Privacy Policy

About this policy

This policy explains how Wagona handles personal information when you visit our website, create or use an account, use our learning services, contact support or purchase a subscription.

Last updated: 26 August 2026.

Who we are

Wagona provides diagnostic learning, assessment and progress tools for learners, parents, teachers and schools.

For privacy enquiries or to exercise your rights, contact hello@wagona.co.uk. Our contact address is YOUR BUSINESS ADDRESS.

Schools and data-protection roles

Where a school decides why and how its learners’ information is used, that school will normally be the data controller and Wagona will process the information on its instructions. For direct learner or parent subscriptions, website enquiries and our own security and administration, Wagona may act as controller.

The applicable school agreement or service terms provide further detail about these responsibilities.

Information we collect

Depending on how the service is used, we may collect:

• Account, profile and contact information, including name, email address, telephone number, date of birth and profile image where supplied.
• School, class, role, parent-child and other organisation relationships.
• Curriculum selections, assessments, answers, results, marks, progress and learning interactions.
• Device, browser, session, security, audit and suspicious-login information.
• Subscription, invoice, payment status and payment-provider references. We do not store full payment-card numbers.
• Support messages and files that a user chooses to upload.
• Cookie choices, notification preferences, accessibility settings and other service preferences.

Why we use information and our lawful bases

We use information to create and secure accounts, deliver learning and assessment services, administer schools and subscriptions, provide support, prevent misuse, maintain records, meet legal duties and improve the service.

Depending on the activity and our role, we rely on performance of a contract, legitimate interests, compliance with a legal obligation, consent where required, or vital interests in an emergency. A school may identify a different lawful basis for information it controls.

Children and families

We design the service with children’s best interests, privacy by default and data minimisation in mind. Access is role-based: teachers are restricted to assigned classes and parents to explicitly linked children.

Parents, guardians and schools should provide accurate information and use the service in accordance with their responsibilities to children. We do not use children’s information for behavioural advertising.

Learning analytics and recommendations

Educational events may record when an assessment or question is opened, viewed, answered, changed, flagged or revisited and when learning tools are used. This supports progress reporting, identifies likely strengths or gaps and helps personalise learning.

We do not record raw keystrokes, unnecessary precise location, webcam or microphone recordings. Learning data is not used for advertising, commercial model training or protected-characteristic inference. We do not make solely automated decisions that have legal or similarly significant effects on a learner.

Who we share information with

Information may be shared with the relevant school, authorised teachers, linked parents or guardians, and trusted providers that host, secure, support, communicate or process payments for the service. Providers may act only under appropriate contractual and security controls.

We may disclose information where the law requires it, to protect a person’s vital interests, to investigate misuse, or as part of a properly managed business reorganisation. We do not sell personal information.

International transfers

Where information is processed outside the United Kingdom, we use an appropriate transfer mechanism and safeguards required by data-protection law, such as adequacy regulations or approved contractual clauses.

How long we keep information

We keep information only for as long as it is needed for the service, security, accounting, dispute resolution or legal obligations. Different records have different retention periods.

When information is no longer required, it is deleted or anonymised unless a legal or record-preservation duty requires it to be retained.

Security

We use access controls, tenant separation, encryption in transit, logging, backups, secure development practices and monitoring designed to protect information. No service can guarantee absolute security; users should protect their credentials and report suspected misuse promptly.

Your data-protection rights

Subject to the law and the context in which information is used, you may have the right to:

• Be informed about how your information is used.
• Ask for access to a copy of your personal information.
• Ask us to correct inaccurate or incomplete information.
• Ask for deletion or restriction in certain circumstances.
• Object to certain processing.
• Receive certain information in a portable format.
• Withdraw consent where processing relies on consent, without affecting earlier lawful processing.
• Complain to the relevant data-protection regulator.

Cookies and communications

Strictly necessary cookies and similar storage support security, sessions and saved privacy choices. Optional analytics and functional technologies are used only according to your choices. See our Cookie Policy and use Manage cookie settings to change those choices.

Service messages about accounts, security, assessments or subscriptions are not marketing. Where marketing is offered, you can unsubscribe at any time.

Complaints

Please contact hello@wagona.co.uk first so we can try to resolve your concern. You may also complain to the UK Information Commissioner’s Office at ico.org.uk or by telephone on 0303 123 1113.

Changes to this policy

We may update this policy when the service, law or our use of information changes. We will update the date above and provide a prominent notice where a change is significant.