Privacy Policy

Bosanska Škola ("we", "us", "the School") is a heritage language school serving the Bosnian, Serbian, Croatian, and English-speaking community in the United Kingdom. For the purposes of the UK GDPR and the Data Protection Act 2018, we are the data controller for the personal data described below. You can reach our data team at hello@bosanska-skola.co.uk.

• Parent and adult-learner details: name, email address, and phone number provided when you enquire, book a trial, or subscribe.
• Pupil details: a child's first name, age or year group, and assigned class. Pupils log in with a teacher-issued username and class code, never their own email or password.
• Learning records: homework set and submitted, quiz results, attendance, and teacher feedback.
• Payment information: handled entirely by our payment processor, Stripe. We never see or store your full card number.
• Technical data: privacy-friendly, aggregated analytics (page views and device type) that do not identify individuals.

• To deliver lessons, set and mark homework, and report progress to parents.
• To take payment for subscriptions and respond to enquiries.
• To keep pupils safe and meet our safeguarding duties.
• To improve our curriculum and the learning portal.

Our lawful bases are contract (delivering the education service you sign up for), legitimate interests (running and improving the School), and legal obligation(safeguarding and accounting records). Where we rely on consent — for example, optional marketing emails — you can withdraw it at any time.

We collect the minimum information needed to teach a child. Accounts for pupils are created and managed only by teachers; children do not sign up themselves and we do not ask them for contact details. A parent or guardian must provide consent before a child joins. You can ask us to access, correct, or delete your child's data at any time.

We do not sell your data. We share it only with trusted providers who help us run the School — our hosting and database provider (Supabase), our payment processor (Stripe), and our email provider — each bound by data protection terms. Where data is processed outside the UK, appropriate safeguards (such as the International Data Transfer Agreement) are in place. We keep personal data only as long as needed to provide the service and meet legal obligations, then delete it.

Under UK GDPR you have the right to access, correct, delete, restrict, or object to our use of your data, and to data portability. To exercise any of these, email hello@bosanska-skola.co.uk and we will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We use only essential cookies needed to keep you signed in and to keep the portal secure, plus privacy-friendly analytics that do not track you across other websites. We do not use advertising cookies.