We keep this short and plain. If you have questions, email [email protected].
Who we are
Leaving School is a short-course education provider. We run live, remote AI courses for 16–18 year olds. For data protection purposes, we are the controller of your personal data. You can reach us at [email protected].
What data we collect
Parents and guardians: name and email address, and a record of whether you opted in to marketing emails.
Students: name and email address, the name of their school, and their age. If they join our alumni Discord community, we hold a record of that too. After the course ends, we may ask for feedback — this is always anonymous.
Payment information: we use Stripe to process payments. We do not store your card details. We do retain a record of transactions as required by law.
Why we collect it and our legal basis
- To run the course — we need your name and email to communicate about sessions, logistics, and course materials. The legal basis is contract.
- Marketing emails — only if you explicitly opted in. The legal basis is consent. You can withdraw it any time.
- School name and age — used only for anonymised statistics (e.g. "60% of students were in Year 13"). The legal basis is legitimate interest. This data is never attributed to individuals in any output.
- Post-course feedback — anonymised and used to improve the course. The legal basis is legitimate interest.
- Payment records — kept to meet our legal obligations under UK tax and accounting law.
- Discord alumni community — optional. You join by consent and can leave at any time.
How long we keep it
- Payment records: 6 years, as required by law.
- Course communications data (no marketing opt-in): deleted 90 days after the cohort ends.
- Parent email with marketing opt-in: until you opt out, or 3 years of inactivity — whichever comes first.
- Student Discord: until you leave the server or ask us to delete your data.
- School name and age: anonymised at cohort close — no longer linked to you personally.
Who we share it with
We do not sell your data. We share it only with the third-party processors we use to run the service:
- Stripe — payment processing. Stripe is PCI-DSS certified. See stripe.com/gb/privacy.
- Discord — alumni community (students only, if they choose to join). See discord.com/privacy.
We may also share data if required by law or a court order.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate data
- Erase your data (the "right to be forgotten")
- Restrict how we use your data
- Object to processing based on legitimate interest
- Portability — receive your data in a portable format
To exercise any of these rights, email [email protected]. We will respond within 30 days.
Marketing
We only send marketing emails to parents and guardians who actively opted in at the point of registration. We never send marketing to students.
You can unsubscribe at any time using the link in any email, or by emailing [email protected].
Cookies
This site uses Cloudflare Web Analytics only. Cloudflare analytics is privacy-first: it does not use cookies, does not track individuals across sites, and does not build advertising profiles. No third-party tracking cookies are set on this site.
Contact and complaints
If you have any questions about this policy or how we handle your data, email [email protected].
If you are not happy with how we have handled your data, you have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO): ico.org.uk.