GDPR
How we apply UK GDPR principles to parent-managed accounts and child learning information.
Last updated: 2 September 2026
Our approach to GDPR
yearsixlearning is built for UK families using Year 6 SATs and 11+ preparation tools. We aim to handle family and child learning information fairly, transparently, and securely in line with the UK General Data Protection Regulation (UK GDPR). This page explains how those principles apply to the service.
Parent-managed child accounts
A parent or guardian creates and manages the family account. Child profiles are set up by the parent or guardian and use a screen name, school year, and individual secret word. This supports a separate learning experience for each child without asking them for contact details, a school name, or their full name.
Why we process information
We process information to provide the service requested by families: create accounts, authenticate users, save answers and progress, personalise practice, create study plans, and show parent-level learning summaries. We may also process limited information to protect accounts, prevent misuse, comply with legal obligations, and improve the reliability of yearsixlearning.
The information involved
This may include a parent or guardian's name and email address, account settings, child screen names and year groups, learning activity, answers, progress, achievements, and avatar selections. We keep data collection proportionate to a family learning service and do not knowingly collect special category information for normal use of yearsixlearning.
Service providers and transfers
yearsixlearning uses trusted providers for authentication, data storage, and hosting. They act only on instructions needed to operate and secure the service. Where information is processed outside the UK, appropriate safeguards must be in place, such as approved contractual protections or an adequacy decision.
Your GDPR rights
Parents and guardians may have rights to request access to personal information, ask for inaccurate information to be corrected, request deletion, object to or restrict certain processing, and receive a portable copy where applicable. Profile and Settings lets parents update details, preferences, and child profiles, and delete a family account.
Retention and security
We retain account and learning information while a family account is active so children can continue their preparation and parents can review progress. When an account is deleted, associated information is removed unless a limited period of retention is required for security, fraud prevention, or legal reasons. We use reasonable technical and organisational measures to protect information.
Questions or concerns
A parent or guardian should use Profile and Settings to manage their family's information. For a privacy concern or a GDPR rights request, contact yearsixlearning through the service's published support channel. You may also have the right to complain to the UK Information Commissioner's Office (ICO).