Beta

Privacy Notice

This Privacy Notice was last updated on 24 June 2026 and applies to citizens and legal permanent residents of the United Kingdom.

1. Introduction

This privacy notice explains how Grey Gecko Educational Technology Ltd (“EVA”, “we”, “us”) collects and uses personal data when you visit oracy21.com or get in touch with us. We are committed to protecting your privacy and handling your data in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).

2. Who we are

Grey Gecko Educational Technology Ltd is the data controller for the personal data described in this notice.

  • Company number: 16415152 (registered in England and Wales)
  • Registered office: 128 City Road, London, EC1V 2NX, United Kingdom
  • Contact for data protection queries: faye@greygecko.ai
  • ICO registration: Grey Gecko Educational Technology Ltd is registered with the Information Commissioner’s Office as a data controller.

3. A note on pupils’ data

EVA provides oracy teaching resources for teachers to use in the classroom. We do not collect, store or process any personal data about pupils. Our lessons do not require pupil logins or accounts, and any in-lesson progress is stored locally in the browser on the user’s own device — it is not transmitted to or held by us. This notice therefore concerns the personal data of website visitors, enquirers, and people who sign up to pilot or hear from EVA — typically teachers, school staff and other adults.

4. What personal data we collect, and why

Information you give us directly. When you complete a contact, pilot or feedback form, or email us, we collect the details you provide — typically your name, email address, the name of your school or organisation, and the content of your message. We use this to respond to you, to manage pilot enquiries, and to provide the information or support you have asked for.

Lawful basis: consent, and/or our legitimate interest in responding to enquiries and developing EVA with interested schools.

Information collected automatically. Like most websites, oracy21.com uses cookies and similar technologies to function and to understand how the site is used. This may include your device and browser type, pages visited, and approximate location derived from your IP address. Our site uses Google Analytics (via Google Site Kit) for statistics, and a cookie-consent banner that lets you accept or reject non-essential cookies.

Lawful basis: consent for non-essential (analytics/marketing) cookies; legitimate interest for strictly necessary cookies that make the site work.

Comments. If you leave a comment on the site, we collect the name and email address you submit with it.

See our Cookie Policy for the specific cookies in use, and use the cookie-consent banner to change your choices at any time.

5. How we share your data

We do not sell your personal data. We share it only with service providers who help us run EVA, and only as needed:

  • Website hosting and platform: Automattic, Inc. (WordPress.com), which hosts oracy21.com.
  • Analytics: Google (Google Analytics via Site Kit), where you have consented to analytics cookies.
  • Email and enquiry handling: Microsoft 365 (Microsoft Corporation), provided via GoDaddy.

These providers process data on our behalf under appropriate agreements. Where any provider transfers data outside the UK, we rely on appropriate safeguards (such as the UK International Data Transfer Agreement or adequacy regulations). We may also disclose data where required by law.

6. How long we keep it

We keep enquiry and pilot correspondence for as long as needed to deal with your request and for up to 24 months after our last contact with you, unless you ask us to delete it sooner. Analytics data is retained in line with our Google Analytics retention settings.

7. How we keep it secure

We take reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, and limiting access to those who need it. See our Safety & Security statement for more.

8. Your rights

Under UK data protection law you have the right to access your personal data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; and to data portability, in certain circumstances. Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at faye@greygecko.ai. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Changes to this notice

We may update this notice from time to time. The current version is always available on oracy21.com, and the date at the top shows when it was last revised.