BounceTogether and Privacy
Last Updated: 1st September 2025
Our commitment to data protection
We are committed to protecting the data of our customers and of individuals. We have implemented organisational and technical measures to ensure personal data is processed securely. We are registered with the Information Commissioner's Office (ICO).
How do we protect customer data?
Organisational Measures
- Conduct reviews around legal basis for personal data processing
- Embed 'data protection by design' into business and development practices
- Define and execute schedules for reviewing standardized policies
- Training schedules for staff on cyber security and data protection
- Named, in-house Data Protection Officer
Technical Measures
- SOC2 and ISO:27001 accredited hosting provider (Microsoft Azure)
- Encryption applied to incoming/outgoing connections
- Database encrypted at rest and in transit
- Single-sign-on support
- Access control, auditing and authorisation policies
- Continuous network/security monitoring
- Data stored within UK, never leaving the European Economic Area (EEA)
Controllers, Processors and Personal Data
Personal Data
Personal data refers to any type of data that can be used to directly or indirectly identify an individual — for example, a name, address, IP address, or username.
Data Controller
The school determines the purpose and means of processing personal data, making it the data controller.
Data Processor
Bounce Together Ltd is the data processor of the data made available in our software products purchased by the school.
Subject Access Requests and The Right to be Forgotten
Individuals have the right to obtain a copy of their personal data held by BounceTogether. We provide means for authorised individuals to request this directly.
The Right to be Forgotten allows individuals to request the erasure of their personal data from our systems.
Documentation Index
| Document | Description |
|---|---|
| Privacy Policy | Explains how data collected from customers is used |
| Terms of Use | Terms of platform use and data protection details |
| Data Sharing Agreement | Terms for data sharing with BounceTogether |
| Cookie Policy | Types and use of cookies |