Get a free SEAG mock paper, with answer explanations
Skip to main content

Privacy Policy

Last updated: 1 June 2026

SEAG Success ("we", "us" or "our") is committed to protecting the privacy and personal data of everyone who uses our platform. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using SEAG Success, you agree to the practices described here.

1. Who We Are

SEAG Success is operated by its founders, a husband and wife who are both Northern Ireland-based educators. For all data-related enquiries, please contact us at admin@learningsuccess.co.uk.

2. What Data We Collect

2.1 Account Information

When you register for an account, we collect:

  • Parent/guardian name and email address
  • A securely hashed password
  • Your child's first name (or a chosen display name), year group, and date of birth
  • Your school (if applicable)

For school accounts, we also collect school name and the contact details of the teacher or administrator who registers.

2.2 Usage and Practice Data

When your child uses the platform, we collect:

  • Answers given to practice questions
  • Answers typed into free-text lesson activities (used for personalised marking by our AI provider; see section 2.7)
  • Scores and results from practice papers
  • Time spent on each session and any pause activity
  • Time spent on each section of each lesson, used to show parents and teachers your child's engagement pattern
  • Topics accessed and questions attempted

This data is used solely to provide the service: to generate personalised feedback, calculate scores, populate the parent and teacher dashboards, and prioritise unseen questions in future papers.

2.3 Newsletter and Email Subscribers

If you sign up for our newsletter or email updates via our website, we collect your email address. This is used solely to send you news, tips, and updates about SEAG Success. You can unsubscribe at any time by emailing admin@learningsuccess.co.uk.

2.4 Contact Form Data

If you contact us via our website forms, we collect your name, email address and the content of your message. School enquiry forms additionally collect your school name, role, phone number (optional) and pupil numbers. This information is used only to respond to your enquiry.

2.5 Technical Data

When you use our platform we automatically collect certain technical data, including:

  • IP address (used for rate-limiting login attempts, fraud prevention, and short-term marketing campaign attribution as described below)
  • Anonymised IP address (last octet removed, e.g. 192.168.1.0) recorded with each page visit for self-hosted analytics purposes
  • Browser type and device information
  • The URL path and any URL parameters (such as marketing campaign sources, e.g. ?ref=...)
  • The referring URL that brought you to our site
  • Session data stored in a secure server-side session

Page visit logs are retained for up to 90 days and are used to understand how the platform is used, calculate overall traffic levels, and measure the effectiveness of our marketing campaigns (for example, knowing which school an email was sent to and whether the recipient visited the site). We do not use third-party analytics trackers such as Google Analytics.

2.6 Marketing Campaign Attribution

If you arrive at our site from a marketing email or shared link that includes a campaign identifier (such as ?ref=<school-slug>), we record that identifier with your page visits and any subsequent registration so we can measure which campaigns brought people to our platform. This information is stored in two ways:

  • A small first-party cookie placed on your device for up to 30 days so we can recognise return visits within the campaign window. This cookie does not identify you personally; it only stores the campaign identifier and a random visitor ID.
  • A short-lived link between your IP address and the campaign identifier (held for up to 24 hours) used as a fallback for the same purpose.

If you subsequently register an account, the campaign identifier is associated with your account so we can see which school or campaign drove the registration. Beyond that point, no further IP-based attribution occurs.

We do not share this attribution data with the originating school or any third party. It is used internally to measure marketing effectiveness.

2.7 AI-Marked Open Response Answers

Some lesson activities ask your child to type a free-text answer (for example, explaining their reasoning on a maths problem). To provide personalised feedback, these answers are sent to Anthropic, PBC (the developer of Claude) for automated marking against a per-question rubric set by us.

The answer is sent verbatim, alongside the question text and the marking rubric. We do not include your child's name, email address, account identifier, or any other personally identifying field in the request. If your child writes their own name into the body of their answer, that text reaches Anthropic exactly as written, because the answer cannot be reliably anonymised without changing its meaning.

Anthropic acts as a sub-processor under their Data Processing Addendum and contractually does not use this data to train its models. Anthropic processes this data on servers located in the United States; international transfers are protected under the UK International Data Transfer Agreement and Anthropic's standard contractual clauses.

3. Lawful Basis for Processing

We process your personal data on the following legal bases:

  • Contract performance: To provide the SEAG Success service you or your school has subscribed to.
  • Legitimate interests: To improve the platform, prevent fraud, protect the security of our service, and measure the effectiveness of our marketing campaigns to schools and parents.
  • Legal obligation: To comply with applicable laws and regulations.
  • Consent: For any optional communications (where applicable).

4. Children's Data

SEAG Success is designed for use by P6 and P7 primary school pupils (typically aged 10 to 12) under the supervision of a parent, guardian or teacher. We do not knowingly collect personal data directly from children without verifiable parental or school consent. Accounts for children are created and managed by a parent, guardian or school administrator.

We collect only the minimum child data necessary to deliver the service: a display name, year group, date of birth, and practice activity. Date of birth is used to provide age-appropriate content and to notify parents when their child approaches the transition from primary to post-primary education. We do not collect children's email addresses, home addresses or any other unnecessary personal information. Where lesson activities ask your child to type a free-text answer, that text is processed as described in section 2.7.

5. How We Share Your Data

We do not sell or rent your personal data to third parties. We may share data in the following limited circumstances:

  • School access: If your child is enrolled through a school account, the relevant teacher(s) and school administrator can view their practice results and progress data.
  • Hosting providers: Our platform is hosted on IONOS servers. Data is stored on servers within the United Kingdom or European Economic Area. IONOS acts as a data processor under a data processing agreement.
  • Payment processing: Subscription payments are processed by Stripe, Inc. When you subscribe, your payment card details are handled directly by Stripe and are never stored on our servers. Stripe acts as a data processor under their own Data Processing Agreement. See stripe.com/gb/privacy for Stripe's privacy policy.
  • AI processing: Free-text answers submitted by your child during certain lesson activities are sent to Anthropic, PBC (a US-based AI provider) for automated marking. Anthropic acts as a data processor under a Data Processing Addendum. Answers are not associated with your child's name or account identifiers. See anthropic.com/legal/privacy for Anthropic's privacy policy.
  • Legal requirements: We may disclose data if required by law or to protect the safety of any person.

6. Data Retention and Anonymisation

We keep your data only as long as it is useful for delivering the service and for honest research into what helps children prepare for the SEAG. Different categories of data have different retention windows.

6.1 Children's data

Identifiable information about your child (name, date of birth, login details, free-text answers) is kept for 2 years after your subscription ends. After that window we anonymise the child's record: the display name is replaced with a generic identifier such as "Pupil 1234", the date of birth is collapsed to month and year only (the day is removed), and login credentials are erased so the account can no longer be used.

Your child's activity data (quiz attempts, lesson sessions, scores, answers) is kept intact in the anonymised record. We use this for aggregate research, for example to understand which lesson formats most help children improve. Because the record is no longer linked to an identifiable child, it can be retained indefinitely on this anonymised basis.

If you only ever used the free trial and never paid for a subscription, we apply a shorter window: identifiable child data is anonymised 6 months after the trial ends.

6.2 Parent / guardian data

Identifiable information about you (name, date of birth, contact details, login credentials) is kept for 5 years after your subscription ends. After that window we anonymise your record. Your name and date of birth are replaced or removed, and your password is erased so the account can no longer be used.

Your email address is the one exception: we keep it indefinitely so we can contact you in the future if SEAG Success would be useful again, for example for a younger child preparing for a later cycle. You can ask us to remove your email at any time by emailing info@learningsuccess.co.uk.

6.3 Right to erasure (UK GDPR Article 17)

You have the right to ask us to erase all of your personal data at any time. To exercise this right, email info@learningsuccess.co.uk with the subject "Right to erasure" and we will process the request within 30 days. Right-to-erasure overrides the 2-year and 5-year retention windows above and also removes the preserved email address. Anonymised activity data is retained for aggregate research only and contains no information that could be used to re-identify your family.

6.4 Other categories

Contact form submissions are retained for up to 12 months for the purposes of responding to enquiries. Stripe payment records are retained for 7 years for tax and accounting compliance. Page-visit logs are retained for 90 days as described in section 2.5.

7. Cookies

We use cookies and similar technologies in two groups: first-party cookies that we set ourselves, and third-party services described below.

First-party cookies:

  • Strictly necessary session cookies to keep you logged in during your visit. These are deleted when you close your browser or your session expires.
  • A persistent "Remember me" cookie (only set if you explicitly tick "Remember me for 30 days" at login) that restores your login session for that duration.
  • A marketing attribution cookie (described in section 2.6) placed for up to 30 days when you arrive from a campaign link. This cookie stores only a campaign identifier and a random visitor ID, never your name or email.

Third-party services that may set cookies:

We use Meta Pixel and Meta's Conversion API (third-party analytics tools from Meta Platforms Inc.) to measure the effectiveness of our marketing on Facebook and Instagram. Meta Pixel may set cookies on your device. Where you submit a contact form or complete a registration, we may also send a hashed copy of your email address and IP address to Meta's Conversion API so that conversion events can be matched to ad views. We do not send your unhashed email or any other personally identifying details to Meta. You can opt out of Meta tracking by adjusting your Facebook ad preferences at facebook.com/adpreferences. See Meta's privacy policy at facebook.com/privacy/policy for details.

A bot-prevention service (Cloudflare Turnstile) runs on our registration and contact forms to prevent automated abuse. Turnstile may set cookies on its own Cloudflare domain and sends limited interaction data to Cloudflare for analysis. See cloudflare.com/privacypolicy for Cloudflare's privacy policy.

We do not use Google Analytics or other third-party analytics or advertising trackers beyond those described above.

8. Security

We take appropriate technical and organisational measures to protect your personal data, including:

  • All passwords are hashed using bcrypt; we never store passwords in plain text
  • CSRF token protection on all forms and API endpoints
  • Rate-limiting on login attempts to prevent brute-force attacks
  • HTTPS encryption for all data in transit

No method of transmission over the internet is completely secure, but we are committed to using industry-standard practices.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate data.
  • Right to erasure: You can ask us to delete your data ("right to be forgotten").
  • Right to restrict processing: You can ask us to limit how we use your data.
  • Right to data portability: You can ask for your data in a structured, machine-readable format.
  • Right to object: You can object to processing based on legitimate interests.

To exercise any of these rights, email us at admin@learningsuccess.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version. Significant changes will be communicated to registered users by email.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at admin@learningsuccess.co.uk.