Legal
This Privacy Policy explains how Newton 11+ collects, uses and protects personal information when you and your child use our platform. We are committed to keeping your information safe and handling it in line with UK data protection law.
Newton 11+ is an education platform built in the United Kingdom by Highend Software Ltd (referred to in this notice as "our", "us", "Newton 11+" and "we"), a company registered in England and Wales in 2012.
For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Highend Software Ltd is the data controller for personal information collected through this platform.
When a parent or guardian creates an account we collect a name, email address and password. When a child sits a mock exam we collect their first name, year group and the school or grammar test they are preparing for. We do not require a child to provide an email address, postal address or telephone number.
We record answers, marks, time taken and feedback for every paper a child sits on the platform. This is what powers the dashboard, progress reports and personalised recommendations shown to the parent.
When you purchase exam credits we use Stripe to process the transaction. Card details are entered on Stripe-hosted fields and never reach our servers. We retain a record of the order (amount, date, package purchased and a Stripe reference) for accounting and refund purposes.
When you use the platform we automatically collect basic technical information such as IP address, browser type, device type, and pages visited. This is used to keep the service secure and to diagnose problems. See our Cookie Policy for the cookies we set and why.
We use personal information to:
• Provide and operate the platform, including creating accounts, scheduling and marking mock exams, generating reports and showing progress over time.
• Process payments and issue refunds where appropriate.
• Send service emails such as booking confirmations, reminders ahead of a scheduled mock, password resets, and important changes to the service.
• Keep the platform secure by detecting fraud, abuse, and unauthorised access.
• Comply with our legal obligations, including responding to lawful requests from public authorities.
We do not use your information for advertising and we do not sell it to third parties.
Under UK GDPR we rely on the following legal bases for processing personal information:
• Contract. We process your information to provide the service you signed up for and to take payments.
• Legitimate interests. We process information to keep the platform secure, prevent fraud, and improve the service. We balance these interests against your rights.
• Consent. We rely on consent for any optional marketing communications or non-essential cookies. You can withdraw consent at any time.
• Legal obligation. We process information where we are required to retain records for tax, accounting or regulatory reasons.
Newton 11+ is designed for children preparing for the 11+ exam, typically aged 8 to 10. Accounts must be created and managed by a parent or guardian aged 18 or over. By creating a child profile you confirm that you have parental responsibility for that child and consent to us processing their information as described in this policy.
We keep the information we collect about children to the minimum needed to deliver the service. We never use a child's information for marketing and we will never sell or share it with third parties for their own purposes.
We share personal information only with trusted service providers who help us run the platform, and only to the extent they need it to perform that service. These include:
• Stripe handles payment processing.
• Our cloud hosting and database providers store and serve the platform.
• Email delivery providers send transactional emails such as booking confirmations and password resets.
Each of these providers is bound by contract to protect your information and use it only on our instructions. We may also disclose information where required by law, to enforce our terms, or to protect the rights, property or safety of our users.
Some of our service providers are based outside the United Kingdom. Where personal information is transferred outside the UK we rely on safeguards recognised under UK GDPR, such as adequacy regulations or standard contractual clauses, to ensure your information continues to be protected.
We keep personal information only for as long as we need it for the purposes described in this policy:
• Account and exam data. We keep this for as long as you have an active account, plus a short retention period after closure so that the account can be restored if requested by mistake.
• Payment records. We keep these for six years from the end of the relevant financial year, in line with UK accounting requirements.
• Technical logs. We keep these typically up to 90 days, unless retained longer to investigate a security incident.
You may close your account and request deletion at any time. Some information may be retained longer where we have a legal obligation to keep it.
Under UK data protection law you have the right to:
• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Ask us to delete information where there is no good reason for us to continue processing it.
• Object to or restrict our processing in certain circumstances.
• Receive a copy of your information in a portable format.
• Withdraw consent where we are relying on consent to process your information.
To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your information properly.
We take the security of personal information seriously. Passwords are stored as salted hashes, traffic between your browser and our servers is encrypted in transit, and access to production systems is restricted to authorised personnel. No online service can be made completely secure, but we work to protect your information against unauthorised access, loss and misuse.
We use a small number of cookies to operate the platform, keep you signed in and process payments. We do not use advertising cookies. See our Cookie Policy for full details and the specific cookies we set.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Where changes are material we will notify you via the platform dashboard or by email before they take effect.
If you have any questions about this Privacy Policy, or you would like to exercise any of your rights, please contact us at [email protected].