Privacy Policy

At STEMExpress, we take your privacy seriously. This Privacy Policy explains how we collect, use, store and protect personal information when parents, guardians, students and other visitors use our website, register an interest in our programmes or participate in STEMExpress learning activities.

STEMExpress provides online educational clubs and learning activities primarily for school-age students. Because many of our learners are under 18, we take particular care when handling children's personal information.

1. Who We Are

STEMExpress is operated by DREO Solutions Ltd, a company registered in England and Wales. STEMExpress provides online STEM learning clubs and educational activities for school-age students in the UK.

For the purposes of UK data protection law, DREO Solutions Ltd is the data controller responsible for the personal information collected and processed through STEMExpress, unless otherwise stated.

For questions about this Privacy Policy, how we use personal information, or to exercise your data-protection rights, please contact us using the details above.

2. Information We May Collect

The information we collect depends on how you interact with STEMExpress.

Parent or Guardian Information

We may collect information such as:

• Parent or guardian name
• Email address
• Telephone number
• Communication preferences
• Registration and enquiry information
• Payment and transaction information, where applicable

Student Information

Where necessary to provide our learning services, we may collect limited information about a student, including:

• Name
• Age or school year
• Subjects being studied
• Programme or group attended
• Relevant learning information
• Attendance and participation information
• Learning progress or tutor feedback, where applicable

We aim to collect only the information reasonably necessary to provide and manage our services.

3. How We Collect Information

We may receive information when you:

• Visit the STEMExpress website
• Complete a Register Your Interest or other online form
• Contact us by email, telephone or another approved communication channel
• Register or pay for a STEMExpress programme
• Attend an online learning session
• Communicate with one of our authorised team members
• Provide feedback about our services

Our website may also collect limited technical information through cookies and similar technologies.

4. How We Use Your Information

We may use personal information to:

• Respond to enquiries
• Process registrations
• Place students into appropriate groups
• Deliver and administer online learning sessions
• Communicate with parents and guardians
• Manage attendance and scheduling
• Process payments
• Provide learning-related feedback
• Maintain appropriate safeguarding arrangements
• Improve our programmes and services
• Maintain appropriate business and financial records
• Meet our legal and regulatory obligations
• Protect students, tutors and other participants

We will not use children's personal information for purposes that are incompatible with the reason it was collected.

5. Our Lawful Basis for Processing

Under UK data-protection law, we need an appropriate lawful basis for processing personal information. Depending on the circumstances, this may include:

• Contract: where processing is necessary to provide a service you have requested.
• Legitimate interests: where we have a legitimate reason to process information to operate and improve STEMExpress, provided those interests do not override your rights.
• Legal obligation: where we need to process or retain information to comply with applicable law.
• Consent: where we specifically ask for permission, for example for certain marketing communications or the use of photographs or videos.

6. Children's Privacy

STEMExpress provides services involving children and young people, and protecting their privacy is particularly important to us.

Where appropriate, registrations and important communications relating to a child should be made through or with the involvement of a parent or guardian.

We aim to collect only the minimum amount of children's information necessary to deliver our programmes safely and effectively. We do not intend to use children's personal information for unrelated direct marketing.

7. Online Learning Sessions

STEMExpress sessions may be delivered using third-party online learning, video-conferencing or educational platforms.

Depending on how a session is delivered, participants' names, voices, video or contributions may be visible to tutors and other students participating in the same group.

Students and parents should not independently record, photograph or distribute sessions or information about other participants without appropriate permission.

8. Session Recordings

STEMExpress will not assume that attendance at an online session automatically provides consent for recording.

If we intend to record a session, we will provide appropriate information beforehand and obtain consent where required. Any recordings will be handled in accordance with applicable privacy and safeguarding requirements.

9. Photographs, Videos and Testimonials

We may occasionally wish to use photographs, videos, student work, feedback or testimonials to promote STEMExpress.

Where an identifiable child is involved, we will seek appropriate permission before using such material for marketing or promotional purposes. Parents or guardians may withdraw consent for future use where processing is based on consent.

10. Sharing Personal Information

We do not sell personal information. We may share information with trusted service providers where necessary to operate STEMExpress, including providers supporting:

• Website hosting
• Email and communications
• Online learning or video conferencing
• Registration systems
• Payment processing
• Cloud storage
• Administration and technology services

We may also disclose information where required by law or where reasonably necessary to protect the safety or welfare of a child or another person. Where third parties process information on our behalf, we aim to use appropriate providers and safeguards.

11. Safeguarding

Please see our separate Safeguarding Policy for more information.

12. Payments

Where online payments are offered, payment information may be processed by a third-party payment provider.

STEMExpress may receive transaction information necessary to confirm and administer your payment but may not directly receive or store complete payment-card details where these are handled by the payment provider.

13. Cookies

Our website may use cookies and similar technologies to make the website function correctly, understand how visitors use it and improve the user experience.

Some cookies may be essential for the operation of the website, while others may relate to analytics or other optional services. Where required, visitors will be provided with appropriate choices regarding non-essential cookies. Please refer to our Cookie Policy for further information.

14. How Long We Keep Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing our services and meeting safeguarding, financial, contractual and legal requirements.

Different types of information may therefore have different retention periods. When information is no longer required, we aim to securely delete or anonymise it.

15. Keeping Information Secure

We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. However, no internet-based service can guarantee absolute security.

Parents and students should also take reasonable steps to protect passwords, meeting links and account information.

16. International Data Transfers

Some technology providers used by STEMExpress may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we aim to ensure appropriate safeguards are in place as required by applicable UK data-protection law.

17. Your Data Protection Rights

Depending on the circumstances, UK data-protection law may give you rights relating to your personal information, including the right to:

• Ask what personal information we hold about you
• Request a copy of your personal information
• Ask us to correct inaccurate information
• Ask us to delete information in certain circumstances
• Request restriction of processing in certain circumstances
• Object to certain processing
• Request transfer of information where applicable
• Withdraw consent where processing relies on consent

These rights are subject to legal conditions and exceptions. For information relating to a child, we may need to consider the child's age, understanding, rights and the authority of the person making the request.

18. Marketing Communications

Where appropriate, we may send parents or guardians information about STEMExpress programmes, events or services. Where consent is required, we will obtain it before sending such communications.

You can ask us to stop sending marketing communications at any time.

19. Third-Party Websites

Our website may contain links to websites or services operated by other organisations. STEMExpress is not responsible for the privacy practices of independent third-party websites. We encourage you to review their privacy policies before providing personal information.

20. Changes to This Privacy Policy

We may update this Privacy Policy as STEMExpress develops, our services change or legal requirements evolve. The latest version will be published on our website with an updated revision date.

21. Contact Us

If you have questions about this Privacy Policy, want to exercise your data-protection rights or have concerns about how your information has been handled, please contact:

You also have the right to raise concerns with the UK Information Commissioner's Office (ICO) if you are unhappy with how your personal information has been handled.