Curriculum Circle ("we", "us", "our") is committed to protecting your privacy. This Policy explains what information we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018. It applies to our websites and learning platforms covering AQA, Edexcel, Cambridge and IGCSE curricula.
1. Who we are and how to contact us
Curriculum Circle is operated by Baje Associates Limited, a company registered in England and Wales under company number 08137041, with its registered office at 14 Millers View, Ipswich, England.
For the purposes of UK data protection law (including the UK GDPR and the Data Protection Act 2018), Curriculum Circle is the data controller for personal information we collect.
- Email: admissions@thecurriculumcircle.com
- Data Protection Lead: John Fanimo
We aim to respond to privacy enquiries within 30 days.
2. Information we collect
2.1 Information you give us
- Account information: name, email address, school or institution, year group, exam board, subject(s), and hashed password.
- Payment information: processed by Stripe — Curriculum Circle does not store full card numbers.
- Communications: messages, feedback, essay submissions, and support tickets.
2.2 Information we collect automatically
- Usage data: topics accessed, flashcard history, answers submitted, time on tasks, streaks and achievements.
- Device data: IP address, browser type, OS, and approximate location (city/country level).
- Cookies and local storage: see Section 9.
2.3 Special category data
We do not knowingly collect sensitive personal data. If you voluntarily include such information in an essay or message, it is processed solely to provide the Service.
3. How we use your information
| Purpose | Lawful basis |
|---|---|
| Creating and maintaining your account | Performance of a contract |
| Delivering the learning Service | Performance of a contract |
| Processing payments | Performance of a contract |
| Sending essential service emails | Performance of a contract |
| Optional marketing emails (study tips, new features) | Consent — opt out at any time |
| Improving the Service and developing new features | Legitimate interests |
| Detecting fraud or abuse | Legitimate interests + legal obligation |
| Complying with legal obligations | Legal obligation |
We do not use your personal information to train external AI providers' models.
4. Children and safeguarding
Many of our users are under 18. We require users under 13 to obtain parental consent. We do not use children's data for behavioural advertising. Contact admissions@thecurriculumcircle.com if a child has provided data without proper consent.
5. Who we share your information with
We do not sell your personal information. We share it only with service providers (website hosting with Hostinger, database and sign-in with Supabase, and payments with Stripe) under written data-processing agreements, and where required by law.
6. International transfers
Some providers process data outside the UK. We rely on adequacy decisions, the IDTA, or UK SCCs to protect transfers.
7. How we keep your information secure
We use HTTPS/TLS encryption in transit, encryption at rest, bcrypt password hashing, multi-factor authentication for staff, and documented incident-response procedures. No method is 100% secure.
8. How long we keep your information
- Active accounts: while your account is active.
- Inactive accounts: deleted or anonymised after 24 months of inactivity.
- Financial records: 6 years (UK tax law).
- Support correspondence: up to 3 years.
9. Cookies and local storage
We only use strictly necessary storage: keeping you signed in, and saving your revision progress and settings on your device. On our public information pages only, and only if you click Accept on our banner, we use the Meta Pixel to measure our Facebook and Instagram adverts, and Google Analytics to understand how visitors use the site. We never use it inside the student revision platforms or portals, and we never send student data to Meta. See our Cookie notice. Full details are in our Cookie Notice.
10. Your rights (UK GDPR)
You have the right to access, rectify, erase, restrict, object to, and port your data, and to withdraw consent. Email admissions@thecurriculumcircle.com. You may also complain to the ICO at ico.org.uk. We respond within one calendar month.
11. Changes to this Policy
The "Last updated" date reflects the latest version. Material changes will be notified by email or in-product before taking effect.
12. Contact us
Curriculum Circle
14 Millers View, Ipswich, England
admissions@thecurriculumcircle.com