Privacy Policy

Altius ("we", "us", "our") operates the Altius 11+ exam preparation platform at altius.co.uk. We are committed to protecting the privacy of all users, including children and their parents or guardians.

As a platform used by children, we take extra care to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Age Appropriate Design Code (Children's Code).

We collect the following types of information:

• Account information: Name, email address, and password when you register. For child accounts, we collect the child's first name and year group (Years 3–6). Year group is used solely to tailor content difficulty and is not shared with third parties.
• Learning data: Answers to questions, test scores, time spent on activities, skill progress, and learning journey completion. This data is essential to provide personalised learning.
• Usage data: Pages visited, features used, device type, browser type, and IP address. We use this to improve the platform and fix issues.
• Payment information: If you subscribe to a paid plan, payment is processed securely by our payment providers — Stripe (card payments) and GoCardless (Direct Debit). We do not store your full card or bank details.

We use personal data to:

• Provide and personalise the learning experience
• Track progress and generate performance reports for parents
• Send important account notifications (e.g. password resets)
• Improve our platform, content, and AI tutoring features
• Comply with legal obligations

We do notuse children's data for marketing purposes. We do not sell personal data to third parties.

We process your data on the following legal bases under UK GDPR:

• Contract: To provide the services you have signed up for.
• Legitimate interests: To improve our platform and ensure security, where this does not override your rights.
• Consent: For optional communications such as newsletters or product updates. You can withdraw consent at any time.

Altius is designed for use by children aged 7–11 preparing for the 11+ or SATs exams. Child accounts are always created and managed by a parent or guardian.

During registration, we ask for the child's year group (Years 3–6). This is used exclusively to deliver age-appropriate content and adjust question difficulty. We do not collect the child's date of birth, and year group data is never used for profiling, marketing, or shared with third parties.

• We collect only the minimum data necessary for the learning experience.
• Children cannot make purchases or access external links without parental controls.
• We do not display behavioural advertising to children.
• AI tutor interactions are not used to profile children for any purpose beyond their learning.
• Parents can review, download, or delete their child's data at any time from the Parent Dashboard.

We may share data with:

• Service providers: Hosting (Vercel), database (PostgreSQL), payment processing (Stripe and GoCardless), and email delivery services. These providers process data on our behalf under strict data processing agreements.
• Legal requirements: If required by law, regulation, or legal process.

We do not sell, rent, or trade your personal data.

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it for longer.

Anonymised, aggregated data (e.g. question difficulty statistics) may be retained indefinitely to improve the platform.

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption in transit (TLS/HTTPS) and at rest
• Secure password hashing (bcrypt)
• Role-based access controls
• Regular security reviews

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent

To exercise any of these rights, contact us at privacy@altius.co.uk.

We use cookies and similar technologies to keep you signed in and to understand how the platform is used. For full details, see our Cookie Policy.

We may update this policy from time to time. We will notify you of significant changes by email or through the platform. The "last updated" date at the top of this page indicates when the policy was last revised.

If you have questions about this privacy policy or how we handle your data, please contact us:

• Email: privacy@altius.co.uk

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.