Privacy Policy
Last updated: September 2026. This policy explains what personal data EYclue collects, why, and the choices you have.
1. Who is responsible for your data
Sage Wonder Press (trading as EYclue) is the data controller for the personal data collected through this website. We are responsible for deciding how and why your data is used.
2. What we collect
- Account information: email address and any password or authentication details you use to sign in.
- Newsletter: email address and, if you provide it, your name, so we can send you updates.
- Toolkit entries: information you type into the curriculum builder, evidence log, funding record and celebration pages, used to generate your downloads and linked to your account where member accounts are offered.
- Usage and technical data: IP address, browser type, device identifiers and site usage information to keep the service secure and understand, in aggregate, how the site is used.
- Support and communication data: messages you send us and any information needed to respond to your enquiries.
3. Children's data
EYclue is designed for adult practitioners. Please do not enter unnecessary personal information about individual children. Use initials or setting-specific reference numbers where possible, and only record information necessary for the purpose of the record. This includes children’s names, dates of birth, photographs, SEND or medical information, safeguarding information, family circumstances, addresses and parental information. Keep detailed child-level and safeguarding records in your setting’s approved secure systems, and store and share any exports under your setting’s policies and data protection law.
4. How we use your data and our legal basis
- To provide the service and generate the documents you create (contract).
- To send the newsletter you asked for (consent — you can unsubscribe at any time).
- To process payments and manage membership (contract and legitimate interests).
- To keep the site secure and understand, in aggregate, how it is used (legitimate interests).
- To comply with legal obligations, such as tax and accounting requirements.
5. Who we share data with
We do not sell your personal data. We only share it with service providers needed to run the site, each under appropriate safeguards:
- Hosting and database providers.
- Our online reseller and Merchant of Record, Paddle.com, for sale of the product, subscription management, payments, tax compliance and invoicing.
- Email and communication service providers.
- Professional advisers (legal, accounting) where required.
- Authorities where required by law.
6. International transfers
Some of our service providers may process data outside the UK and EEA. Where this happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions approved under UK/EU data protection law.
7. Data retention
We keep your personal data only as long as needed for the purposes described above. Account information is kept while your account is active and for up to 6 years afterwards to comply with legal, tax and accounting obligations. Newsletter subscriber emails are kept until you unsubscribe, after which they are deleted or anonymised within 30 days. Payment and order records are held by Paddle (our Merchant of Record and payment processor) under their own retention schedule.
8. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data in certain circumstances.
- Restrict or object to our use of your data.
- Receive your data in a portable format.
- Withdraw consent at any time (for example, unsubscribe from the newsletter).
We aim to respond to requests within one month. To unsubscribe from the newsletter, use the unsubscribe page. For other requests, contact us via the details on our About page. You also have the right to complain to the Information Commissioner's Office (ICO).
9. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and secure hosting.
10. Cookies
The site uses only the essential storage needed to run (for example, keeping you signed in if you have a member account). We do not use advertising or tracking cookies.