Privacy Policy

Last updated: August 2026.

1. Who we are

EduAPI is operated by a UK-based business providing API access to UK education data. For the purposes of UK data protection law, EduAPI is responsible for the personal data described in this policy.

This policy explains how we handle personal data collected through our website at eduapi.co.uk and through the EduAPI service.

2. Information we collect

• Contact details you provide via our forms (name, company, email, phone and message).
• Account and billing information for customers.
• Technical data such as IP addresses, browser information, device information, usage logs, API request logs and security logs required to operate and protect the service.

3. How we use your information

• To respond to enquiries and demo requests.
• To provide, maintain and improve the EduAPI service.
• To manage billing and account administration.
• To monitor service security, prevent misuse and maintain platform reliability.
• To comply with our legal obligations.

4. Lawful basis

We process personal data on the basis of:

• Contract: to provide the EduAPI service, manage accounts and process subscriptions.
• Legitimate interests: to operate, secure and improve the service and respond to enquiries.
• Legal obligations: where we are required to retain or process information by law.
• Consent: where you have chosen to provide consent for optional communications.

5. Data sharing

We do not sell your personal data. We may share personal data with trusted service providers who help us operate the platform, such as hosting providers, payment processors, email providers and security or monitoring services. These providers only process personal data where necessary to provide their services and are subject to appropriate safeguards.

6. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy or to comply with legal requirements.

7. Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure. However, no internet-based service can guarantee complete security.

8. Your rights

Under UK GDPR you have rights to access, correct, delete and restrict the processing of your personal data. To exercise these rights, contact us at [email protected].

You also have the right to object to certain processing activities and to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your personal data has not been handled appropriately.

9. Cookies

EduAPI may use cookies and similar technologies to operate the website, understand usage and improve the service. Where required by law, we will obtain consent before using non-essential cookies.

10. Contact

For any privacy questions, please contact us at [email protected].