Seven Plus Steps by Pebble Prep
Privacy policy
Last updated
We collect as little as we can, especially about your child. This policy explains what we collect, why, who helps us, how long we keep it and your rights.
1. Who we are
Pebble Prep runs Seven Plus Steps, a parent-led 7+ preparation programme, at pebbleprep.co.uk. We decide how your information is used, so we are the controller of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Questions about privacy, or a request about your data: email support@pebbleprep.com.
2. What we collect
About you (the parent):
- your email address, which you use to sign in;
- your first name, if you choose to give it;
- a referral code, if you used one when you signed up;
- a record of what you agreed to at checkout, including the wording and when;
- anything you send us when you contact support.
About your child:
- a first name or nickname, and their year group;
- their exam date and the schools you choose, so we can pace the plan and pick a paper style;
- their on-screen practice answers and results, so you can see how it is going.
We don't ask for your child's surname, date of birth, photo, address or school records. Your child doesn't have their own account or email.
Payments: Stripe takes your payment. We receive the payment status and your plan, never your full card details.
Technical information: the cookies listed below and short-lived server logs (such as IP address and browser type) that keep the service secure and working.
3. How we use it and why
| What we do | Why we're allowed to |
|---|---|
| Run your account and your child's plan, packs, practice and results | To provide the service you asked for (contract) |
| Take payments and instalments | Contract |
| Send sign-in links and essential service emails | Contract |
| Send the weekly progress email (you can unsubscribe from any email) | Our legitimate interest in helping you keep on track |
| Record which referral code brought you | Our legitimate interest in running referrals |
| Keep the service secure and prevent misuse | Our legitimate interest in protecting you and us |
| Keep payment records | Legal obligation |
We don't sell your data, show advertising, or use your child's information for marketing or profiling.
4. Your child's information
We have designed Seven Plus Steps with the UK Age Appropriate Design Code (the Children's Code) in mind:
- a parent creates the account and stays in control;
- we collect the minimum about your child and nothing they don't need;
- there is no advertising, no social features and no messaging between users;
- results are shown to you, the parent, and are not shared with schools or anyone else.
7. How long we keep it
- Your account: while it is open. Ask us to close it and we delete it.
- Your child's information and results: until 12 months after their exam date, then we delete it. You can ask us to delete it sooner.
- Payment records: 6 years, because the law requires us to keep accounting records.
- Server logs: a short time, for security.
8. Your rights
You can ask us to:
- give you a copy of your data and your child's;
- correct anything that is wrong;
- delete your data or your child's;
- stop or limit how we use it, or object to a use based on our legitimate interests;
- send your data to you or another provider in a common format.
Email support@pebbleprep.com. We reply within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
9. Keeping it safe
Data is encrypted in transit and at rest. Sign-in uses one-time email links, so there is no password to leak. Access to data is restricted to the people who need it to run the service.
10. Changes to this policy
If we make important changes, we'll tell you by email before they take effect. The date at the top shows when this policy was last updated.