Privacy Notice

The Natural Curriculum is the data controller for the personal data described here. Contact us at hello@thenaturalcurriculum.com with any privacy question or request.

• Account data — your name, email address, and login credentials. Used to create and secure your account. Legal basis: performance of our contract with you.
• Child profile data — the first name or nickname, age or year group, and interests you enter for each child, plus their quiz answers and resulting Nature. Used to generate profiles, activities, and weekly plans. Legal basis: contract, entered by you as the parent or carer. Please do not enter a child's full name, address, school, or any health information.
• Quiz responses — answers given before an account exists, held against a temporary result link so you can claim them. Legal basis: legitimate interests in delivering the result you asked for.
• Activity and progress data — completed activities, streaks, badges, and standings. Legal basis: contract.
• Support messages — what you send us and our replies. Legal basis: legitimate interests in answering you.
• Usage and device data — pages visited, referral and campaign parameters, approximate location from IP, browser and device type. Used for security, fraud prevention, and improving the product. Legal basis: legitimate interests.
• Marketing — if you opt in, your email address is used to send updates. Legal basis: consent, withdrawable at any time.

Accounts are for adults. Children do not sign up or log in themselves; a parent or carer enters and controls all child profile information and can delete it at any time from the child's profile page.

• Service providers — hosting, database, authentication, and email delivery providers who process data on our instructions.
• Merchant of Record — Paddle.com, for the sale of the handbook, payments, invoicing, tax compliance, and refunds. Paddle collects payment data directly; we never see your card details.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where required by law.

We do not sell personal data.

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on adequacy decisions or Standard Contractual Clauses.

Account and child profile data is kept while your account is active and for 30 days after deletion, then removed or anonymised. Unclaimed quiz results are deleted after 90 days. Purchase records are kept as long as tax and accounting law requires.

Subject to local law you can ask for access, correction, deletion, restriction, portability, or object to processing based on legitimate interests, and withdraw consent at any time. Email hello@thenaturalcurriculum.com and we will respond within one month. If you are in the UK or EEA you can also complain to your supervisory authority.

We use appropriate technical and organisational measures, including encryption in transit, row-level access rules so you can only reach your own household's data, and restricted administrative access. No system is perfectly secure, so please use a strong, unique password.

We use essential cookies and local storage to keep you signed in and to remember the campaign link you arrived from. We do not use advertising cookies. You can clear or block cookies in your browser, though sign-in will stop working without the essential ones.