Privacy Policy
Last updated: 16 March 2026
1. Who We Are
School Atlas is an independent school-finding tool for parents. We are not affiliated with any government body, local authority, or school.
2. What Data We Collect
Account Data
When you register, we collect your email address, display name, and optionally your postcode. Your postcode helps us show you relevant nearby schools and is never shared with third parties.
Usage Data
We use essential cookies for authentication (session management). We do not use analytics tracking cookies, advertising cookies, or any third-party tracking.
Shortlists and Saved Searches
If you save schools to your shortlist or save search criteria, this data is stored in your account and is only visible to you.
3. How We Use Your Data
- To provide and improve the School Atlas service
- To show you schools near your location (if postcode provided)
- To maintain your shortlists and saved searches
- To authenticate your account
We do not sell, rent, or share your personal data with third parties.
4. Legal Basis for Processing
We process your data based on your consent (given at registration) and our legitimate interest in providing the service. You can withdraw consent at any time by deleting your account.
5. Data Storage and Security
Your data is stored securely using Supabase (hosted on AWS in the EU). All data is encrypted in transit (TLS) and at rest. Access to personal data is restricted to authorised administrators only.
6. Your Rights (GDPR)
Under the UK GDPR, you have the right to:
- Access your data — download a copy from your Account page
- Rectify inaccurate data — edit your profile at any time
- Erase your data — delete your account from your Account page. This permanently removes all your data including profile, shortlists, and saved searches
- Port your data — export your data as JSON from your Account page
- Object to processing — contact us at privacy@schoolatlas.co.uk
7. Data Retention
We retain your account data for as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days. Anonymised, aggregated usage statistics may be retained indefinitely.
8. Cookies
School Atlas uses only essential cookies required for authentication and session management. We do not use any optional or tracking cookies. No cookie consent beyond acknowledgement is required for essential cookies under UK GDPR.
9. Third-Party Services
- Supabase — authentication and database hosting (EU)
- Vercel — website hosting (edge network)
- Postcodes.io — postcode lookup (no personal data sent)
- OpenStreetMap — map tiles (no personal data sent)
- Plausible.io — privacy-friendly website analytics (no cookies, no personal data collected, GDPR compliant)
10. Children's Privacy
School Atlas is designed for parents and guardians. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.
11. Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated via email to registered users. The “last updated” date at the top of this page indicates the most recent revision.
12. Contact Us
For privacy-related queries, data requests, or complaints:
- Email: privacy@schoolatlas.co.uk
- General: info@schoolatlas.co.uk
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).