Privacy Policy

Last updated: March 2025

1. Who We Are

Hyett Education Ltd (Company Number: 11079223) is a UK-based STEM education company that delivers hands-on workshops to schools, corporate partners, and defence organisations. Our registered address is Unit 11, Four Ashes Enterprise Centre, Wolverhampton, South Staffs, WV10 7BY. We are registered with the Information Commissioner’s Office (ICO) under reference ZC099850. Contact details are available on our contact page.

For any questions about this privacy policy or how we handle your data, please contact our Data Controller at hyetteducation.com/contact.

2. What Data We Collect

We may collect and process the following personal data:

• Contact form submissions: name, email address, phone number, school name, and message content when you enquire about our workshops.
• Booking information: school name, contact person details, year groups, student numbers, and any special requirements when you book a workshop.
• Invoice and payment data: school or organisation billing details required to process payments for workshop bookings.
• Website usage data: anonymised analytics data collected through Google Analytics, including pages visited, time on site, and referring sources.

3. How We Use Your Data

We use your personal data for the following purposes:

• Responding to enquiries submitted through our contact form or by email.
• Fulfilling workshop bookings and delivering our services to your school.
• Sending invoices and processing payments for completed workshops.
• Communicating with you about upcoming workshops, availability, and new services where you have given consent or where we have a legitimate interest.
• Improving our website and services through anonymised analytics data.

Our legal bases for processing are: contract performance (fulfilling bookings), legitimate interest (responding to enquiries, improving services), and consent (marketing communications and non-essential cookies).

4. Children’s Data

Hyett Education takes the protection of children’s data extremely seriously. We do not collect personal data directly from children.

• Photography: Where photographs are taken during workshops for marketing or impact reporting purposes, we obtain written photo consent from the school in advance. Schools are responsible for obtaining parental consent for photography in line with their own policies.
• School data agreements: Where workshops involve the use of student data (for example, pre- and post-session impact surveys), we enter into a data sharing agreement with the school. All student data is anonymised and aggregated for reporting purposes.
• Safeguarding: All Hyett Education staff hold enhanced DBS checks. Our safeguarding policy is available on request.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We may share limited data with the following parties where necessary:

• RAF and Defence Nuclear Enterprise (DNE): For workshops funded through our RAF STEM or MoD DNE partnerships, we share school name, date, and student numbers with the relevant funding body for verification and reporting purposes. No individual student data is shared.
• CRM and lead management: We use HubSpot CRM and Google Sheets to store and manage enquiry data submitted through our contact form (name, email, school, postcode, and enquiry details). This data is processed under our legitimate interest in managing business relationships and is subject to data processing agreements with these providers.
• Service providers: We use third-party services for email hosting (Resend), invoicing, and website analytics. These providers process data on our behalf under appropriate data processing agreements.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy. Contact form submissions are retained for up to 2 years. Booking and invoicing records are retained for 6 years in line with HMRC requirements. You may request earlier deletion at any time.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to erasure: You can request that we delete your personal data where there is no compelling reason for its continued processing.
• Right to restrict processing: You can ask us to limit how we use your data.
• Right to data portability: You can request your data in a structured, commonly used format.
• Right to object: You can object to processing based on legitimate interest or for direct marketing purposes.
• Right to withdraw consent: Where we rely on your consent to process data (such as non-essential cookies or marketing), you can withdraw that consent at any time.

To exercise any of these rights, please contact us at hyetteducation.com/contact. We will respond to your request within one calendar month.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR. Non-essential cookies are only set after you give consent through our cookie banner. You can change your preferences at any time by clearing your browser cookies and revisiting the site.

We use the following cookies and tracking technologies:

• Google Analytics 4 (GA4): We use GA4 to understand how visitors use our website. GA4 sets cookies including _ga (expires after 2 years) and _ga_* (expires after 2 years) to distinguish unique users and sessions. Data collected includes pages visited, session duration, traffic sources, and general location (country/city level). IP addresses are anonymised. Legal basis: consent.
• Microsoft Clarity: We use Microsoft Clarity to record anonymised user sessions, including mouse movements, clicks, and scrolling behaviour, and to generate heatmaps of page interaction. Clarity sets cookies including _clid (expires after 1 year), _clsk (expires after 1 day), and _clck (expires after 1 year). No personally identifiable information is captured. Session recordings help us identify usability issues and improve the website experience. Legal basis: consent.
• Google Tag Manager: We use Google Tag Manager to manage the loading of our analytics scripts. GTM itself does not set cookies or collect personal data, but it facilitates the loading of the services listed above.
• Cookie consent: We store your cookie preference locally in your browser (he-cookie-consent) to remember whether you have accepted or declined non-essential cookies. This is a strictly necessary cookie and does not require consent.

You can also control cookies through your browser settings. Disabling cookies will not affect the core functionality of our website. For more information about cookies, visit allaboutcookies.org.

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

10. Contact

If you have any questions about this privacy policy or wish to exercise your data rights, please contact us:

• Website: hyetteducation.com/contact

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.