How we store, protect and delete information
Our privacy policy explains what we collect and why. This page explains how we handle it day to day: where it is kept, who can see it, how long we keep it and what we do if something goes wrong.
Last updated: 28 September 2026 · Applies to families in the United Kingdom, Singapore, the United Arab Emirates and India.
Our principles
- Collect less. A child's first name and year group are enough to teach them. We do not ask for surnames, schools, dates of birth, addresses or photos.
- Use it only for teaching. Information collected for lessons is used for lessons, never for advertising and never sold.
- Keep it accurate. Plans and records are updated as your child progresses, and you can correct anything.
- Keep it only as long as needed, then delete it (see the table below).
- Follow the strictest rule. Where UK, Singapore, Indian and UAE laws differ, we apply the higher standard to every family.
How long we keep it
| Information | Where it is kept | How long |
|---|---|---|
| Enquiries that do not lead to lessons | Deleted within 6 months of the last message | |
| Your contact details and your child's first name, year group and syllabus | Our secure records | While lessons continue, then 12 months after the last lesson |
| Assessment results, plans, quiz scores, homework and class notes | Our secure records | While lessons continue, then 12 months after the last lesson, so we can pick up again if your child returns |
| Family WhatsApp group | We leave and clear the group within 3 months of the last lesson | |
| Lesson recordings (only if you agreed) | Our secure storage | Deleted within 30 days unless you ask us to keep them longer |
| Invoices and payment records | Our accounts | As long as tax and accounting laws require, typically 5 to 8 years depending on the country |
| Website logs | Netlify | A short period, set by Netlify, for security |
You can ask us to delete information sooner, unless the law requires us to keep it. For families in India, we tell you at least 48 hours before we erase data because it is no longer needed, so you can ask us to keep it.
How we protect it
- Records are kept in password-protected accounts with two-step sign-in, not on shared or personal computers left unlocked.
- Only your child's teacher and the person who runs Peaceful Study can see your family's records.
- WhatsApp messages are end-to-end encrypted. We never forward a child's details or work outside the family group.
- We use trusted providers that encrypt data in transit and at rest.
- This website does not collect or store any personal data, so there is nothing on it to be stolen.
- We review who has access at least once a year, and remove access straight away when someone stops working with us.
Children's data
- A parent or guardian agrees to how we use their child's information before the first lesson. For families in India, this is verifiable consent from a parent for every child under 18.
- We treat all children's information as sensitive, and follow the UK Children's Code, Singapore's PDPC guidelines on children's personal data and the UAE's child digital safety law.
- We do not track, profile or advertise to children, and we do not use their work to train AI systems.
- Teachers communicate with children only in lessons and in the family group that parents are part of.
If something goes wrong
If information is lost, stolen or seen by someone who should not see it, we act straight away to contain it and assess the risk to your family. We then tell you promptly if it could affect you, and report it to regulators as each law requires:
| Country | We notify | Timing |
|---|---|---|
| United Kingdom | Information Commissioner's Office | Within 72 hours of becoming aware, where there is a risk to people |
| Singapore | Personal Data Protection Commission | Within 3 calendar days of assessing that the breach is notifiable |
| India | Data Protection Board of India | Without delay, with a full report within 72 hours |
| United Arab Emirates | UAE Data Office | Immediately on becoming aware |
We keep a record of every incident and what we changed to stop it happening again.
Handling requests
- Send requests on WhatsApp to +91 70786 55261, starting with "Privacy". We accept requests and complaints however they reach us.
- We confirm receipt, check who is asking (especially for a child's information) and reply within one month. In the UK we acknowledge complaints within 30 days, and in India we resolve grievances within 90 days at the latest.
- Requests are free. If we cannot do something, we explain why and tell you who you can complain to.
Our providers
| Provider | What for |
|---|---|
| WhatsApp (Meta) | Enquiries, family groups and updates |
| Video-call service | Online lessons |
| Secure cloud storage | Plans, class notes and learning records |
| Netlify | Hosting this website |
| Google Fonts | Website lettering |
| Accountant and payment provider | Fees and invoices |
Some providers are based outside your country. We use them only where your country's law allows the transfer and with safeguards such as approved contract terms. We review this policy every year and whenever the law changes.