Privacy Notice

1. About us

Wavelength Education Ltd ("Wavelength", "we", "us", "our") is a company registered in England and Wales, with our registered address at 18 Wenlock Road, London, England, N1 7TA.

If you have any questions about this notice or how we handle your data, contact us at support@wavelength.org.

2. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data, where we have no legal reason to keep it
• Object to or restrict certain types of processing
• Withdraw consent where we rely on it
• Complain to the ICO at ico.org.uk or by calling 0303 123 1113

To exercise any of these rights, contact us at support@wavelength.org. We will respond within one calendar month.

3. Security

We take reasonable technical and organisational steps to protect personal data, including:

• Encryption in transit (HTTPS/TLS) and at rest
• Access controls limiting who can view sensitive data
• Error monitoring to detect and respond to issues promptly
• Regular review of our security practices

No system is completely secure. If you have concerns about a potential data incident, contact us at support@wavelength.org.

4. The Wavelength platform

This section applies to teachers, school staff, students, and parents using the Wavelength learning platform.

What we collect

Why we collect it

We use this data to:

• Provide personalised learning experiences for students
• Help teachers track progress and tailor their support
• Communicate with schools about their programmes
• Keep the platform secure and working correctly
• Meet our legal and contractual obligations

Lawful basis

We process school staff data on the basis of contract performance — it is necessary to deliver the service the school has engaged us to provide.

We process student data on the basis of legitimate interests — we have assessed that providing personalised educational support to students, including those with SEND and attention-related needs, is a legitimate purpose that does not override students' rights. Where students are under 13, we rely on the school acting on behalf of parents or guardians, in line with standard educational data processing practice.

We rely on explicit consent from parents or guardians before using any personal data for marketing or testimonial purposes.

How long we keep it

We keep platform data for as long as your school uses our service. If a school ends its relationship with Wavelength, we will delete or anonymise all associated data within 12 months, unless we are legally required to retain it for longer. You can request earlier deletion at support@wavelength.org.

Who we share it with

We do not sell personal data. We may share data with:

• Google Cloud Platform (infrastructure and storage) — servers located in London, UK
• Resend (transactional email)
• Sentry (error monitoring, EU region — all personally identifiable information is anonymised before transmission)
• Schools and teachers, to manage student accounts and progress
• Authorities, only where legally required

All third-party processors are contractually required to protect data and use it only as we instruct.

5. Wavelength Studio

This section applies to teachers and subject specialists who create content using the Wavelength Studio app.

What we collect

Why we collect it

We use this data to:

• Manage your creator account and the briefs assigned to you
• Store and review the content you submit
• Publish approved content to the Wavelength platform, where it is matched to pupils
• Send you notifications about your submissions and account
• Keep the app secure and working correctly

Lawful basis

We process creator data on the basis of contract performance — it is necessary to manage your engagement with Wavelength as a content contributor.

We process video and audio content on the same basis. Once approved, your content becomes part of the Wavelength platform and may be retained indefinitely as a learning resource. Unapproved or rejected content is deleted within 90 days of a final decision.

How long we keep it

We keep your account data for as long as your creator account is active, and for up to 24 months after it is closed. Approved video content is retained as part of the platform for as long as it remains in use. You can request deletion of your account and associated data at support@wavelength.org.

Who we share it with

We do not sell personal data. We may share data with:

• Google Cloud Platform (infrastructure and video storage) — servers located in London, UK
• Resend (transactional email)
• Sentry (error monitoring, EU region — all personally identifiable information is anonymised before transmission)
• Wavelength staff responsible for content review
• Authorities, only where legally required

6. Our website

This section applies to visitors to wavelength.org.

We collect standard server logs (IP address, browser, pages visited, referrer) for security and performance purposes. We do not use advertising trackers or sell visitor data.

If you submit a contact or interest form, we store the information you provide in order to respond to you. We keep form submissions for up to 24 months.

7. Updates to this notice

We may update this notice as our products develop. We will notify schools, creators, and registered users of any significant changes by email. The date at the top of this page reflects when it was last updated.