Last updated: April 2026

1. Who We Are

iTCHYROBOT is a UK-based school website platform providing WordPress CMS, compliance tools, design, analytics, and ongoing support to primary schools, secondary schools, and Multi-Academy Trusts across the United Kingdom.

We are the data controller for the personal data we collect and process in connection with our marketing, sales, and client services activities.

Registered address: Oaklea House, 46 Coatham Road, Redcar, England, TS10 1RS

ICO Registration Number: ZA261162

Data Controller: iTCHYROBOT UK Ltd

Contact: support@itchyrobot.co.uk

2. What Personal Data We Collect

We collect personal data in the following contexts:

Marketing and Lead Generation

  • Name and email address when you register for a webinar or download a resource
  • School name and job title when provided via registration or enquiry forms
  • Contact details collected at events, such as headteacher forums or conferences
  • LinkedIn profile interactions where you engage with our content

Website Enquiries

  • Name, email address, school name, and message content submitted via our contact forms

Existing Clients

  • Contact details for named individuals at client schools and Multi-Academy Trusts
  • Communication history and support records relating to your website or services
  • Billing and account information

Website Visitors

  • Anonymised usage data collected via Google Analytics (see Section 6)
  • IP address data logged automatically as part of standard web server operation

3. How We Use Your Data

We use personal data for the following purposes:

  • To provide you with access to webinars, resources, or content you have requested
  • To send you relevant information about our services, including updates, resources, and invitations to events
  • To follow up on enquiries and progress sales conversations
  • To manage and deliver services to existing clients
  • To fulfil our contractual and support obligations
  • To maintain records of our business relationships
  • To improve our website and marketing activity using anonymised analytics data

4. Our Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Legitimate Interest

For marketing communications sent to schools and education professionals, we rely on legitimate interest. We believe that schools have a genuine interest in receiving information about services that support school website compliance, communications, and parental engagement – areas directly relevant to their role. We have carried out a legitimate interest assessment and are satisfied that our use of data does not override your rights.

You have the right to object to processing based on legitimate interest at any time. See Section 8 for how to do this.

Contract

Where we have a contractual relationship with you, we process your data as necessary to fulfil that contract.

Consent

Where we rely on consent – for example, where you have explicitly opted in to receive communications – you may withdraw that consent at any time by contacting us or clicking unsubscribe in any email we send you.

5. Third-Party Data Processors

We use a small number of trusted third-party services to store and process personal data on our behalf. All processors are contractually required to handle data securely and in accordance with UK GDPR.

HubSpot

We use HubSpot as our CRM and email automation platform. Contact data, form submissions, and email engagement data are stored within HubSpot. HubSpot is EU/UK GDPR compliant and operates data centres within the EU. For more information visit hubspot.com/data-privacy.

Google Analytics

We use Google Analytics to collect anonymised data about how visitors use our website. This data does not identify individuals and is used solely to help us understand how our website is being used so we can improve it. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

6. Cookies

Our website uses cookies to improve your browsing experience and to collect anonymised analytics data. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

7. How Long We Keep Your Data

We retain personal data only for as long as is necessary for the purpose it was collected:

  • Marketing contacts: We review and cleanse our marketing database annually. If you have not engaged with our communications for 24 months and are not a current or recent client, we will remove your data from our active lists.
  • Client data: We retain contact and account data for the duration of your contract and for up to 6 years afterwards in line with standard business record-keeping requirements.
  • Enquiry data: Enquiries that do not progress to a client relationship are retained for up to 12 months.
  • Website analytics: Anonymised analytics data is retained in line with Google Analytics default retention settings.

8. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

  • Right to access: You can request a copy of the data we hold about you
  • Right to rectification: You can ask us to correct inaccurate data
  • Right to erasure: You can ask us to delete your data in certain circumstances
  • Right to restrict processing: You can ask us to limit how we use your data
  • Right to object: You can object to processing based on legitimate interest at any time
  • Right to data portability: You can request your data in a portable format
  • Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at hello@itchyrobot.co.uk. We will respond within 30 days.

9. Unsubscribing From Our Communications

Every marketing email we send includes an unsubscribe link. You can also unsubscribe at any time by emailing support@itchyrobot.co.uk. Once unsubscribed, we will remove you from our marketing lists within 5 working days. Please note that if you are an existing client, we may still need to contact you regarding your service.

10. How to Make a Complaint

If you have concerns about how we handle your personal data, we would always ask that you contact us in the first instance so we can address the matter directly.

However, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

ICO website: ico.org.uk

ICO helpline: 0303 123 1113

11. Changes to This Policy

We review this privacy policy regularly and will post any updates to this page. Where changes are significant, we will notify clients directly. The date at the top of this page shows when the policy was last updated.

iTCHYROBOT | Oaklea House, 46 Coatham Road, Redcar, TS10 1RS | hello@itchyrobot.co.uk

ICO Registration: ZA261162 | Data Controller: iTCHYROBOT UK Ltd