LEGAL

Privacy Policy

Last updated · 3 June 2026

This is a template prepared for the Spark marketing site. Review and adapt it with qualified legal counsel before launch — it is not legal advice.

This policy explains how Spark Education Ltd ("Spark", "we", "us") collects and uses personal data when you visit our marketing website or contact us about our products. Our registered office is 86–90 Paul Street, London, EC2A 4NE.

What this policy covers

This policy covers personal data we process as a controller in connection with this marketing website and our sales enquiries. It does not cover the student, staff and institutional data we process inside the Spark product on a customer's own Microsoft 365 tenant — for that data we act as a processor, and the terms are set out in our Data Processing Addendum.

Data we collect

  • Contact-form submissions: your name, role, institution, work email and the contents of your message.
  • Server logs: IP address, browser type and pages requested, retained for security and diagnostics.
  • Analytics: aggregated, cookieless usage statistics that do not identify you.

Lawful bases

We rely on our legitimate interests in responding to enquiries, operating the site securely and understanding aggregate usage. Where required, we rely on your consent for analytics, which you may withdraw at any time.

How we use your data

We use the information you provide to reply to your enquiry, arrange demos and share relevant product information. We do not sell your data or use it for automated decision-making.

Retention

Sales enquiries are kept for up to 24 months from our last contact, server logs for up to 90 days, and analytics only in aggregate form.

Sharing and sub-processors

We share data only with trusted providers who act on our instructions:

  • Resend — delivery of email relating to your enquiry.
  • Plausible Analytics — privacy-friendly, cookieless usage statistics.
  • Our hosting provider — UK-region (London) application hosting.

UK data residency

Our website infrastructure is hosted in the United Kingdom (London region). Where a provider processes data outside the UK, we put appropriate safeguards in place.

Your rights

Under UK GDPR you have the right to access, rectification, erasure and objection, and to restrict or port your data. You may also complain to the Information Commissioner's Office at ico.org.uk, though we would welcome the chance to resolve any concern first.

International transfers

Where personal data is transferred outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement, with Standard Contractual Clauses where applicable.

Children's data

This marketing website is intended for education professionals. We do not knowingly collect personal data relating to children through this site.

Contact

For privacy questions, email privacy@sparkfe.co.uk. You can reach our Data Protection Officer at dpo@sparkfe.co.uk.