Language Boosters – Privacy Notice

Last updated: 6 October 2026

This notice explains how Primary Languages Network handles personal data in Language Boosters. When a school uses Language Boosters, the school controls its pupils' data and PLN processes it on the school's behalf.

1. Who we are and our role

Language Boosters is provided by Primary Languages Network Group Ltd (PLN, we, us), Abney Hall, Manchester Road, Cheadle, SK8 2PD. Company number: 12118977. ICO registration number: ZB458259.

Our role depends on the data:

Schools are the controller for their pupils' data. Parents and carers with questions about a pupil's data should contact the pupil's school first. We will help the school respond.

Data protection contact: Sylvia Brown, Customer and Operations Manager, sylvia@primarylanguages.network, +44 (0)161 428 8063, or by post to the address above.

2. What data we process and how we get it

We process as little data as possible. Schools can use Language Boosters without entering any pupil's real name.

We do not collect special category data, such as information about health, ethnicity or religion. Schools should not enter it into Language Boosters.

Logins and passwords

• When a school registers, we recommend randomly generated usernames and a shared class password. This keeps logins simple for young pupils and avoids using real names.
• Teachers and admins can view and change pupil usernames, but not passwords.
• If a pupil or parent sets a private password, school staff cannot see it. The pupil can reset it themselves.
• Passwords are stored encrypted. PLN staff cannot see them.

QR code access at home

Schools can share a QR code so pupils can log in at home. The school is responsible for sharing QR codes securely and in line with its own safeguarding policy.

3. How we use the data

Pupil and staff account data (PLN as processor)

We use this data only to:

• give pupils and staff access to Language Boosters;
• save each pupil's progress; and
• show progress to teachers and admins at that pupil's school.

Progress data is visible only to authorised staff at the pupil's own school. The school sets the lawful basis for this processing, usually public task (UK GDPR Article 6(1)(e)) for state schools or legitimate interests for independent schools.

We never contact pupils directly. We never use pupil data for marketing, advertising or profiling, and we never sell it.

School contact data (PLN as controller)

We use the contact details of the school's admin to manage the school's membership, give support and send occasional emails about updates or changes to Language Boosters. Our lawful basis is our contract with the school and our legitimate interest in keeping customers informed. You can opt out of update emails at any time.

4. Who we share data with and where it is held

We share personal data only with the service providers below, who process it on our behalf under written contracts with data protection terms.

Within PLN, only named staff who provide support can access school data, and only when needed.

We may also disclose data if the law requires it, for example to the police or a court.

International transfers: Language Boosters data is stored and processed on servers in Germany. The UK government has recognised EU countries, including Germany, as providing adequate protection for personal data under the UK's adequacy regulations, so no further transfer safeguards are needed. Pupil data is not transferred to any other country. If this changes, we will tell schools in advance.

5. Cookies and usage statistics

Language Boosters uses only first-party cookies set by the app itself. It has no advertising, marketing or third-party tracking cookies.

Both cookies are used only to make the app work. They are never used for advertising, profiling or tracking across other websites.

Our usage statistics come from Language Boosters' own built-in system. No external analytics tool is used. They show patterns of use, such as which activities are most popular and how the app is performing. We look at them only in aggregate and never use them to identify or profile individual pupils.

6. How long we keep data

We keep pupil and staff data only while the school's account is active.

• Deleted accounts: when a school deletes a pupil or staff account, the account and its progress data are permanently deleted straight away.
• End of membership: Language Boosters is included with Primary Languages Network membership. When a school's membership ends, all of its pupil and staff data is permanently deleted straight away. Schools should export any progress records they want to keep before their membership ends.
• Backups: deleted data is removed from backups as they are overwritten, and it is not used in the meantime.
• School contact data: we keep admin contact details for as long as the school remains a member of the Primary Languages Network. When membership ends, we delete them, except for records such as invoices that we must keep by law.

Schools can ask us to delete their data at any time.

7. Security

We protect data with measures including:

• encryption of data in transit (HTTPS) and encrypted password storage;
• servers monitored 24 hours a day, with a firewall and web application firewall;
• IP blocking and threat detection, including protection against denial-of-service attacks;
• separate school accounts, so staff see only their own school's pupils; and
• access for PLN staff limited to named people who need it for support.

If a data breach affects a school's data, we will tell the school without undue delay so it can meet its own legal duties.

8. What schools are responsible for

• Keeping staff logins secure and sharing them only with authorised staff.
• Choosing how pupils are named in the app. We recommend generated usernames or pseudonyms.
• Sharing pupil logins and QR codes securely, in line with the school's safeguarding policy.
• Telling pupils and parents how their data is used, in the school's own privacy notice.

9. Your rights

Under the UK GDPR, people have the right to:

• access their personal data;
• have inaccurate data corrected;
• have data deleted in some circumstances;
• restrict or object to processing in some circumstances; and
• opt out of marketing or update emails.

For pupil data, please contact the pupil's school, which is the controller. School admins can view, correct and delete pupil accounts in Language Boosters, and we will help the school with any request. For any other data, contact us directly.

10. Contact us

Sylvia Brown, Customer and Operations Manager
Email: sylvia@primarylanguages.network
Phone: +44 (0)161 428 8063
Post: Primary Languages Network, Abney Hall, Manchester Road, Cheadle, SK8 2PD

11. Complaints

If you are unhappy with how we use your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, by phone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

12. Changes to this notice

We may update this notice from time to time. We will tell schools about significant changes by email.