Privacy Policy

Last updated: 24 September 2025

Introduction

PappCo Ltd is committed to protecting personal information when using our website and services. This Privacy Policy explains how we collect, use, and safeguard your personal data in compliance with UK data protection laws.

1. Who We Are

We are PappCo Ltd, a company incorporated in England and Wales with company number 08865061, whose registered office is at 1a Falmer Court, London Road, Uckfield, England, TN22 1HN. Our ICO reference number is ZA086077. For data protection queries, contact our data protection officer at privacy@pappco.co.uk.

2. What Information We Collect

We may collect data through:

• Website enquiry forms
• Email communications
• Telephone conversations
• Service consultations
• Project communications

Types of information may include:

• Name and job title
• Work email and postal address
• Telephone numbers
• School or organization details
• Professional contact details

We also collect technical information about website usage, including:

• IP addresses
• Device information
• Browser type and version
• Website interaction data
• Pages visited and time spent

3. How We Use Your Information

We use information for:

• Providing personalized educational technology services
• Managing customer relationships and projects
• Improving our products and website
• Communicating about relevant services and updates
• Technical support and account management
• Ensuring compliance with educational standards
• Invoicing and payment processing

4. Legal Basis for Processing

We process data when:

• We have your explicit consent
• Processing is necessary for a contract or service provision
• We have a legitimate business interest
• We need to comply with legal obligations
• Processing is necessary to protect vital interests

5. Data Sharing and Disclosure

We may share data with:

• Trusted service providers and subcontractors
• Professional advisors (legal, financial, audit)
• Educational authorities (when required by law)
• Legal authorities (when required by law or court order)

We never sell personal data to third parties. Any sharing is conducted under strict confidentiality agreements and data processing terms.

6. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request data correction or rectification
• Request data deletion (right to be forgotten)
• Object to data processing
• Request data portability
• Restrict processing
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, contact us at privacy@pappco.co.uk.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Industry-standard encryption for data transmission and storage
• Strict access controls and authentication systems
• Regular security reviews and vulnerability assessments
• Employee training on data protection principles
• Secure development practices for all software solutions
• Regular data backups with secure storage

8. Cookies and Tracking Technologies

Our website uses cookies to:

• Improve user experience and website functionality
• Analyze website traffic and usage patterns
• Personalize content and services
• Remember user preferences

You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active customer data: Duration of business relationship plus 7 years
• Website analytics: 26 months
• Marketing communications: Until consent is withdrawn
• Legal compliance: As required by applicable laws

10. International Transfers

Data is primarily processed within the UK and EU. If international transfers are necessary, we ensure adequate protection through:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Certification schemes
• Binding corporate rules

11. Children's Privacy

Our services are designed for educational institutions. We do not knowingly collect personal data directly from children under 13. When providing services to schools, we work with educational institutions to ensure compliance with applicable children's privacy laws.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. Updates will be posted on this page with a revised "Last updated" date. Significant changes will be communicated directly to affected users.

13. Contact Information

For questions about this Privacy Policy or our data practices, contact:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority, at ico.org.uk.