Last updated: May 2026

TalkTrack (“the App”) is operated by iG Education Limited, a UK‑registered company committed to protecting the privacy, security, and rights of all users. This GDPR Compliance Statement explains how TalkTrack meets the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This page should be read alongside our Privacy Policy and Terms & Conditions.

1. Our Role Under GDPR

Depending on how TalkTrack is used:

Schools as Data Controllers

When a school uses TalkTrack to process pupil information, the school is the Data Controller. The school determines:

  • What pupil data is collected
  • How long it is kept
  • Who has access
  • The lawful basis for processing

iG Education Limited as Data Processor

We act as a Data Processor on behalf of schools. We process pupil data only according to the school’s instructions and only for the purpose of delivering the TalkTrack service.

Direct Teacher or Parent Use

If a teacher uses TalkTrack independently (not on behalf of a school), iG Education Limited may act as the Data Controller for that account.

2. Lawful Basis for Processing

TalkTrack processes personal data under the following lawful bases:

  • Public Task – for state schools using TalkTrack as part of their educational function
  • Legitimate Interests – for teachers using the app to provide feedback
  • Consent – for optional parent access or where required by the school
  • Contract – for users who create an account to access the service

We do not process data for marketing without explicit consent.

3. Types of Data We Process

TalkTrack processes only the data necessary to deliver the service.

Teacher Data

  • Name
  • Email address
  • School name (optional)
  • Login credentials
  • Voice notes created by the teacher

Pupil Data

  • First name or identifier
  • Class group
  • Voice‑note feedback relating to learning
  • Optional: parent access details

Parent Data (Optional)

  • Name (if provided)
  • Access code or link
  • Device information (for login security)

Technical Data

  • IP address
  • Device type
  • Browser information
  • Usage logs (for security and troubleshooting)

We do not collect unnecessary or intrusive data.

4. How We Use Personal Data

We use data solely to:

  • Provide voice‑note feedback functionality
  • Allow teachers to organise and share learning updates
  • Enable parent access (if chosen by the teacher/school)
  • Improve app performance and reliability
  • Maintain security and prevent misuse

We never use pupil data for advertising, profiling, or commercial resale.

5. Data Storage & Security

TalkTrack uses secure, industry‑standard cloud infrastructure.

Security Measures Include:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest
  • Secure authentication
  • Access controls
  • Regular security audits
  • Data minimisation
  • Logging and monitoring

Only authorised staff may access system data, and only when necessary for support or maintenance.

6. Data Retention

Data is retained only for as long as necessary.

  • Teacher accounts: retained while the account is active
  • Pupil data: retained according to the school’s instructions
  • Voice notes: stored until deleted by the teacher or school
  • Parent access: removed when the teacher disables it

Schools may request deletion at any time.

7. Data Sharing

We do not share personal data with:

  • Advertisers
  • Social media platforms
  • Third‑party marketers

We may share data only with:

  • Trusted service providers (e.g., cloud hosting)
  • Legal authorities if required by law
  • The school, as the Data Controller

All third‑party providers are GDPR‑compliant and bound by strict data‑processing agreements.

8. International Data Transfers

Where data is stored or processed outside the UK, we ensure:

  • Adequacy decisions are in place, or
  • Standard Contractual Clauses (SCCs) are used

We only use providers that meet GDPR requirements.

9. Your GDPR Rights

Users have the following rights:

  • Right to access – request a copy of your data
  • Right to rectification – correct inaccurate data
  • Right to erasure – request deletion
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights related to automated decision‑making (not used by TalkTrack)

Requests can be made via email to: igeducationlimited@gmail.com

We respond within 30 days.

10. Data Breach Procedures

In the event of a data breach:

  • We will notify the affected school immediately
  • We will notify the ICO within 72 hours (if required)
  • We will support the school in communicating with affected individuals

We maintain a full incident‑response plan.

11. Children’s Data

TalkTrack is designed for educational use. Pupils do not create accounts independently.

All pupil data is:

  • Controlled by the school
  • Used only for educational purposes
  • Protected with strict security measures

We do not knowingly collect data directly from children.

12. Cookies & Tracking

TalkTrack uses minimal cookies for:

  • Authentication
  • Security
  • App functionality

We do not use tracking cookies for advertising or profiling.

13. Contact Details

For GDPR enquiries, data access requests, or concerns:

Data Protection Officer (DPO) iG Education Limited Email: igeducationlimited@gmail.com Website: https://igeducationlimited.com