Skip to content
School Should Be

Privacy Policy

Last updated: 20 July 2026

This policy explains how School Should Be ("we", "us") collects and uses your personal data when you visit https://schoolshouldbe.com or get in touch with us. We are the data controller for that information and handle it in line with the UK GDPR and the Data Protection Act 2018. We collect as little as possible, and the site sets no cookies.

Cookies and browser storage

We do not use cookies. The only browser storage is a small amount of essential session storage that remembers which pop-ups you have already seen (up to one entry per pop-up) so they do not reappear in the same visit. It holds no personal data and is cleared when you close the tab.

Analytics

We use PostHog (EU hosting) in cookieless mode to measure how the site is used, such as page views and clicks, so we can improve it. It sets no cookies and does not track you across other websites. It assigns a random visitor identifier rather than using your name, and requests are served through our own domain. We also use Vercel Web Analytics and Speed Insights for aggregate visitor numbers and page performance.

PostHog also records session replays, a reconstruction of the pages viewed and general interactions, so we can see where the site is confusing and fix it. Everything you type into a form (your name, email and messages) is masked and is never captured. These records are pseudonymised, meaning they carry a random identifier rather than your details and we do not use them to identify you. Our legal basis for analytics is our legitimate interest in improving the site.

Newsletter

If you sign up to the newsletter, we ask for your name and email address, and you tick a box to confirm you agree to receive emails from us. We record that consent (the wording, and when) and an optional note of whether you are a teacher, student, parent or other so the emails stay relevant. The legal basis is your consent. Your details are held in Brevo, which we use to manage the list and send emails. Every email has an unsubscribe link. When you unsubscribe we keep your address on a suppression list so you are not accidentally re-added; ask us and we will delete it entirely.

Contact and blog-pitch forms

When you use a contact form or the "write for the blog" form, the details are sent to us as an email through Brevo and land in our inbox. We do not store submissions on this website, and delete the resulting emails once dealt with (within around 12 months). The legal basis is our legitimate interest in responding to you.

Hosting and security

The site is hosted on Vercel, which, like any web host, processes technical request data such as your IP address to serve pages and keep the service running securely. When you submit a form, your IP address is also used briefly to limit repeated submissions and prevent abuse; it is held only momentarily, is not stored, and is not used to identify you. Our legal basis for this is our legitimate interest in keeping the site secure. Our content is managed in Sanity. None of this builds a marketing profile of you.

Sharing your data

We do not sell your data or share it for advertising. We only pass it to the providers named above (Brevo, Vercel, Sanity and PostHog), who act on our instructions, and to anyone we are legally required to. Where a provider processes data outside the UK, that transfer is covered by appropriate safeguards such as standard contractual clauses.

Your rights under the UK GDPR

You have the right to:

  • be informed about how we use your personal data (this policy);
  • ask for a copy of the personal data we hold about you;
  • have inaccurate or incomplete data corrected;
  • ask us to delete your data (the right to be forgotten);
  • ask us to restrict how we use your data;
  • ask for a portable copy of the data you gave us;
  • object to us using your data for a particular purpose;
  • withdraw consent at any time, for example by unsubscribing from the newsletter.

To exercise any of these, email us at [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy as the site changes. When we do, we will update the date at the top of this page.

Contact us

For anything to do with your data, or this policy, contact us at [email protected]. You can also get in touch through the site.