Privacy Notice

English Shop Revision is a GCSE, iGCSE and KS3 English Literature quotation revision app operated by English Shop. Most people using it are aged roughly 13–17, so this notice is written to be understood by students as well as by parents, carers, tutors and schools.

Data controller: English Shop, [BUSINESS OWNER TO CONFIRM] (registered name, trading address and company number). Data protection contact: [BUSINESS OWNER TO CONFIRM] (named contact); in the meantime please use help@englishshop.co.uk . We have not appointed a statutory Data Protection Officer; whether one is required is [BUSINESS OWNER TO CONFIRM] following professional advice.

There is a shorter, student-facing version of this notice at Your privacy and safety . The two documents describe the same practices at different levels of detail.

• Account details: first name, optional last name, and a password held only as an irreversible hash by our authentication provider. If you choose “Continue with Google”, we receive the name associated with that Google account.
• Course settings: qualification (KS3, GCSE or iGCSE), exam board, selected set texts, and your quotation target.
• Revision records: which quotations you have studied, per-skill mastery and retrieval levels, quiz attempts with the questions asked and whether each answer was right or wrong, accuracy, XP, streak, achievements and your last-active date.
• Access-control records: whether the one-off English Shop access key has been entered successfully, your account access status, and a record of any access change made by an administrator (including who made it and when). Failed key attempts are counted temporarily to block guessing.
• Technical records created by our providers: IP address, device and browser information and request logs generated by hosting, database and authentication services; and error diagnostics that contain no student identifiers.
• Correspondence: anything you email us.

What we do not collect: date of birth, school name, postal address, telephone number, parent or carer contact details, location data, photographs, uploaded files, payment details, and any special category information such as health, ethnicity, religion or SEN status. When you write an answer in your own words, that text is checked on your own device and is never sent to or stored by us.

• To create and run your account and keep it secure — necessary to provide the service you asked for.
• To show the right texts for your qualification and exam board.
• To remember your progress and choose what to revise next. This is the core of the app: your revision results decide which quotations and skills come up again, and how soon. It is used to help you revise — never to make automated decisions about you, to grade you, or to profile you for advertising.
• To let English Shop staff support you and manage who has access.
• To keep the app secure and prevent misuse of the access key.
• To answer your questions and handle data protection requests.

The lawful bases we rely on for each purpose (contract, legitimate interests, legal obligation, and whether any consent or parental authorisation is required for younger students) are [BUSINESS OWNER TO CONFIRM] following professional data protection advice. We do not send marketing and we do not use consent-based tracking.

• You. You can always see and download your own record.
• English Shop administrators and tutors. Authorised staff can see your name, when you were last active, how much work you have completed, your scores, accuracy and streak, the texts and exam board you chose, and whether your access is active. They use this to support your revision and to manage access. They cannot see your email address. They cannot see anything you typed in your own words, because that never leaves your device.
• No other student. Students cannot see each other's accounts, names, progress or results. There are no leaderboards, messaging or public profiles. This separation is enforced by the database itself, not only by what the screens display.
• Service providers who run the app on our instructions (see section 8).

Who inside English Shop may hold an administrator account, and the internal rule governing when staff look at an individual student's record, are [BUSINESS OWNER TO CONFIRM]. Changes to a student's access are recorded automatically.

Scheduled deletion is now built into the app. Once a day it checks for accounts that have gone unused for too long, accounts whose access was removed long ago, and old staff records, and clears them out. English Shop is confirming the final time limits, so the schedule below shows the periods the app is set up to use and marks which parts are already running.

The automatic clean-up is switched on and off by the English Shop owner, and every run is logged so we can show it is working. While it is switched off, information is kept for as long as the account exists and you can still delete your account at any time. We will update this notice if the periods above change.

• Access removal is not deletion. An administrator can pause an account — for example when a student leaves a course. Sign-in stops working, existing sessions stop working, and the underlying data cannot be read by the app even with an old session. The student's revision history is deliberately kept so that access can be restored with progress intact. The action, the administrator responsible and the time are recorded.
• Inactive accounts. An account that has not been signed into for a long time is first marked with a deletion date, giving a grace period. Signing in during that period cancels the deletion automatically. If nobody signs in, the account and its revision records are deleted and the sign-in identity is removed from our authentication provider. The periods are shown in section 5; whether an advance email warning is sent before deletion is [BUSINESS OWNER TO CONFIRM].
• Archiving. We do not operate a separate archive store. Any future archiving would keep only what is necessary, under the same access controls as live data, and would be described in this notice before it began.
• Deletion and anonymisation. Choosing “Delete my account”, or asking us to delete it, removes the account and its linked revision records; deletion is permanent and cannot be undone. The automatic clean-up does the same thing for accounts past their time limit. Records of staff actions are kept for accountability, but names and email addresses are stripped out of entries older than the period in section 5, so the record no longer identifies anyone. Each clean-up run is logged with counts only.
• Backups. Our hosting and database providers take routine backups so the service can be restored after a failure. Deleted information can therefore persist in backups for a short period before those backups are rotated and overwritten. Backups are encrypted and are only used for recovery. Exact backup retention windows are provider-set and [BUSINESS OWNER TO CONFIRM].

• See what we hold — My Account shows your record, and “Download my data” produces a complete copy.
• Correct it — you can edit your name, qualification, exam board, texts and target yourself; email us for anything else.
• Delete it — “Delete my account” in My Account, or ask us.
• Take it elsewhere — the download is a machine-readable file.
• Object, or ask us to pause using it — email us and we will explain what we can do.
• Withdraw consent where we ever rely on consent.
• Complain — to us first, and to the Information Commissioner's Office ( ico.org.uk ) or your local data protection regulator.

A parent, carer or school can exercise these rights on a student's behalf. We will take reasonable steps to confirm who is asking before we act, especially where a request would reveal a student's information; our identity-check procedure for parent and school requests is [BUSINESS OWNER TO CONFIRM].

The app uses a small number of managed services: web hosting and content delivery; a managed database with authentication and transactional email (for sign-up confirmation and password resets); and, if you choose it, Google sign-in. Our brand fonts are served from our own site, so loading a page does not send your details to a font provider. There is no advertising network, analytics service, AI provider, payment processor, error-monitoring service or social media embed in the app.

If you use “Continue with Google”, Google receives the fact that you signed in and provides us with your name. We never request access to Gmail, Drive, Contacts, Calendar or any other Google service, and we never see your Google password. Google processes that data under its own privacy policy.

Provider names, the countries in which they process data, the signed data-processing agreements and the transfer safeguards relied upon where data leaves the UK or EEA (for example the UK International Data Transfer Agreement or Addendum) are [BUSINESS OWNER TO CONFIRM]. We will name them here once confirmed rather than describe arrangements we cannot verify.

Every student's records are locked to their own account inside the database, so one student's information cannot be reached from another student's session. Staff permissions are checked by the database, not just by the app screens. The English Shop access key is stored only as an irreversible hash, repeated wrong attempts are blocked temporarily, and only an account owner can change it or manage administrators. Passwords are handled and hashed by our authentication provider. Pages inside the app are private and are not indexed by search engines. We keep the amount of information we hold deliberately small, which is itself a protection.

The service is designed to be used by young people, so we apply child-appropriate protections to everyone: private by default, no sharing between students, no advertising or behavioural profiling, no unnecessary data collection, plain-English explanations, and self-service access to a copy of your data and to deletion. Streaks and XP exist to acknowledge revision, not to pressure anyone into daily use; there are no push notifications and no loss-of-streak alerts.

Whether the app is offered directly to students or through schools and tutors, the minimum age, and the approach to age assurance and parental authorisation, are [BUSINESS OWNER TO CONFIRM] following professional advice. We have carried out a privacy and data protection assessment of the app, including its effect on children, and we review it when significant features change — see the Privacy, Data Protection & Child Safety Summary, available on request.

We store only what is strictly necessary: a sign-in session so you stay logged in, and your app settings. There are no advertising, marketing or analytics cookies, no tracking pixels and no cross-site tracking, so there is no cookie banner to accept or reject.

Email help@englishshop.co.uk with any question about privacy, to exercise a right, or to raise a concern about a student's information, and a person will reply. Postal address and named data protection contact: [BUSINESS OWNER TO CONFIRM].

We will update this notice whenever the app changes in a way that affects student information — new data fields, new providers, new AI or analytics features, changes to sign-in, monitoring, staff permissions or retention — and we will tell students in the app when a change is significant.