Privacy
Last updated: 27 August 2026
This website sets no cookies, runs no analytics, and tracks nobody. The only personal information involved is what you deliberately type into the contact form or the chat window — and this page explains exactly what happens to it.
Who we are
Leveller Education Ltd, trading as The Leveller. Registered in England and Wales, company number 17420501. We are the data controller for the information described on this page.
Questions about anything here, including any request about your own data, go to jay@theleveller.co and are answered by a person, not a ticketing system.
What we collect, and why
If you use the contact form
We receive the name, email address and message you type in. We use them to read your enquiry and reply to it. Nothing else.
Our lawful basis is taking steps at your request before entering into a contract (UK GDPR Article 6(1)(b)), or — if you are simply asking a question with no work in prospect — our legitimate interest in answering people who get in touch (Article 6(1)(f)).
If you use the chat window
The chat bubble is provided by Thunderbolt. Because it loads on every page, your browser contacts thunderbolt.com whether or not you open it, and that request necessarily reveals your IP address and browser user-agent to them. If you open the chat and type something, Thunderbolt processes what you send so that we can read and answer it.
Lawful basis: our legitimate interest in offering a quick, low-friction way to reach us.
If you just read the site
Our hosting provider keeps ordinary server logs — IP address, the page requested, the time, and your browser type. These exist to keep the site secure and to diagnose faults, and we do not use them to build any picture of you. Lawful basis: legitimate interest in operating a secure website.
What this site deliberately does not do
This list is not marketing. You can verify every line of it in your browser's developer tools:
- No cookies. Not one, first-party or third-party.
- No analytics — no Google Analytics, no Plausible, no page-view counter.
- No advertising, no tracking pixels, no fingerprinting.
- No social media embeds or share buttons.
- No profiling and no automated decision-making.
- Fonts are served from our own server, not from Google's.
That is why this site has no “Accept All” button. A cookie banner exists to collect consent for storing things on your device, and we store nothing, so there is nothing to consent to.
Who else can see your information
We use a small number of established suppliers to run the business:
- Google (Workspace) — hosts our email, so enquiries arrive and are stored there.
- Spaceship — hosts this website and its server logs.
- Thunderbolt — provides the chat widget described above.
We do not sell your information, share it for advertising, or pass it to anyone else — unless we are legally required to.
Where your information is held
Our suppliers may process data outside the UK, including in the United States. Where that happens, transfers are covered by the safeguards those providers maintain, such as the UK extension to the EU–US Data Privacy Framework or standard contractual clauses.
How long we keep it
- Enquiries that do not lead to work: kept for up to 24 months, then deleted.
- Enquiries that become projects: kept for the life of the project and 6 years afterwards, because business records have to be retained for tax and legal purposes.
- Server logs: kept on our host's routine schedule, typically a few weeks.
Your rights
Under UK GDPR you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete it;
- restrict or object to how we use it;
- hand it over in a portable format.
Email jay@theleveller.co and we will respond within one month. There is no charge, and you do not need to give a reason or use any particular form of words.
If you think we have got something wrong, please tell us first so we can fix it — but you can complain to the Information Commissioner's Office at any time: ico.org.uk, or 0303 123 1113.
If we build something for you
This page covers visitors to this website. It is separate from what happens when we work together: if we build software that handles your pupils', staff's or customers' data, you remain the data controller and we act as your processor. That relationship is governed by a written data processing agreement covering security, sub-processors, breach notification and what happens to the data at the end — signed before any of it is touched.
You own the code and the data. That is the whole point of The Leveller, and it applies to privacy as much as to price.
Changes to this page
If we change how any of this works, we will update this page and the date at the top. We will not quietly start collecting something and hope nobody notices.
Written in plain English on purpose. If your organisation needs this in a particular format for a procurement or DPIA process — a supplier questionnaire, a data processing agreement, a records-of-processing entry — just ask and we will fill it in.