Chatta Privacy Policy
Effective date: January 2026
Data Controller: Chris Williams (Chatta)
Contact: [email protected]
Introduction
This policy explains how we handle teacher and pupil data safely and in line with UK GDPR
Chatta is committed to protecting the privacy and security of everyone who uses our services. This notice explains how personal data is collected, used, stored and protected, in line with UK GDPR and safeguarding requirements.
Data We Collect
- Teacher information: Names and email addresses for communication, training access, and support.
- Usage analytics: How Chatta boards and training materials are accessed, to improve the service.
- Lesson footage (rarely and always by arrangement and school agreement): Classroom video recordings for professional development.
- Student voice recordings (via Chatta boards): Audio recordings created by pupils stay in the school’s account. Chatta does not access, listen to, or share them as part of the service.
How We Use Data
- Professional training: Lesson footage supports teacher development.
- Service improvement: Usage analytics help refine Chatta tools.
- Marketing (with explicit consent): Images or footage are only used if separate, clear permission has been granted.
Legal Basis
- Consent: For recording and use of lesson footage, and for marketing.
- Legitimate interest: To deliver and improve training services.
- Safeguarding: Student voice recordings remain under the school’s control.
Data Storage and Security
- Data is stored securely on encrypted servers via Google Cloud and Amazon Web Services (AWS).
- These providers act as GDPR-compliant data processors.
- Access is restricted to authorised Chatta staff and monitored for compliance.
- Student recordings: Remain in the school’s account; Chatta does not access them as part of the service. Access would only occur in exceptional circumstances with school permission.
- International transfers: Where data is processed outside the UK, safeguards are in place according to UK GDPR.
Retention
- Classroom video: Up to 5 years.
- Chatta boards / pupil recordings: Retained in the school’s account for as long as the school chooses.
- Teacher details: Kept while the training relationship continues, then securely deleted.
Data Subject Rights
Individuals can:
- Access, correct, or delete their personal data
- Restrict or object to processing
- Withdraw consent at any time
Complaints can also be made to the ICO. Requests go to the Data Controller.
Safeguarding
Chatta does not process pupil names or identifying details. Pupil voice recordings remain in the school account and are not accessed or shared.
Contact
Chris Williams – Data Controller
[email protected]
