Privacy & Trust
Everything about how SchoolBudi protects and handles data, in one place. Each policy is written in plain language to help schools, staff and families understand their rights and our commitments.
Our commitments
- We are registered with the UK Information Commissioner's Office (ICO).
- SchoolBudi has been designed using Privacy by Design principles — protection is built in, not added on.
- We collect only the minimum information needed to provide the service. No surnames, addresses, contact details or location for children.
- Schools remain the data controller of their pupil data; SchoolBudi acts as the data processor.
- Data is stored in the UK, encrypted in transit and at rest, and access is restricted by role.
- Identifiable pupil data is never sold, licensed or shared for marketing.
- Any future benchmarking or research uses only anonymised, aggregated information that cannot identify an individual, and only where a school has opted in.
Privacy Policy
What data we collect, why we collect it, who can see it, where it is stored, and your rights.
Cookie Policy
The cookies we use, why we use them, and how you can manage your preferences.
Data Processing Agreement
Roles, obligations, security and sub-processors under UK GDPR, for schools to review and keep on file.
Ts & Cs
The terms and conditions for using SchoolBudi, including accounts, pricing and liability.
Security Overview
Encryption, password security, backups, permissions, hosting and monitoring in plain language.
Data Breach Response Plan
How we detect, contain, assess and report personal data breaches, and how schools are kept informed.
Data Retention & Deletion
How long different types of data are kept, how deletion works, and how schools remove their data.
Contact Us About Your Data
Ask to see, correct or delete personal information, or ask a question about how data is handled.
Questions about any of these policies? Contact us at hello@schoolbudi.co.uk.
Last updated: 24/09/2026.