Privacy notice

Last updated 3 November 2026. What we hold about you and your school, why, who sees it, and for how long.

Who is responsible for your information

Limbrick Consultancy LLP, registered in England and Wales (OC425170) is responsible for the personal information described here (the "controller", in data protection law), and is registered with the Information Commissioner's Office under reference ZA554432.

To ask about your information, or to use any of your rights below, email hello@digitalconfidence.education.

What we hold, and why

What	Why
About you: your name and email address, and an identifier for your EducationSector account	To sign you in and show you your school. Needed to provide the service you asked for.
Which schools you belong to, your role there (owner, editor or viewer) and, if you give it, your job title	So the right people see the right school. Needed to provide the service.
A record of each sign-in: when, which account, and whether it worked	To keep accounts secure and investigate problems. Our legitimate interest in protecting the service.
Where you first arrived from, if the link you followed said (for example a newsletter or a post)	To know which ways of telling schools about us work. Our legitimate interest. It is stored once, when you first sign in.
About your school: its name, URN, type, size and local authority, from the government's public list of schools	To set the school up and to group anonymous comparisons fairly.
Your school's answers, notes, the names or job titles of people responsible for actions, target dates, benchmark results and draft documents	This is the service: working out where your school stands and what to do next.
Requests you send us from the site, such as asking us to confirm you work at a school	To answer them.
Which offers to upgrade were shown to and opened by your school	To learn which ones are useful. Counted against the school, never against you.
When a governor link was opened, and whether by a member of the school	So the owner can see a link has been used. We record nothing about the person who opened it: no name, address, device or location.
When you ask for a policy draft: the school, you, the time, and your internet address in a scrambled form that cannot be turned back into the address	To limit how many drafts can be asked for, so the service cannot be misused or run up costs. Our legitimate interest.

What we do not hold. We never ask for information about pupils. We do not hold card details: payment is taken by Stripe through the EducationSector account service. We do not use advertising or tracking cookies, and we do not use any analytics service inside the signed-in site.

Artificial intelligence. Policy drafts are written by an artificial intelligence model, Claude, made by Anthropic. When you ask us to write a draft, the answers you gave in that policy builder and the details of your school it needs are sent to Anthropic, which writes the draft and sends it back. Anthropic is based in the United States, so this information leaves the UK. Nothing else your school has entered is sent, and the benchmark, the checks and the standards use no artificial intelligence. Every draft is marked as not reviewed by a person. Please do not type names or other personal details into a policy builder's answers.

Using your school's own AI instead. You can instead copy a policy builder's instructions into an AI tool your school already uses, such as Microsoft Copilot, ChatGPT or Gemini, and paste the draft back. Copying the instructions sends nothing anywhere: we show them to you, and nothing goes to Anthropic, Cloudflare or anyone else. Whatever you paste into your own tool is handled under your school's arrangements with that tool's provider, not ours. A draft you paste back is kept like any other, and is marked as written with your school's own AI and not reviewed by a person.

Who can see it

People at your school you have given access to, and, if your school is part of a trust that uses Digital Confidence for Trusts, the people your trust has given access.
Governors and anyone else you send a governor link to see a read-only summary: stages and our own plain-English sentences, never your notes, names or evidence.
Other schools never see your school. Comparisons show figures for groups of at least ten schools, with no names and no exact figures.
Us, to run the service and answer your requests. If you buy a review, the person reviewing sees what you ask them to review.
Organisations that help us run it: the EducationSector account service (sign-in, licences and payments), Stripe (card payments), Xero (invoices), Anthropic (writing policy drafts, as above), Cloudflare (the check that a person, not a program, is asking us to write a policy draft; it sees your internet address), our email provider (for messages you send us) and our hosting provider (Simply Hosting, in London, UK). Each handles information only to do that job for us.

We do not sell personal information or share it for marketing.

Information that leaves the UK

Digital Confidence itself, and your school's information, are kept in the UK (Simply Hosting, in London, UK). Three of the organisations above are based in the United States, so what they handle for us leaves the UK:

Anthropic, only when you ask us to write a policy draft: that builder's answers and the school details the draft needs.
Stripe, only when you pay by card: the payment, and the name and email address on it.
Cloudflare, only when you ask us to write a policy draft: your internet address, for the check that a person is asking.

Each transfer is protected in the way UK data protection law requires: the UK's data bridge with the United States where the organisation is certified under it, and otherwise contract terms approved for the purpose. We assessed the risk before sending any school's answers for drafting. You can ask us for details at hello@digitalconfidence.education.

How long we keep it

Your account for as long as you use it. If nobody signs in to it for two years, we write to tell you, and delete it three months later unless you sign in.
Your school's information for as long as anyone at the school uses Digital Confidence, so nothing is lost when a plan ends or a person leaves. If nobody at the school has signed in for two years, we write to the owner, and delete it three months later unless someone signs in. A school's owner can ask us to delete it sooner.
Sign-in records, and records of requests for policy drafts, for 12 months.
Invoices and payment records for six years, because the law requires it.
Figures already counted in an anonymous comparison stay in that comparison, because no school can be identified from them.

Your rights

You can ask us for a copy of the personal information we hold about you, to correct it, to delete it, to restrict how we use it, or to object to how we use it, and you can ask for it in a form you can take elsewhere. Email hello@digitalconfidence.education. We reply within one month.

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Cookies

A cookie is a small file your browser keeps for a website. We use only the cookies the site needs to work, so we do not ask for consent to them. None is used for advertising or to follow you to other websites.

Cookie	What it does	How long
dc_session	Keeps you signed in	30 days
dc_sso_state, dc_return	Protect the sign-in step, and return you to the page you were on	5 minutes
dc_school	Remembers which school you are working in	180 days
dc_anon_…	Holds answers you give before signing in, so they are not lost when you do	1 day
dc_ft	Remembers where you first arrived from, until you sign in	90 days
dc_up_…, dc_sh_…	Stop the same offer being counted twice when a page is reloaded	30 minutes
dc_newlink	Shows a new governor link once, without putting it in the page address	2 minutes