EDUCareM Privacy Policy

Effective Date: September 23, 2026
Last Updated: September 23, 2026
(Previous versions of this policy are available upon request.)

At a Glance: Summary of Key Points
Before diving into the details, here is a quick overview of how we handle your privacy:

What personal information do we collect? We collect basic account details (like your name and email) and standard operational data when you register for our services or use our website.
Do we process any sensitive personal information? We generally do not collect sensitive personal data. If specific church or educational programs require it, we will only collect it with your explicit consent.
Do we collect information from third parties? We receive minimal data from third parties, limited primarily to secure payment confirmations from our payment processors.
How do we use your information? We use your data to manage your account, deliver our educational resources, and communicate with you about our mission.
Who do we share your personal information with? We share data only with essential service providers, such as our website hosts and payment processors. We never sell your personal information.
What are your privacy rights? You have the right to access, correct, delete, or port your data, as well as the right to withdraw your consent at any time.
How can you contact us? You can reach us anytime at bsict365@gmail.com.

***

1. Introduction

EDUCareM helps school leaders, teachers, and pupils understand their place in the mission of the Church—and equips them to become people of challenge, change, and transformation. To support this mission and provide you with our educational resources, we need to collect and process certain information about you.

We are deeply committed to protecting your privacy and being transparent about our practices. This policy explains in plain language what information we collect, why we need it, how we keep it safe, and the rights you have regarding your personal data. This policy applies to all users who visit our website (https://educarem.org.uk/) or register for an account with us.

2. What We Collect & Why

We organize our data collection around the specific purposes it serves. Here is what we collect and the legal basis we rely on under the UK GDPR and Data Protection Act 2018.

Information You Give Us Directly

When you register for an account, sign up for a program, or contact us, you provide us with your name, email address, school affiliation, and role (e.g., teacher, school leader). We need this information to create your account and tailor our resources to your specific educational needs.

Legal Basis: Consent (when you opt-in to communications) and Public Interest (as we carry out our charitable mission to support education).

Information Collected Automatically

When you browse our website, we automatically collect basic technical data, such as your IP address, browser type, and how you navigate our site. We collect this to ensure our website functions correctly and to understand which resources are most helpful to our community.

Legal Basis: Consent (via our cookie banner) and Public Interest (maintaining accessible educational platforms).

Information from Third Parties

If you make a donation or pay for a specific resource, we receive confirmation and basic transaction details from our secure payment processors. We do not receive or store your full credit card numbers.

Legal Basis: Legal Obligation (maintaining accurate financial records).

3. How We Use Your Information

We are purposeful about how we use your data. Every piece of information we process is tied to a specific goal:

Core Service Delivery: We use your account information to provide you with access to our platform, educational materials, and community features. (Basis: Public Interest)
Service Improvement: We analyze technical logs to fix bugs, improve website navigation, and develop new resources that better serve school leaders and pupils. (Basis: Public Interest)
Communication: We use your email to send you important account updates, password resets, and responses to your inquiries. (Basis: Public Interest)
Marketing and Newsletters: If you choose to hear from us, we will send you updates about our mission, new resources, and events. You can easily opt out of these at any time. (Basis: Consent)
Legal Compliance: We process certain financial and operational records to comply with UK charity and tax laws. (Basis: Legal Obligation)

4. When We Share Your Information

We respect your privacy and limit the sharing of your information to what is strictly necessary. We never sell your personal data.

Essential Service Providers: We share information with trusted vendors who help us run our organization. This includes our website hosting providers and secure payment processors.
Legal Requirements: We will share your information if we are required to do so by law, court order, or to comply with regulatory authorities (such as the Charity Commission or HMRC).
Business Transitions: If EDUCareM were to merge with another non-profit or transfer its operations, your data would be securely transferred to the new entity to ensure uninterrupted service.
With Your Consent: For any other sharing outside of these categories, we will ask for your explicit permission first.

5. Your Privacy Rights

You own your personal data, and we want to make it easy for you to exercise your rights under the UK GDPR:

Access Your Data: You can request a copy of the personal data we hold about you. We will provide this within one month of your request.
Correct Inaccuracies: If your information changes or is incorrect, you can update it directly in your account settings or ask us to fix it.
Delete Your Data: You can ask us to erase your personal data (“right to be forgotten”). We will do so unless we have a legal obligation to keep it (like tax records).
Port Your Data: You can request your data in a structured, commonly used, and machine-readable format to transfer it to another service.
Opt-Out of Marketing: Every marketing email we send includes a clear “unsubscribe” link at the bottom.
Withdraw Consent: Where we rely on your consent to process your data, you can withdraw it at any time. This will not affect the legality of any processing we did before you withdrew consent.

To exercise any of these rights, please email us at bsict365@gmail.com.

6. Data Security

We take the security of your personal information seriously. We protect your data using industry-standard encryption for data in transit and at rest, and we restrict access to your personal information to only those staff members who need it to perform their roles.

However, we must be honest: no system connected to the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You can help keep your account safe by choosing a strong, unique password and keeping your login credentials confidential.

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we commit to notifying you and the relevant authorities within 72 hours of becoming aware of the incident.

7. Data Retention

We only keep your information for as long as necessary to fulfill the purposes outlined in this policy. Our retention timeframes are:

Active Account Data: We keep your profile and registration data for the duration of your relationship with us, plus a reasonable buffer of 2 years after your last login, in case you decide to return.
Financial Records: By law, we must retain donation and transaction records for 7 years for tax and accounting purposes.
Marketing Preferences: We keep your contact details for marketing until you withdraw your consent or opt out.
Technical Logs: We retain server and security logs for 12 months to monitor system performance and investigate potential security incidents.

8. Cookies & Tracking

We use cookies—small text files placed on your device—to make our website work properly and to understand how visitors use our site.

Essential Cookies: These are necessary for you to log in and navigate the site securely.
Analytics Cookies: These help us understand which educational resources are most popular so we can improve our offerings.

You can manage your cookie preferences at any time through the cookie banner on our website or by adjusting your browser settings.

9. Children’s Privacy

Because our mission involves equipping pupils, we are particularly mindful of children’s privacy. We do not knowingly collect personal data directly from children under the age of 13 without verifiable parental consent. If a pupil under 13 wishes to use our interactive features, their parent, guardian, or authorized school official must create the account and provide consent. If we discover we have inadvertently collected data from a child under 13 without proper consent, we will delete it immediately. Parents have the right to review, request deletion of, or refuse further collection of their child’s data by contacting us.

10. International Transfers

EDUCareM is based in the United Kingdom. In some cases, our essential service providers (such as cloud hosting) may process your data outside the UK. When this happens, we ensure your data receives the same level of protection it has in the UK by relying on legally approved safeguards, such as UK Adequacy Regulations or the International Data Transfer Agreement (IDTA).

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our operations or legal requirements. If we make significant changes, we will notify you by sending an email to the address associated with your account or by placing a prominent notice on our website. Your continued use of our services after these changes take effect means you acknowledge the updated policy. You can always find the current version on our website, and previous versions are available upon request.

12. Contact Us

If you have any questions about this policy, how we handle your data, or if you wish to exercise your privacy rights, we are here to help.

Email:bsict365@gmail.com
Website: https://educarem.org.uk/

We aim to respond to all privacy-related inquiries within 5 business days.

13. Categories Table (CCPA/CPRA)

While we are a UK-based non-profit, we maintain global transparency standards. For users protected by California privacy laws, the following table outlines the categories of personal information we have collected in the past 12 months. We do not collect sensitive personal information as defined by the CPRA.

14. Automated Decision-Making

We do not use your personal data for any automated decision-making or profiling that produces legal or similarly significant effects on you (as defined by GDPR Article 22). All significant decisions regarding your account or access to our resources involve human review.

15. Privacy Signals

We respect your right to privacy and honor Global Privacy Control (GPC) browser signals. If your browser sends a GPC signal, our website will automatically recognize it and opt you out of any non-essential tracking or data sharing.

16. Sub-processors

To provide our services, we use third-party sub-processors (such as cloud hosting and payment processing vendors). We maintain a current, comprehensive list of all active sub-processors. You can view this list at any time by requesting it via email. Furthermore, users can subscribe to be notified before any new sub-processor is added to our operations by emailing bsict365@gmail.com with the subject line “Sub-processor Notification Subscription.”

17. EU/UK Representative

EDUCareM is established and headquartered in the United Kingdom. Because we are based in the UK, we do not require a separate UK representative.

For users in the European Economic Area (EEA): At this time, we do not have an appointed EU Representative under GDPR Article 27, as our primary operations and targeting are focused within the UK.

18. Supervisory Authority

If you believe we have not handled your personal data appropriately, we hope you will contact us first so we can make it right. However, you always have the right to lodge a complaint with our supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO). You can contact them at https://ico.org.uk/ or by calling their helpline at 0303 123 1113.