Privacy Policy

School Hub Club is operated by DT Innovation Limited (company number 09764172), trading as School Hub Club. We are the data controller for the information held in your family account. You can reach us at support@schoolhub.club.

About you: name, email address, optional phone number, the family members you invite, your sign-in details and two-factor security settings.

About your children: first name and surname, date of birth if you add it, school, year group and class, teacher, dietary requirements, PE days, meal choices, clubs, collection arrangements and any notes you choose to add.

Family organisation: calendar events, messages you add, payments and amounts you record, documents and files you upload, and childcare account details.

Billing: subscription status and dates. Card details are handled by Stripe and never reach our systems.

Technical: sign-in records, security events, error reports and, if you agree to measurement cookies, anonymised usage statistics.

Public school information: we read publicly available pages on school websites to fill in term dates, contact details, year groups and similar facts. We do not access school portals, log in on your behalf, or read anything private.

Children are not account holders and cannot sign up. A parent or guardian provides their child's details in order to organise school life, and can view, correct, download or delete them at any time from Settings. We keep the information to the minimum needed to run the calendar, meals, clubs and reminders, and we never use it for advertising or sell it to anyone.

• Contract: to provide the service you have signed up for, including your family dashboard and your subscription.
• Legitimate interests: to keep the service secure, prevent misuse, fix faults and improve how it works.
• Consent: for measurement cookies and any optional marketing email. You can withdraw consent at any time.
• Legal obligation: to keep billing records for the period tax law requires.

• Supabase — database, file storage and sign-in.
• Cloudflare — hosting and content delivery for the website.
• Stripe — subscription payments and card handling.
• Resend — sending emails such as contact replies and family invitations.
• Google Analytics — anonymised usage measurement, only if you accept cookies.

We use reputable service providers and put in place data-processing arrangements with them where required. Where data is processed outside the UK, we rely on appropriate transfer safeguards.

• Active accounts: for as long as you use the service.
• Trials that are never completed: deleted 90 days after the trial ends, after an email warning.
• Cancelled accounts: deleted within 30 days of cancellation.
• Deleted accounts: removed immediately, with backups cycling out within 30 days.
• Billing records: kept for 6 years, as UK tax law requires.
• Security and sign-in logs: kept for 12 months.

We use essential cookies and similar browser storage to keep you signed in and remember your cookie choice. These are essential and cannot be turned off. With your agreement we also load Google Analytics to measure how the site is used. We do not use advertising or profiling cookies. You can change your choice by clearing this site's data in your browser.

Every account requires two-factor authentication. Data is separated per family at the database level so no family can see another's records, uploaded files are restricted to the school and families they relate to, and access by our staff is logged. Data is encrypted in transit and at rest.

You have the right to see, correct, download, restrict or delete the information we hold, to object to certain uses, and to withdraw consent. You can download everything and delete your account yourself from Settings, or contact us and we will respond within one month. If you are unhappy with our response, you can complain to the Information Commissioner's Office at ico.org.uk.

If a personal data breach occurs and it is likely to be a risk to people's rights, we will report it to the Information Commissioner's Office within 72 hours of becoming aware of it, and tell affected families directly where the risk is high.

School staff can manage their school's public information through our school portal. See our information for schools for what that involves.

We will post any updated policy here and, for significant changes, tell account holders by email.