Privacy Policy
Last updated: 16 September 2026
How QuestPop uses and protects personal information in England.
Who this policy covers
This policy explains how QuestPop handles personal information for pupils, parents, guardians, teachers and school staff. The QuestPop operator is responsible for deciding how information used to provide the service is handled. Schools may also be responsible for information they add or manage for their communities.
Information we use
We may use account details such as name, email address and role; school, class and parent–pupil links; learning activity, answers, scores and targets; support or correction requests; and technical information needed for security, reliability and access. We ask users not to put private health, safeguarding or unnecessary personal information into learning answers.
Why we use it
Information is used to create and secure accounts, provide role-appropriate learning, save progress, support parent and teacher views, operate safeguarding and audit controls, improve reliability and meet legal obligations. Where consent is the appropriate basis, it may be withdrawn without affecting earlier lawful use.
Children’s information
A parent, guardian or authorised school adult should oversee accounts for younger pupils. Access is limited by role and relationship. Adults should use the minimum information needed, keep login details private and review linked accounts. QuestPop should not be used to collect a child’s private disclosures.
Sharing and international services
Information is shared only with service providers needed to host, secure and operate QuestPop, or where the law requires it. A linked school, parent or teacher may see learning information only through the access available to their role. We do not sell personal information.
Retention and security
Information is kept only as long as needed for the service, legal duties, dispute handling and security. Technical and organisational safeguards are used, but no online service can promise absolute security. Users should report suspected account misuse promptly and change compromised credentials.
Your rights
Depending on the circumstances, people may request access, correction, deletion, restriction, objection or portability. Parents and authorised adults may act for a child where appropriate. Use Settings and the Data Rights page to make available requests. You may also complain to the UK Information Commissioner’s Office.