Privacy Policy – SchoolRunTracker

Last modified: 21st May 2025

  • 1. Data Collection and Usage
  • 2. Lawful Basis for Processing
  • 3. Consent for Children’s Data
  • 4. Data Sharing and Visibility
  • 5. Tracking and Notifications
  • 6. Data Storage and Security
  • 7. Data Retention
  • 8. Your Rights Under UK GDPR
  • 9. Data Protection Officer (DPO)
  • 10. Contact Information

1. Data Collection and Usage

We collect the following personal data when you use the SchoolRunTracker application:

  • Parent/Guardian Name and Surname
  • Student Name and Surname
  • Pickup and Drop-off Addresses of the Student
  • School Name

This data is necessary to provide our core service: connecting parents and guardians with school runners (drivers) and enabling route tracking for safety and convenience. All personal data is securely stored and encrypted using Amazon Web Services (AWS) infrastructure.

2. Lawful Basis for Processing (UK GDPR Article 6)

In accordance with Article 6 of the UK General Data Protection Regulation (UK GDPR), our lawful bases for processing personal data are:

  • Performance of a Contract (Article 6(1)(b))
    We process your data to provide the services you request when using the app — such as coordinating school runs and sending tracking notifications.
  • Legitimate Interests (Article 6(1)(f))
    We have a legitimate interest in ensuring the safety and operational efficiency of school run coordination, including communication between parents and drivers.
  • Consent (Article 6(1)(a))
    We request explicit consent when processing children’s personal data, given by a parent or legal guardian during registration. Consent can be withdrawn at any time by contacting us.

4. Data Sharing and Visibility

Your data is only shared with other app users directly involved in your school run activity (e.g., other parents or designated drivers). The only data shared includes:

  • Parent/Guardian and Student Names
  • Pickup and Drop-off Addresses
  • School Name

No sensitive data is made publicly available or accessible outside of these interactions.

5. Tracking and Notifications

When a school runner accepts a transport request, real-time tracking becomes available. You’ll receive alerts when:

  • The journey begins
  • The student is picked up
  • The student is dropped off

These alerts are designed to enhance safety and peace of mind.

6. Data Storage and Security

All personal data is encrypted and securely stored in Amazon Web Services (AWS) infrastructure. A Data Processing Agreement (DPA) is in place with AWS to ensure compliance with UK GDPR obligations. We maintain appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or loss.

7. Data Retention

We retain your personal data only for as long as necessary to provide our services or comply with legal obligations. You may request deletion of your data at any time by contacting us directly.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access – to obtain a copy of your personal data
  • Right to rectification – to correct inaccuracies
  • Right to erasure – to request deletion of your data
  • Right to object – to certain processing activities
  • Right to data portability – to move your data to another service
  • Right to withdraw consent – where processing is based on consent

To exercise any of these rights, please contact us using the details below.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

9. Data Protection Officer (DPO)

Although not legally required, we have appointed a Data Protection Officer to ensure ongoing compliance with data protection laws and to handle any privacy-related concerns or queries.

 

10. Contact Information

If you have any questions or would like to exercise your rights under this policy, please contact us:

Email: info@schoolruntracker.com