1. Data controller
SchoolBook is the controller of personal data processed through the SchoolBook website, enquiries, orders and digital purchases. Contact: the contact details published on the SchoolBook website.
2. Data we process
We may process names, phone numbers, email addresses, school and class details, enquiry parameters, order contents, payment status and technical browser data. SchoolBook does not receive card details; they are entered with the payment provider.
Student photos, names and album materials are processed only as needed to fulfil the agreed order. Portfolio publication requires a separate lawful basis.
3. Purposes, grounds and rights
Data is used to respond to enquiries, prepare an offer, enter into and perform a contract, process payment, provide digital access, support customers, keep required records and protect the service. Consent is requested separately where required and recorded in the form.
You may request information, correction, restriction or deletion where provided by applicable law. Requests: the contact details published on the SchoolBook website.
4. Sharing and retention
Access is limited to staff and processors that need it, including payment providers, hosting, email services and contractors. Data is retained only as long as required for the stated purposes, contract performance, dispute resolution and mandatory legal retention.