Numeracy Ninjas – Privacy Notice
(Draft v0.2 – May 2025)
1 Who we are
Tau Learning Lab Ltd (trading as Numeracy Ninjas) is the “data controller” responsible for the personal information described in this notice.
- Company number: 14092603
- Registered office: 45 Stoke Heights, Fair Oak, Eastleigh, Hants, SO50 8AH, UK
- Email: admin@numeracyninjas.org
2 The data we collect
| Category | Examples | Collected from |
|---|---|---|
| Account, billing & shipping | Purchaser first & last name, role, school / MAT or home address (incl. postcode & country), email | When you create an account or place an order |
| Student allocation | Number of students covered by each licence tier (no student names) | Purchaser input during checkout |
| Web analytics | IP address, browser type, pages visited (only if you accept analytics cookies) | Cookies / analytics tools |
| Support & correspondence | Emails you send to admin@numeracyninjas.org | Direct from you |
| Marketing preferences | Soft‑opt‑in status, unsubscribe flags | Checkout or trial‑signup forms |
| Social‑media interactions | Mentions, tags, public comments on our official accounts | Publicly from the platform |
We do not knowingly collect personal data directly from children.
3 Why we use your data & lawful bases
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Provide membership area, licence administration & ship certificates / stickers | Contract – Art 6(1)(b) |
| Process payments & bookkeeping | Legal obligation – Art 6(1)(c) and Legitimate interests for internal admin |
| Improve site & resources | Legitimate interests – product development |
| Email product updates, tips & offers | Legitimate interests (soft opt‑in for existing customers & trial sign‑ups) or Consent for other recipients |
| Show advertising or analytics (future) | Consent – Art 6(1)(a) |
4 Retention
We keep account and invoicing records for 6 years after the end of the financial year in which your licence expires (required by tax law). Server logs are retained for 12 months. Aggregated, anonymised analytics may be kept indefinitely.
5 Sharing your data
We share data only with trusted service providers who help us run Numeracy Ninjas. These currently include:
| Provider | Service | Location |
|---|---|---|
| QuickBooks Online (Intuit Inc.) | Invoicing & bookkeeping | USA / EU |
| Brevo (Sendinblue SAS) | Transactional & marketing email | EU |
| Bluehost (Endurance Intl Group) | Web & email hosting | USA |
| MemberPress (Caseproof LLC) | Membership plug‑in | USA |
| WordPress.org Automattic | CMS software & Jetpack security | USA |
All processors are bound by contract to keep data confidential and secure and must act only on our instructions. Some partners are outside the UK / EEA; where that is the case we rely on an adequacy decision or the UK version of the EU Standard Contractual Clauses (SCCs) to safeguard your information.
We never sell your personal data.
6 Your rights
You have the right to:
- access the personal data we hold about you;
- ask us to rectify inaccurate data;
- request erasure or restriction of processing;
- object to processing based on legitimate interests;
- withdraw consent at any time (marketing);
- data portability; and
- complain to the UK Information Commissioner’s Office (ico.org.uk) or to your local supervisory authority if you live outside the UK.
To exercise any right email admin@numeracyninjas.org.
7 Children
Although students use our printed worksheets, accounts may only be created by teachers, tutors or parents/guardians. We design the site in line with the UK Age‑Appropriate Design Code and do not knowingly collect data directly from children.
8 Cookies
We use strictly‑necessary cookies to operate the site and optional analytics cookies (Google Analytics 4) only with your consent. Analytics is currently disabled, but if activated in future we will request consent before setting any non‑essential cookies. Full details are in our Cookie Policy, where you can change or withdraw consent at any time.
9 Security
We follow industry best practice: encrypted (HTTPS) connections, access‑controlled servers, and regular backups. Staff are trained in data‑protection principles.
10 International users
Numeracy Ninjas ships resources worldwide. We process your information in the UK or other jurisdictions listed above. Local data‑protection laws may grant you additional rights, which we will honour where required.
11 Changes to this notice
We review this notice at least annually. Material changes will be highlighted in the change log below and, where appropriate, notified by email.
Change log
| Version | Date | Key changes |
|---|---|---|
| 0.2 | May 2025 | Added shipping address & social‑media data; listed processors; clarified soft‑opt‑in marketing & future analytics |
| 0.1 | May 2025 | First consolidated UK‑specific draft |
Last updated: May 2025