Privacy Policy
Last updated: March 2025
1. Who We Are
Hilly Arch is a secure educational platform developed to help teachers and adult learners share materials, communicate, and collaborate in a safe, GDPR‑aligned environment. Our registered address and contact details are available on request by emailing info@hillyarch.co.uk.
2. What Data We Collect
We collect only the information necessary to provide our services:
- Account information — name and email address used to register
- Contact form submissions — name, email, organisation, and the message you send us
- Usage data — anonymous analytics (page views, session duration) via Cloudflare and Google Analytics. No cookies are used for tracking.
We do not collect payment card data, government IDs, or sensitive personal information.
3. How We Use Your Data
- To create and manage your account on the platform
- To respond to enquiries submitted via our contact form
- To improve the platform based on aggregated, anonymous usage patterns
- To send transactional emails (e.g. account confirmation, password reset) — never marketing without your explicit consent
4. Legal Basis for Processing
We process your personal data under the following lawful bases (UK GDPR Article 6):
- Contract — processing necessary to provide the service you've signed up for
- Legitimate interests — improving platform security and user experience
- Consent — where you've explicitly opted in (e.g. marketing communications)
5. Data Sharing
We do not sell, rent, or trade your personal data. We share data only with trusted third‑party processors required to deliver our service:
- Resend — for transactional email delivery (contact form confirmations)
- Cloudflare — for hosting and anonymous analytics
- Google Analytics — for anonymous analytics
All processors are bound by data processing agreements and operate in compliance with UK/EU data protection law.
6. Data Retention
We retain personal data only as long as necessary. Contact form submissions are kept for up to 12 months. Account data is retained for the duration of your account and deleted within 30 days of a deletion request.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request erasure ("right to be forgotten")
- Object to or restrict processing
- Data portability
- Lodge a complaint with the ICO
To exercise any of these rights, email us at info@hillyarch.co.uk. We will respond within 30 days.
8. Cookies
Hilly Arch does not use advertising or tracking cookies. Cloudflare Analytics uses a privacy‑first, cookieless approach. No third‑party tracking scripts are embedded on our site.
9. Changes to This Policy
We may update this policy from time to time. The date at the top of this page will reflect the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated policy.
10. Contact
Questions about this policy? Reach us at info@hillyarch.co.uk.