Privacy Policy

What We Collect

We collect account details such as name, email address, password credentials, purchases, subscription status, credit balances, saved classroom work, approximate registration country and basic activity records. Legacy Bubble account data is imported only where it supports account access, entitlement, analytics, customer support or compliance.

How We Use Data

We use personal data to provide accounts, manage purchases and subscriptions, protect access to paid resources, support customers, improve the site and understand aggregate usage. Marketing email preferences are stored separately from operational emails.

Analytics and Cookies

Optional browser analytics is disabled unless you allow it through the site's privacy choices. If allowed, we use our own aggregate usage records and Google Analytics to understand page visits and how the site is used. We do not send your name or email address to Google Analytics. Google Analytics may store identifiers such as _ga in your browser. You can withdraw or change your choice at any time using Cookie settings in the site footer.

Legacy Import Data

The legacy user import excludes old access codes, verification tokens, QR payloads, geo address fields and raw user journey IDs. Imported analytics are stored as aggregate counts where possible, with retention review dates for legacy metadata.

Sharing and Processors

We use service providers for hosting, email delivery, payments and application data storage. Payment details are handled by the payment provider rather than stored directly in this application.

Your Rights

You can ask to access, correct, delete, restrict or receive a copy of your personal data, and you can object to certain processing. You can also withdraw marketing consent at any time. Contact the site administrator using the published Drama Lesson Plans contact details to make a request.

Retention and Security

We keep personal data only for as long as needed for account access, legal, financial, support and analytics purposes. Admin-only import fields are restricted to staff users, and passwords are stored using the authentication system rather than in plain text.

Further Guidance

For independent information about UK data protection rights, see the Information Commissioner's Office.