom and the European Economic Area (EEA).
We do not transfer personal data outside the EEA without appropriate legal safeguards.
Security Measures
We use appropriate technical and organisational measures, including:
- encryption of data in transit and at rest
- access controls and role-based permissions
- secure cloud infrastructure
- regular security reviews
No method of internet transmission is completely secure. While we take all reasonable precautions, data transmission is at your own risk.
8. Data Retention
We retain personal data only for as long as necessary to:
- provide the Service
- meet legal, regulatory, or accounting obligations
In most cases, data is retained for up to six (6) years, unless deletion is requested earlier and legally permissible.
9. Children’s Privacy
AI Comprehensions is designed for educational use and may be used by children under 13 only with parental or guardian consent.
We collect only the minimum information required to:
- deliver age-appropriate learning
- track educational progress
Parents and guardians have the right to:
- request access to their child’s data
- request correction or deletion
- withdraw consent for further processing
Requests can be made via patchfordham@gmail.com.
11. Your Rights
Under UK GDPR, you have the right to:
- access your personal data
- request correction of inaccurate data
- request deletion in certain circumstances
- restrict or object to processing
- receive your data in a portable format
- object to direct marketing
- lodge a complaint with the Information Commissioner’s Office (ICO)
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated revision date.
13. Contact and Complaints
For questions, requests, or concerns regarding this Privacy Policy or your personal data:
If you remain dissatisfied, you have the right to complain to the UK Information Commissioner’s Office (ICO).