1. Parties

This Data Processing Agreement is between:

School / Organisation: [insert school name]

and

Maths Unlocked: [insert legal name / trading name]

2. Purpose

This agreement covers personal data processed by Maths Unlocked on behalf of the school for the purpose of providing GCSE maths revision, task setting, progress tracking and reporting.

3. Roles

For school-managed pupil accounts, the school is usually the Data Controller and Maths Unlocked is usually the Data Processor.

The school decides why pupil data is used. Maths Unlocked processes the data to provide the agreed service.

4. Categories of data subjects

This may include:

• pupils
• teachers
• school staff
• tutors or support staff, where relevant

5. Types of personal data

This may include:

• pupil name
• pupil email or login ID
• year group
• class/group
• school name
• teacher name
• assigned work
• quiz results
• progress data
• topic performance
• account activity
• technical logs

6. Purpose of processing

Maths Unlocked processes school data to:

• create and manage pupil accounts
• allow teachers to assign tasks
• track pupil progress
• provide maths practice and feedback
• generate reports
• support intervention and revision planning
• maintain platform security
• provide technical support

7. Processor obligations

Maths Unlocked will:

• process personal data only on the school’s documented instructions
• keep personal data confidential
• use appropriate security measures
• ensure only authorised people access the data
• help the school respond to data rights requests where appropriate
• help the school meet security and breach obligations where appropriate
• delete or return personal data at the end of the agreement, subject to legal requirements
• keep appropriate records of processing
• inform the school of relevant subprocessors where required

8. School obligations

The school will:

• ensure it has a lawful basis for providing pupil data to Maths Unlocked
• provide accurate information
• manage staff access appropriately
• tell Maths Unlocked when accounts should be removed
• handle parent/pupil privacy communications where required
• notify Maths Unlocked of any relevant restrictions or concerns

9. Subprocessors

Maths Unlocked may use trusted subprocessors to provide the service, such as:

• hosting providers
• database providers
• email providers
• payment providers, if relevant
• technical support tools
• analytics or error-monitoring tools, if used

A current list of subprocessors should be made available to schools.

10. Security measures

Maths Unlocked will use appropriate measures such as:

• secure login systems
• access controls
• encrypted connections
• regular backups where appropriate
• limited access to personal data
• monitoring for technical issues
• secure hosting arrangements

11. Data retention and deletion

When a school stops using Maths Unlocked, the school may request deletion or return of school-provided data.

Maths Unlocked will delete or return personal data within a reasonable period, unless it must keep certain information for legal, accounting or security reasons.

12. Data breaches

If Maths Unlocked becomes aware of a personal data breach affecting school data, it will notify the school without undue delay and provide reasonable information to help the school meet its legal obligations.

13. International transfers

If any personal data is processed outside the UK, Maths Unlocked will ensure appropriate safeguards are in place where required.

14. Audit and information

Maths Unlocked will provide reasonable information to help the school confirm compliance with this agreement.

15. End of agreement

At the end of the agreement, Maths Unlocked will delete or return school personal data, subject to any legal requirement to retain certain information.