Privacy Policy

Last updated: May 10th, 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Personal Data only where we have a lawful basis to do so, including to provide, secure, support and improve the Service. Mr W's Lab Ltd is committed to protecting and respecting your privacy.

Mr W's Lab Ltd operates services and product/trading names including Maths White Board, Maths Copilot, LEAPS and Exam Precision. These names identify services operated by Mr W's Lab Ltd and are not separate legal entities.

Summary of Data Collection and Use

The table below is a quick reference. The full detail follows in the sections after it.

What We Collect	Who Provides It	Who Can Access It	Why We Collect It	Retention Period
Subscriber account data (for example subscriber or school name, username, email address, generated login credentials, subscription type, expiry date, credit allowance, reminder status, last access status, subscriber usage records)	Subscriber / school purchaser and account administration within the Service	Authorised employees and contractors of Mr W's Lab Ltd where needed for support and account administration	To create and renew subscriptions, issue login details, send password reminders, respond to support queries, contact subscribers about expiry or renewal, administer paid access and review subscriber resource usage	For no longer than necessary to manage the subscription, provide support, maintain security and satisfy legal, accounting or audit requirements
Staff account data (for example staff name, work email address, MIS or staff identifier, timetable account status)	School / School MIS via approved Wonde sync	Authorised school staff	To create, manage and secure staff access to school-managed timetable and lesson tools	While the school account remains active and for up to 13 months after relevant use, unless the school deletes it sooner or a longer legal or school-directed retention period applies
Student identity and register data (for example name, admission number, year group, registration group, tier)	School / School MIS via approved Wonde sync	Authorised school staff	To maintain the Central Hub and identify learners across the software suite	Same as above
Student identifiers and demographics (for example date of birth, gender, UPN or local UPN, approved identifiers)	School / School MIS via approved Wonde sync	Authorised school staff	To match records, support school reporting and provide school-managed educational services	Same as above
Student metadata and support indicators (for example ethnicity, EAL, FSM, FSM6, SEN status, SEN needs details, in-care, premium pupil, service child, regional data)	School / School MIS via approved Wonde sync	Authorised school staff	To support school-led grouping, monitoring, intervention and pastoral support	Same as above
Guardian or contact details approved for the Central Hub	School / School MIS via approved Wonde sync	Authorised school staff	To support school-managed record keeping and approved contact context within the Service	Same as above
Class, subject, lesson and timetable data (for example class membership, subject membership, teachers, periods, rooms)	School / School MIS via approved Wonde sync	Authorised school staff	To organise teaching groups, lesson delivery, seating, analytics and timetable-linked tools	Same as above
Current and target information and school-managed login credentials used for educational access	School / Authorised school staff	Authorised school staff and the relevant user where credentials are issued for access	To support access management, progress monitoring and school-managed educational activity	Same as above
Assessment and analytics data (for example answers, scores, question-level analysis, targets, feedback)	Student during use / Authorised school staff	Authorised school staff	To support teaching, feedback, progress tracking and school-led analysis	Typically while the relevant school record remains active and for up to 13 months after relevant educational use, unless deleted sooner or retained longer for moderation, audit, safeguarding or legal reasons
Lesson and classroom management data (for example lesson notes, seating plans, RAG ratings, book checks, behaviour records)	Authorised school staff / Student during use where applicable	Authorised school staff	To support lesson delivery, classroom organisation, monitoring and pastoral follow-up	Same as above
LEAPS ratings, review dates, attendance, exclusions and encrypted staff summaries	Student during LEAPS review / Authorised school staff	Authorised school staff	To support wellbeing review, pastoral care and school-led intervention	Until 13 months after the student's time at the school or until the school deletes the record, unless a longer legal or school-directed retention period applies
Canvas content and uploaded documents or images	Student or teacher during use	Relevant teacher, authorised school staff and, where intentionally shared in a live session, session participants	To enable classroom collaboration, marking, moderation, feedback and class administration	Session-based data is typically removed within 96 hours, or up to 10 days where moderation or homework features are used; where linked to longer-lived school records, retention may extend in line with school-managed educational use
IP address, browser, device data and service diagnostics	Automatically collected	Platform admin and authorised support personnel where needed	For diagnostics, analytics, security, support and service improvement	Up to 13 months or longer where required for security, support or legal reasons

Notes

Subscriber account data created through paid purchases or renewals may be accessed by authorised employees and contractors of Mr W's Lab Ltd where required for support, login administration, password reminders, expiry handling and related account management.
For school-managed Central Hub data and related educational records, schools decide the educational purposes for which the data is used. Mr W's Lab Ltd provides the software and related processing services for those school-managed uses across its relevant products, including Maths White Board, Maths Copilot, LEAPS and Exam Precision where enabled.
Wonde synchronisation only occurs where the school has approved the relevant permissions within Wonde. Where Wonde approval is not in place, equivalent register data may be supplied directly by the school through spreadsheet upload or manual entry.
We only extract the fields that are currently configured and approved for the Central Hub integration. We do not describe or rely on the full superset of fields that a third-party integration could theoretically make available unless those fields are actively enabled.
No phone number or payment details are collected from students as part of the Central Hub.
All data is stored securely within the European Economic Area (EEA).
Students or teachers can request deletion by contacting the relevant school or the account owner responsible for the school-managed context, or platform support where Mr W's Lab Ltd is responsible for the account.

Controller and Processor Roles

For school-managed Central Hub, classroom, assessment, reporting, timetable, pastoral, LEAPS, Maths Copilot and Exam Precision data, the school is the Controller and Mr W's Lab Ltd acts as Processor on the school's documented instructions, including instructions given by enabling modules, entering data, approving Wonde permissions, uploading files and configuring users.

For our own account administration, billing, support, diagnostics, security monitoring, fraud and abuse prevention, website analytics and direct customer relationships, Mr W's Lab Ltd acts as Controller.

Where the school has approved access through Wonde, Wonde acts as a separate independent processor appointed directly by the school to transfer selected MIS data to us. Wonde is not our sub-processor, and we are not Wonde's sub-processor. Each of us is responsible for our own processing of the school data we hold, and we will cooperate with each other and with the school to handle data subject requests, complaints and any data security incident affecting the integration. We only receive the fields needed for the services the school has enabled and do not request or rely on the full superset of fields that Wonde could theoretically make available.

When our staff or authorised users interact directly with the Wonde portal (for example, to manage school connections), Wonde acts as Controller for that direct interaction, including login information such as names and email addresses, as described in Wonde's own privacy notice (Wonde Privacy Notice).

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for You to access our Service or parts of our Service.
Company (referred to as either "the Company", "We", "Us" or "Our" in this Privacy Policy) refers to Mr W's Lab Ltd, 4 Office Village, Forder Way, Cygnet Park, Hampton, Peterborough, Cambridgeshire, England, PE7 8GX, operating services and product/trading names including Maths White Board, Maths Copilot, LEAPS and Exam Precision.
Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
Country refers to: United Kingdom
Device means any device that can access the Service such as a computer, a mobile or a digital tablet.
Personal Data is any information that relates to an identified or identifiable individual.
Service refers to the Website.
Service Provider means any natural or legal person who processes the data on behalf of the Company.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit through Google Analytics - Policy).
Website refers to websites, subdomains and online services operated by the Company, including Maths White Board, Maths Copilot, LEAPS and Exam Precision where applicable.
You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

For users of the virtual classroom services, you will be asked for:

First name and last name
Usage data

For subscribers purchasing or renewing paid access, we may collect and create subscriber account data including the subscriber or school name, username, email address, generated or reset login credentials, subscription type, expiry or renewal date, credit allowance, reminder status, last access status and subscriber resource-usage records linked to the subscription.

This subscriber account data is used to create and renew subscriptions, issue login details, send password reminders, respond to support queries about login or general account use, contact subscribers about imminent expiry or renewal, administer access to subscriber features, and review subscriber resource usage for support, account administration and service improvement.

For schools using the Central Hub and the connected educational tools, personal data may be supplied directly by the school through manual entry or spreadsheet upload, or, for schools that have approved access through Wonde's permissions dashboard, by synchronisation from the school's MIS through the third-party Wonde integration.

The Central Hub acts as the shared source of school-managed staff and student data across the software suite. Depending on the fields the school provides directly or approves through Wonde, this may include:

Staff data such as staff names, work email addresses, MIS or staff identifiers, timetable account status and timetable ownership information.
Student identity and register data such as student names, admission numbers, year group, registration group, study tier, class membership, subject membership and timetable or room links.
Student identifiers and demographics such as date of birth, gender, UPN or local UPN, and other school-held identifiers where supplied through the approved data source.
Student metadata and support indicators such as ethnicity and cultural data, English as an additional language, free school meals, free school meals 6, SEN status, SEN needs details, in-care indicators or date ranges, premium pupil indicators, service child indicators and regional data, where provided by the school or through approved Wonde synchronisation.
Guardian or contact details made available to the Central Hub, such as contact names, email addresses, telephone or other contact information and the lives-with-pupil flag. Where the school uses the Wonde integration, parent/guardian contact details are received as a routine part of the integration rather than only on a case-by-case basis.
Pupil photographs supplied by the school's MIS through the Wonde integration, where available.
Free-text notes held in the school's MIS, including pupil general notes, group notes, group descriptions and pupil permissions or consent flags, where supplied through the Wonde integration. The school controls the content of these free-text fields.
Employment data for staff, such as employment start date, employment end date, employment details, role and current-status flag, where supplied by the school or its MIS.
Current and target information, school-managed login credentials used for educational access, and other account-management data created for school use within the Service.
Performance, pastoral and lesson-management data created through the Service, including assessment results, question-level analysis, lesson notes, seating arrangements, RAG ratings, book check states, behaviour records, attendance snapshots and wellbeing review records where those tools are used.
Usage data.

Once data is held in the Central Hub, relevant fields may be used by the Service's teaching and tutoring tools, assessment and analytics tools, lesson and classroom management tools, and pastoral or wellbeing tools. These records support teaching and learning by providing feedback to teachers and students, identifying learning trends, supporting lesson organisation, tracking progress, and helping schools provide educational and pastoral support.

The Service does not collect payment card details from students. Telephone numbers or other contact details are only processed where the school supplies them directly, approves them through Wonde, or where a subscriber or account contact provides them for support or account administration.

The Service contains tools that allow users to upload documents, images and canvas content, primarily for sharing work with teachers and authorised users within the relevant school-managed environment. Optional device permissions, such as access to a library or camera, are requested before use. No photos are uploaded without the user choosing to upload or capture them. The relevant school or session owner controls how uploaded classroom content is used within the school-managed environment. In the interest of improving the quality of the Service, we may store a copy of canvas content only where it is needed to investigate a fault, support a user, moderate submitted work or identify a common misconception; where practical, personal data is removed or avoided for these improvement uses. All content is currently stored within the EEA.

For schools using the LEAPS wellbeing and review tools, the Service may also collect additional school-managed pastoral and wellbeing data.

In addition to the Central Hub data listed above, LEAPS may collect:

Self-assessment ratings on a 1-5 scale for 25 statements across 5 categories: How do I learn?, Attitude towards school, Attitude towards attendance and behaviour, Wider community support, and Emotional wellbeing.
Dates for up to 3 LEAPS review meetings.
Attendance percentages at each review point.
Count of lowest ratings (1s) and highest ratings (5s) at each review.
Exclusions count at each review point.
Summary comments written by staff, which are encrypted at rest.

This data is used to track student progress in key areas of learning and wellbeing, support pastoral care, and enable schools to identify students who may need additional support. LEAPS data is only accessible to authorised school staff.

Staff Privacy

Where schools use the Central Hub, timetable tools or related school-managed services, staff personal data may include staff names (including legal forenames/surnames, initials, titles), work email addresses, MIS or staff identifiers, employee UPI, employment start and end dates, employment details, current-status flag, timetable account status and timetable ownership information. This data may be provided directly by the school or, where approved by the school in Wonde, through the Wonde integration. It is used to create, manage and secure staff access to school-managed tools and is available to authorised users within the relevant school context.

Children's Privacy

We collect personal data from children under the age of 16 either from the child during use of the Service or from their school as part of the Central Hub and related educational records. Where a school uploads, enters or synchronises this data for school use, the school is responsible for ensuring that an appropriate lawful basis exists and for any notices or consents required under applicable law.

The Service is used in educational settings and may be accessed by individuals under the age of 16. In school-managed use, the Central Hub and related educational records are controlled by the relevant school for educational purposes. Where a user creates and uses a standalone non-school account, Mr W's Lab Ltd remains responsible for the data needed to provide that standalone service. Where a student account is deleted or unlinked from a school or teacher, access to associated school-managed data is also removed.

Lawful Basis for Processing Personal Data

We process your data under the UK GDPR. We do not rely on a single, blanket "consent by using the app" basis. The lawful basis for any given processing depends on the context:

School-controlled educational use (Central Hub, classroom, assessment, analytics, timetable, behaviour, pastoral, LEAPS and exam-analysis records): the school is Controller and decides the lawful basis under UK GDPR, typically public task or legitimate interests for school-led education, safeguarding and pastoral care. Mr W's Lab Ltd acts as Processor under the school's Data Processing Agreement.
Direct subscriber and account use (purchase, renewal, login, support, password reminders): contract with the subscriber, supported by legitimate interests for account administration and security and by legal obligation for accounting, tax and audit retention.
Operational processing by Mr W's Lab Ltd (security, authentication, diagnostics, fraud prevention, abuse prevention, service improvement, website analytics): legitimate interests, balanced against the rights and freedoms of users.
Optional permissions (such as camera or photo-library access for uploading work): consent, given by the user at the device prompt and revocable through the device settings.
Legal obligation: where law requires us to retain or disclose limited information to comply with law, regulation, accounting, tax, audit, safeguarding or court requirements.

Where a school or teacher uploads, enters or approves the synchronisation of staff and student data into the Central Hub and uses the Service for school purposes, the school is responsible for determining the educational purposes for which that data is used. Mr W's Lab Ltd provides the software and related processing services for those school-managed uses across its relevant products, including Maths White Board, Maths Copilot, LEAPS and Exam Precision where enabled. Mr W's Lab Ltd remains responsible for its own operational processing, such as security, authentication, support, diagnostics, account administration and legal compliance.

Where we rely on consent for an optional feature, you can withdraw that consent at any time by turning the relevant device permission off, by ending use of the optional feature, or by contacting us. Withdrawing consent does not affect processing carried out before the withdrawal or processing under another lawful basis.

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Data Processing Agreement Signing Records

Where a school signs a Data Processing Agreement digitally, we collect and retain signing records such as the school name, school contact email address, signatory name, signatory position, signing date and time, agreement version, token reference, IP address, browser or user-agent information, and signed HTML or PDF copies. We use this information to evidence the agreement, administer the relationship with the school, respond to audit or legal queries, and maintain records of processing instructions. These signing records are kept for the duration of the school's relationship with us and for a reasonable period afterwards in line with our legal, accounting, audit and dispute-resolution obligations, and are separate from the deletion of School Data described in the Data Processing Agreement.

Schools can request a Data Processing Agreement signing link by using the DPA request form.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies that may be employed on Our Service are beacons, tags, and scripts to collect and track information to improve and analyze Our Service. The technologies We use may include:

Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.
Local file storage. Certain features of our Service may use local stored objects to collect and store information about Your activity on our Service. The primary use of using local file storage is to store Your activity as a picture file. Full control over local file storage is under Your control via the "Stored White Boards" feature.
Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser. Our Service uses cookies to distinguish you from other users of our Site. This helps us to provide you with a good experience when you browse our Service and also allows us to improve Our Service. Please be aware that we make every effort to respect your privacy and only use them for essential features on Our Service. By using the Service, you agree to their use. If this is a concern, then we would recommend that you change your cookie settings via your browser. Your browser help function will tell you how to do this. Learn more about cookies here: What Are Cookies?.

We use both Session and Persistent Cookies for the purposes set out below:

Necessary / Essential Cookies

Type: Session Cookies

Administered by: Us

Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.
Cookies Policy / Notice Acceptance Cookies

Type: Persistent Cookies

Administered by: Us

Purpose: These Cookies identify if users have accepted the use of cookies on the Website.
Functionality Cookies

Type: Persistent Cookies

Administered by: Us

Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

To provide and maintain our Service, including to monitor the usage of our Service.
For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, to evaluate and improve our Service, products, marketing and your experience.

We may share Your personal information in the following situations:

With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You.
With authorised employees and contractors of Mr W's Lab Ltd: subscriber account data may be accessed where needed for support, login administration, password reminders, subscription expiry or renewal handling, account updates, security checks and related customer support.
With authorised school users: school-managed Central Hub data, educational records and pastoral records may be viewed by authorised school staff within the relevant school context. In live classroom or collaboration features, information may also be visible to participants in that school-managed session where the teacher chooses to share it as part of teaching activity.
With Your consent: We may disclose Your personal information for any other purpose with Your consent.

Student performance, lesson-management, wellbeing and pastoral data is only accessible within the relevant authorised school context and is never shared by us with third parties for commercial or non-educational purposes.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. The Company will aim to remove session access within a reasonable time frame (usually within a few hours) and session activity data provided by users within 96 hours (unless either the marking feature or homework feature has been used which would extend the period to 10 days to allow for staff to moderate the submitted work).

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods. Please refer to Google Analytics policies for data retention information.

Subscriber account data connected with paid access, including usernames, email addresses, subscription type, expiry data, reminder history, support-related account administration records and subscriber resource-usage records, is retained for no longer than necessary to manage the subscription, provide support, maintain service security, handle renewal or expiry activity, and meet legal, accounting or audit requirements.

Central Hub records and school-managed educational records, including timetable, lesson, seating, analytics, behaviour, book check, RAG and similar records, are retained for no longer than necessary for school purposes, account administration, moderation, safeguarding context, troubleshooting or audit. Unless a different school-directed or legal retention period applies, such data is typically retained while the relevant school account remains active and for up to 13 months after the relevant educational use or until the school deletes it.

For fields received from the school's MIS through the Wonde integration (such as identity, contact, class, timetable, characteristic, photograph, free-text and account fields), the Central Hub holds a static snapshot reflecting the most recent synchronisation; previous values are overwritten when the school next syncs. Longer-lived records derived from the Service (such as assessment, classroom-management, behaviour and LEAPS records) are retained as described above and in the LEAPS retention paragraph.

LEAPS data is retained until 13 months after the student's time at the school or until the school requests or carries out a deletion. Schools may delete individual student LEAPS records at any time through the admin interface.

Disclosure of Your Personal Data

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

Comply with a legal obligation
Protect and defend the rights or property of the Company
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of Users of the Service or the public
Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security. We limit access to all information to authorized employees and contractors who need to know the information in order to operate, develop or improve the Service. We will not sell or rent any of your personal information for our own commercial purposes and we will not send marketing or advertising materials. Within "Class Share" or "Class Pads", the host/teacher is given a password in order to protect the session/active virtual classroom. It is the responsibility of the host/teacher to ensure this password is kept safe and only released to responsible colleagues who require that degree of access.

We use encryption in transit and apply encryption at rest to certain stored fields, including a number of student identity fields and LEAPS summary fields. Not every field uses identical field-level encryption. Access to Central Hub data and school-managed educational data is restricted to verified and authorised users within the relevant school context using secure authentication methods.

Data Protection Registration

Mr W's Lab Ltd is registered with the Information Commissioner's Office (ICO). Our ICO registration number is ZB182733.

Your Data Protection Rights

Subject to UK GDPR conditions and exemptions, you have the following rights in relation to personal data we process about you:

The right to be informed about how your data is used.
The right of access to a copy of your data.
The right to rectification of inaccurate or incomplete data.
The right to erasure (the "right to be forgotten") in certain circumstances.
The right to restrict processing in certain circumstances.
The right to object to processing carried out under legitimate interests or for direct marketing.
The right to data portability where processing is based on consent or contract and is carried out by automated means.
The right to withdraw consent where processing is based on consent.
Rights relating to automated decision-making and profiling, where applicable.
The right to lodge a complaint with the Information Commissioner's Office (ICO).

For school-managed records (such as Central Hub, assessment, lesson, behaviour, pastoral and LEAPS data), please contact the relevant school in the first instance, as the school is the Controller. We will support the school to respond to any request. For data we control directly (such as your subscriber account, support correspondence and direct customer relationship), please contact us using the details in the "Contact Us" section.

You can also contact the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

Sub-processors, Service Providers and the Wonde Integration

School-authorised integration provider (independent processor, not our sub-processor):

Wonde Limited – the school-authorised MIS integration provider that transfers selected MIS data to us. Wonde is appointed directly by the school under the school's own contract with Wonde and acts as an independent processor of school data, not as our sub-processor.

Sub-processors used by Mr W's Lab Ltd:

Hosting and infrastructure providers – for storage, processing and delivery of the Service within the UK or EEA.
Email and notification providers – for transactional, account, support, expiry and signing-related messages.
Analytics providers – such as Google Analytics, used for aggregated website usage analysis.
Support tooling – used by authorised employees and contractors of Mr W's Lab Ltd for support and diagnostics.
Payment, accounting and invoicing providers – where used for paid subscriptions, renewals and accounting records.

An up-to-date list of sub-processors is available on request. We have written contracts with our sub-processors that include data protection obligations consistent with UK GDPR, and we remain responsible for their handling of personal data on our behalf. The static snapshot of MIS data we hold is stored within the UK or EEA.

Access from outside the UK or EEA. Where a school or its authorised users access the Service from a country outside the UK or EEA, the data we hold continues to be hosted and processed by us within the UK or EEA. Such remote access by the school's own users is not a transfer of personal data by us to a third country. We will not transfer personal data outside the UK or EEA except where the transfer is to a country covered by an adequacy regulation or is protected by appropriate safeguards under Data Protection Legislation. Where the school is itself established outside the UK or EEA, the school remains responsible, as Controller, for ensuring that its instruction to send data to us, and any onward export of that data, is lawful under the data protection law that applies to the school.

Changes of Ownership and Linked Sites

If Mr W's Lab Ltd is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via a prominent notice on the support page of any change in ownership or uses of this information, as well as any choices you may have regarding this information. Our Service may, from time to time, contain links to and from the websites of our partner networks and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. We encourage you to check these policies before you submit any personal data to these websites.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via an update of the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

By visiting this page on our website: Contact