Privacy Policy

Rodocodo.com

Effective Date: Feb 24, 2026
Version: 1.4

This Privacy Policy explains how Rodocodo Limited (“Rodocodo”, “we”, “us”, “our”) processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable UK privacy laws.

This Policy forms part of the Rodocodo Terms & Conditions.

1. Who We Are

Rodocodo Limited is incorporated in England and Wales with its registered office at:

16 Commerce Square
Nottingham
NG1 1HS
United Kingdom

General contact: [email protected]
Privacy contact: [email protected]
Safeguarding contact: [email protected]

2. Our Role

Parent (Consumer) Accounts

Rodocodo acts as Data Controller for personal data provided directly by parents or guardians.

School & Business Accounts

Rodocodo acts as Data Processor on behalf of the School or Business User, which acts as Data Controller. Processing is governed by the Data Processing Addendum (DPA).

3. Personal Data We Collect

We collect personal data in the following contexts:

A. Website Visitors

When you visit our website, contact us, or sign up for updates, we may collect:

Name
Email address
Organisation or job title (if provided)
Information submitted through contact forms
Newsletter subscription details
Website usage and analytics data
IP address and browser/device information

B. Parent (Consumer) Accounts

Name
Email address
Payment information (processed securely via third-party payment provider)
Account usage data

C. School Accounts

Teacher or authorised personnel name and contact details
Student first and last name (real name or pseudonym)
Optional gender information
Student progress and usage data

We do not permit public user profiles, public messaging, or open communication features between children.

4. Lawful Basis for Processing

For Parent Accounts and Website Visitors, processing is based on:

Performance of a contract;
Legitimate interests in operating and improving the Service;
Consent (for marketing communications where required).

For School Accounts, processing is carried out on documented instructions from the School or Business User under contract.

5. How We Use Personal Data

We use personal data to:

Provide and operate the platform;
Manage subscriptions and billing;
Provide customer support;
Send service-related communications;
Maintain platform security and safeguarding controls;
Improve functionality and performance;
Send newsletters or marketing communications (where permitted);
Comply with legal obligations.

We do not sell personal data.

6. Marketing Communications

If you subscribe to our newsletter or opt in to receive updates, we may send you information about:

Product updates
Educational resources
Events or promotions

Marketing emails may include limited tracking (such as email opens and link clicks) to help us measure engagement and improve our communications.

You may unsubscribe at any time by:

Clicking the unsubscribe link in any marketing email; or
Contacting us at [email protected].

Transactional or account-critical communications (e.g., password resets or billing notices) may still be sent even if you opt out of marketing.

7. Cookies & Analytics

We use cookies and similar technologies to:

Operate and secure the website;
Understand how visitors use our site;
Improve performance and user experience.

We use analytics providers (such as Google Analytics) to collect anonymised or aggregated usage data.

Where required by law, non-essential cookies (including analytics cookies) are only placed after you provide consent via our cookie banner. You may withdraw or adjust your consent at any time using the “Manage Cookies” link in the website footer.

For detailed information, please see our Cookies Policy.

8. Data Sharing

We may share personal data with trusted third-party service providers (subprocessors), including:

Cloud hosting providers;
Payment processors;
Email delivery services;
Analytics providers;
Customer support tools.

All third parties are subject to written agreements requiring appropriate confidentiality and security measures.

For School & Business Users, subprocessors are governed by the Data Processing Addendum.

9. International Transfers

Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, including:

UK adequacy regulations; or
The UK International Data Transfer Agreement (IDTA) or other approved safeguards.

10. Data Retention

We retain personal data only for as long as necessary to:

Provide the Service;
Comply with legal obligations;
Resolve disputes;
Enforce agreements.

Child account data is deleted promptly upon account termination unless retention is required by law.

Backup systems are subject to secure retention and deletion policies.

11. Individual Rights

Under UK GDPR, individuals may have the right to:

Access their personal data;
Request rectification;
Request erasure;
Restrict processing;
Object to processing;
Request data portability;
Withdraw consent (where processing is based on consent).

Requests may be submitted to: [email protected].

For School Accounts, data subject requests should normally be directed to the School as Data Controller.

12. Personal Data Breaches

We maintain incident detection and response procedures. Where required by law, we will notify affected Schools or individuals without undue delay.

13. Safeguarding & Child Protection

Rodocodo is committed to protecting children’s privacy and safety.

We implement safeguards including:

No public messaging or public profiles;
Pseudonym support for child accounts;
Restricted internal access to child data;
Role-based access controls;
Monitoring for safeguarding concerns.

Parents and Schools remain responsible for supervising children’s use of the platform.

Safeguarding concerns should be reported to: [email protected].

14. Complaints

If you believe your data protection rights have been infringed, you may lodge a complaint with the UK Information Commissioner’s Office (ICO).

We encourage you to contact us first so we can address your concerns.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulation, or our practices.

When we make material changes, we will:

Update the Effective Date and version number;
Provide reasonable notice via email or platform notification where appropriate.

The current version will always be available on our website.