Privacy Policy
Last updated: 30 May 2026
No tracking-cookie walls
Analytics load only after you accept. Essential measurement uses session storage, not cookies.
UK / EU data
Your data is stored on infrastructure in the UK and EU.
We never sell data
We do not sell or rent your personal data to anyone, ever.
This policy explains what SCR Ready ("we", "us"), a CodeFirst product, collects when you use this website and our early-access service, why we collect it, and your rights under UK GDPR.
What we collect
- Early-access details you give us: email address and, optionally, your role and the number of staff or schools you manage.
- Survey responses you choose to provide about how you currently maintain your Single Central Record.
- Usage & advertising data: pages viewed, approximate engagement and the ad or campaign that referred you (UTM parameters, Google click IDs).
- SCR data you enter (once the product is live): staff and check records and the evidence documents you choose to upload. As this can include personal and safeguarding-related data, your school remains the data controller and we act as your processor under a data-processing agreement.
How we use it
- To add you to the early-access list and contact you about your place.
- To understand demand and improve the product and our messaging.
- To measure which advertising is effective.
- To provide the service: maintaining your Single Central Record, flagging missing checks and producing exports on your behalf.
Cookies & analytics
We use PostHog (EU-hosted, privacy-friendly product analytics) and conversion measurement from Google Ads. Under Consent Mode, these stay disabled until you accept cookies via our banner; first-party measurement that uses session storage only (no cookies) continues regardless of your choice and never identifies you to third parties. You can withdraw consent at any time from this page.
Storage & security
Data is stored on UK/EU infrastructure (Cloudflare) with role-based access and an audit log. Access is restricted to SCR Ready personnel who need it. We apply reasonable technical and organisational measures appropriate to staff and safeguarding-related data.
Data sharing
We share data only with the processors that run our service (e.g. Cloudflare for hosting and database, PostHog for analytics, and our email provider for transactional messages). We never sell your data. We do not order DBS or other statutory checks and do not share your records with third parties for that purpose.
Retention
We keep early-access details until you ask us to delete them or the list is no longer needed. SCR records and uploaded evidence are retained for as long as your school's account is active and in line with your data-processing agreement, then deleted on request.
Your rights
Under UK GDPR you can request access to, correction of, or deletion of your personal data, and object to or restrict its processing. To exercise any of these, email hello@scrready.co.uk. You may also complain to the Information Commissioner's Office (ICO).
Children's privacy
SCR Ready is a service for schools and is used by staff, not pupils. It is not intended for use by children, and we do not knowingly collect pupil data through this website.
Changes
We may update this policy as the product develops. Material changes will be reflected by the "last updated" date above.
Contact
Questions or data requests: hello@scrready.co.uk.