Last updated: 30 August 2026
Who we are
MathedUp is operated by Mathedup Ltd, a company registered in England and Wales, company number 17044969, registered office 124-128 City Road, London, England, EC1V 2NX. In this notice “we”, “us” and “our” mean Mathedup Ltd.
We provide maths self-study tools at mathedup.co.uk, and we are the data controller for the personal data described here.
We are registered with the Information Commissioner’s Office as a data controller, registration reference ZC211251. You can check that on the ICO’s public register at ico.org.uk.
You can contact us at mo@mathedup.co.uk.
Who this is for
MathedUp is used by students (those in Year 9 and above can sign up themselves; under-13s are signed up by a parent or guardian), parents/guardians, and teachers.
How is your personal data collected?
We use different methods to collect data from and about you including through:
Your interactions with us. You may give us your personal data when you contact us or use our website. This includes personal data you provide when you:
sign up to use the resources
sign up for a subscription or event;
request information about new features to be sent to you;
Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data We collect this personal data by using cookies and other similar technologies. Please see our cookie section for further details.
Payment sources. If you purchase a subscription, we will receive Contact, Financial and Transaction Data from providers of technical and payment services, including but not limited to Stripe.
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Contact Data Email & password |
create and secure your account, sign you in | Legitimate interest |
| Contact Data First name + last initial |
so a teacher or parent can recognise you; we do not store full surnames | Legitimate Interest |
| Year group | to choose the right content and to know whether a parent needs to register the account to set up and manage their children’s accounts |
Legitimate Interest Consent (parental) |
| Your self-evaluation (RAG) and quiz scores | to show your progress and let a linked teacher or parent see how you are getting on | Legitimate Interest |
| Marketing includes your preferences in receiving marketing from us and your communication preferences |
only if you tick the box to opt in, to send updates, information about new features, events and offers | Consent |
| Transaction Data Includes details of subscriptions or events you have signed up for/purchased from us |
Where we need to perform the contract we are about to enter into or have entered into with you or to o process your subscription or event sign up | Contract and Legitimate Interest |
| Technical Data Includes an internally generated identifier for an institution, operating systems and platform [and other technology on the devices you use to access this website] |
To manage and improve service, enhance security, data analysis, testing, system maintenance, customer relationships and experiences and to measure the effectiveness of our communications. We may use data to help us know how students and teachers are using our website, and how we might improve it and your user experience |
Contract and Legitimate Interest |
We do not collect special-category data (such as health, additional learning needs, or ethnicity). We do not use your data for advertising profiling and we do not sell it.
How we use your personal data
The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:
Performance of a contract with you: Where we need to perform the contract we are about to enter into or have entered into with you.
Legitimate interests: We may use your personal data where we need it to conduct our business and pursue our legitimate interests (enable us to give you the best and most secure user experience). We make sure we consider any potential impact on you and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are outweighed by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Consent: Where you have given us explicit, freely given permission to process your data for specific purposes, such as sending marketing communications or obtaining parental consent for children where required by law. You can withdraw this consent at any time
Children and parental consent
In the UK, the age at which a child can agree to an online service is 13. If a student is under 13, a parent or guardian creates and manages the account and provides consent on the child’s behalf. Students in Year 9 and above can register themselves. We ask for the minimum information needed, and we never show a student’s real name publicly — on leaderboards and shared areas a student is identified only by a an automatically generated gamer tag they choose.
Teachers and classes
A teacher can create a class and share a class code. A student (or their parent) chooses to join by entering that code, which shares the student’s first name, last initial and progress with that class’s teacher(s) — and only with them. Teachers do not see a student’s email address or their data in other classes. A student or parent can leave a class at any time, which stops that sharing.
Who we share it with
We use a small number of service providers who process data on our behalf.
Where data is processed outside the UK/EEA, it is protected by appropriate safeguards such as UK/EU Standard Contractual Clauses.
We do not share your data with anyone else except where required by law.
How we keep your data safe and secure
We have appropriate security measures to stop your personal data being accidentally lost, used or accessed in an unauthorised way, changed, or disclosed.
We have procedures to deal with any suspected personal data breach and will tell you and any applicable regulator of a breach where we are legally required to do so.
How long we keep it
We will only keep your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, but we may keep your personal data for a longer time in the event of a complaint or legal dispute.
We keep your data for as long as your account is active. If you ask us to delete it, we will. We also delete accounts that have been inactive for three years.
Your rights
You can ask us to: see a copy of your data, correct it, delete it, export it, restrict it, object, or stop sending you marketing. You can do much of this in your account settings, or by emailing mo@mathedup.co.uk.. We will respond to your request within one calendar month. We do not charge a fee for this service, though we may ask you to verify your identity before releasing any data.
Cookies and storage
Cookies are small data files that your browser places on your device to improve site performance, enable certain functions, and enhance your experience.
We use a small amount of browser storage to keep you signed in and for site analytics to help us improve the learning experience . We do not use advertising or third-party tracking cookies.
Contact details
If you have any questions about this privacy policy or concerns about the use of your personal data or you want to exercise your privacy rights, please contact us at mo@mathedup.co.uk.
Complaints
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (ico.org.uk) if you are unhappy with how we have used your data.
Changes to this notice
We may update this notice as the service grows and to keep up to date with our obligations under data protection law, and we will post the date of the latest version at the top.