Children’s Privacy Notice
Last Update: 21st August 2025
Last updated: 22nd August 2025
Sophos Education Ltd (Studia) (“we”, “our”, “us”) is committed to protecting the privacy of children who use our website and online platform. This Privacy Notice explains how we collect, use, and safeguard children’s personal data, in compliance with applicable data protection laws.
This notice applies where personal data relates to a child user of our website and platform. If you are under 13, a parent or guardian must review and approve the use of our website and platform before you are permitted to access them.
Please note that our website and platform may contain links to third-party sites. We are not responsible for the privacy practices of such external sites, and you should review their privacy notices separately.
Data Controller and Contact Information
Sophos Education Ltd (Studia) is the controller of the personal data described in this notice.
If you have questions about this notice or the way in which your child’s data is handled, you may contact us at: team@studia.io
Information We Collect
We may collect and process the following categories of personal data when your child uses our website and platform:
- Identity information: name, date of birth, email address, postcode, username, and password
- Educational information: coursework, assignments, areas of study, and subject preferences
- Parental/guardian details: where provided for account management and payment purposes (consent must be obtained before providing these details)
- Payment and billing details: payment card information, billing name, and billing address (typically those of the parent/guardian who pays for access)
- Technical and usage information: device type, network information, IP address, pages visited, and usage logs. Much of this is anonymised for reporting and service improvement
- Location information: general location based on IP address or technical data
- Special category data: where disclosed, health or educational needs relevant to learning support
Use of Personal Data
We process children’s personal data for the following purposes:
- To deliver our educational services and allow access to the platform
- To provide personalised learning experiences, including through AI-based tools
- To manage user accounts and process payments (via the parent or guardian)
- To ensure the safety and security of our website and platform
- To analyse usage data for the purpose of improving services and resources
- To conduct educational research (data is anonymised where appropriate)
- To respond to enquiries and provide support
- To comply with legal and regulatory obligations
Personalisation Using AI
Our platform may use artificial intelligence (AI) tools to adapt learning materials to a student’s profile, based on usage, responses, and performance. This allows us to create tailored study programmes and a personalised learning experience using our bot.
Service Improvement and Research
We may anonymise children’s data and use it to assess and improve our services, including enhancing AI tools and supporting educational research.
Legal Bases for Processing
We rely on the following lawful bases when processing children’s personal data:
- Consent: where a parent or guardian has provided consent
- Contract: to manage the account and provide services under the agreement with the parent/guardian
- Legitimate interests: where processing is necessary for business purposes, balanced against the rights and freedoms of the child (e.g. service improvement, fraud prevention, research)
- Legal obligation: where we must process data to comply with the law
Sharing of Personal Data
We may share personal data with:
- Service providers who assist in the operation of our website, platform, and services
- Organisations conducting surveys or research relating to educational services
- Law enforcement or other regulatory bodies, where required by law
- Potential investors, buyers, or their advisers, in the event of a proposed sale or restructuring of our business
Data Storage and Retention
We implement appropriate security measures to keep children’s personal data safe.
We will retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. For more information about specific retention periods, you may contact us at team@studia.io
Where data is transferred outside the UK, appropriate safeguards (such as adequacy decisions or standard contractual clauses) are applied to protect the information.
Children’s Data Rights
Children, and their parents or guardians, have the following rights regarding personal data:
- The right to access and receive a copy of personal data
- The right to request correction or deletion of personal data
- The right to restrict or object to processing (including the use of AI tools for personalisation)
- The right to request data portability (transfer in a structured format)
- The right to withdraw consent at any time, where processing is based on consent
- The right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk
If you wish to exercise any of these rights, please contact us using the details provided above. Any limitations on these rights will be explained if relevant.
Updates to this Notice
We may update this Children’s Privacy Notice from time to time. Updates will be published on our website, and significant changes will be communicated where appropriate.