Privacy Policy
Last updated: 23 May 2026
1. Who we are
Ofsted Insights is a trading name of M Walker, a sole trader based in England and Wales. We operate the website at ofstedinsights.com.
We are registered with the Information Commissioner's Office (ICO) under registration number ZC145329.
For any privacy-related queries, contact us at: info@ofstedinsights.com
2. What data we collect and why
| Data | Why we collect it | Legal basis |
|---|---|---|
| Name, email address, username, institution | To create and manage your account | Contract (Article 6(1)(b) UK GDPR) |
| Password (stored as a one-way hash) | To authenticate you securely | Contract (Article 6(1)(b) UK GDPR) |
| Activity logs (pages visited, actions taken, timestamps, IP address) | To detect abuse, diagnose errors, and monitor fair usage | Legitimate interests (Article 6(1)(f) UK GDPR) |
| Billing information (name, email, payment method) | To process subscription payments via Stripe | Contract (Article 6(1)(b) UK GDPR) |
| Email address | To send product updates and service announcements | Legitimate interests (Article 6(1)(f) UK GDPR) |
We do not collect any special category data (such as health, race, or political views).
3. School data we display
Ofsted Insights displays publicly available information about schools — including Ofsted inspection reports, school performance data, and Parent View survey results. This information is sourced from public government datasets and Ofsted's published reports. We do not collect or store personal data about pupils or school staff.
4. Third parties we share data with
We use the following third-party services to operate the platform. Unless noted otherwise, each acts as a data processor on our behalf:
- Amazon Web Services (AWS Lightsail, eu-west-2) — hosts the application and database. AWS is certified under the UK International Data Transfer Addendum.
- Anthropic (Claude API) — processes anonymised inspection report text to generate AI summaries. No personal account data is sent to Anthropic. Anthropic's data processing terms apply.
- Stripe — processes subscription payments. Stripe is PCI-DSS compliant and certified under the UK IDTA. We never store your card details.
- Meta (Facebook / Instagram) — we upload email addresses to Meta's Custom Audience tool to show relevant advertising to existing users and to find similar audiences. Emails are hashed before matching. For this purpose, Meta acts as a joint controller alongside us, as they may use matched data in accordance with their own policies. This processing is based on our legitimate interests in marketing our service. You can opt out at any time by contacting info@ofstedinsights.com.
We do not sell your personal data to any third party.
5. How long we keep your data
- Account data — retained for as long as your account is active. Deleted within 30 days of account deletion.
- Activity logs — automatically deleted after 90 days.
- Billing records — retained for 7 years as required by HMRC.
6. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (subject to legal retention obligations)
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests
To exercise any of these rights, email info@ofstedinsights.com. We will respond within one month.
7. Cookies
We use a single session cookie to keep you logged in. This cookie is strictly necessary for the service to function and does not track you across other websites. We do not use advertising or analytics cookies.
8. Security
We use HTTPS throughout, store passwords as bcrypt hashes, and apply rate limiting and security headers to protect the service. Access to production data is restricted to the service operator.
9. Changes to this policy
We may update this policy from time to time. Material changes will be notified by email to registered users. The current version is always available at ofstedinsights.com/privacy.
10. Complaints
If you are unhappy with how we handle your data, please contact us first at info@ofstedinsights.com. You also have the right to lodge a complaint with the ICO at ico.org.uk/make-a-complaint.