Skip to the main content
Home Our Story Courses Find a course Maths Games Leaderboard Call Us: +44 7356 242408 Sign In Free Demo Lesson
UK GDPR & Data Protection

Privacy Policy

Compliant with UK GDPR, Data Protection Act 2018 & ICO Children's Code | Last Updated: September 2026

Home / Legal / Privacy Policy

At V-MAT UK (trading as Vedic Math Academy of Talent UK, accessible at vmat.uk), we take your privacy and the protection of your family's personal data extremely seriously. This Privacy Policy explains how we collect, store, use, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Information Commissioner's Office (ICO) Age-Appropriate Design Code.

1. Who We Are (The Data Controller)

The data controller responsible for your personal data is:

Data Controller: V-MAT UK (Vedic Math Academy of Talent UK)

UK Registered Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Data Protection Lead Email: privacy@vmat.uk / info@vmat.uk

UK Helpline: +44 7356 242408

2. Protection of Children's Data (The ICO Children's Code)

Child Safeguarding Commitment

Because V-MAT UK provides mathematical and cognitive education to children aged 5 to 17, our platform strictly complies with the UK Information Commissioner's Office (ICO) Age-Appropriate Design Code (Children's Code):

  • Parental Consent & Control: Child accounts must be created or authorized by a parent or legal guardian. Parents maintain full supervisory access to their child's learning profile.
  • Data Minimization: We collect only the minimum personal data required to deliver educational lessons and track learning progress (e.g. child's first name/nickname, year group, and quiz scores). We do not collect geolocation, biometric data, or sensitive personal data from minors.
  • No Commercial Profiling: We never track, profile, or monetize children's data, nor do we serve third-party behavioral advertisements to children.
  • High Privacy Defaults: All child accounts default to private settings without public social feeds or unmoderated chat rooms.

3. What Information We Collect

  • Parent / Guardian Data: Full name, email address, UK telephone/WhatsApp number, billing address, and account credentials.
  • Student / Learner Data: Student display name or nickname, school year group / Key Stage, lesson completion history, quiz scores, accuracy metrics, and gamification points (XP).
  • Payment & Transaction Details: Amount paid in GBP (£), transaction timestamps, and Razorpay Order/Payment references. We never store raw debit/credit card numbers or CVVs on our servers.
  • Technical & Log Data: IP address, device operating system, browser type, and timestamps of study activity (used solely for security monitoring and student time-spent tracking).
  • Sign-in History: each time an account signs in we record the date and time, the type of device and browser, and the approximate town and country worked out from the IP address (never a street address). We use this only to keep accounts secure, for example to notice a login being shared or misused, and it is deleted automatically after 90 days.

4. Our Lawful Bases for Processing (UK GDPR Art. 6)

Under UK data protection law, we must have a valid lawful basis to process your personal data:

  • Performance of a Contract: To register your account, deliver subscribed video lessons, provide interactive math exercises, track learning certificates, and send transactional notices.
  • Legitimate Interests: To maintain cyber resilience, prevent fraud, optimize platform speed, and analyze learning outcomes to improve curriculum effectiveness.
  • Legal & Regulatory Obligations: To comply with UK tax, financial reporting, and consumer protection statutory requirements (HMRC records).
  • Consent: Where you have provided explicit opt-in consent to receive our educational newsletter or marketing updates. You can withdraw this consent at any time.

5. Payment Gateway Security (Razorpay)

All checkouts on vmat.uk are processed through Razorpay, which is certified PCI-DSS Level 1 compliant (the highest security standard in global financial payments). Payment information is encrypted in transit using 256-bit TLS/SSL encryption directly to the banking network. V-MAT UK only receives a secure tokenized receipt ID and confirmation code.

6. Data Sharing & International Transfers

We do not sell, rent, or trade personal data to third parties. Data is shared only with trusted infrastructure providers strictly necessary to operate our service:

  • FCA-compliant Payment Processors: Razorpay (order settlement and refund processing).
  • Secure Hosting & Cloud Infrastructure: High-security ISO-27001 accredited cloud servers.
  • Educational Communications: Transactional email/messaging dispatchers for automated login OTPs, order receipts, and class reminders.
  • Approximate Location Lookup: when someone signs in, the IP address alone is sent to an IP-location service (ipapi.co, or ipwho.is as a back-up) to find the approximate town and country for the sign-in history. No name, email or other details are sent.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTA) or standard contractual clauses approved by the UK Government.

7. Data Retention & Security

We keep your personal information only for as long as necessary to fulfill the educational purposes outlined in this policy, or to satisfy legal, accounting, and tax retention rules (typically up to 6 years for transactional and invoicing records under UK HMRC regulations). Upon account termination, student educational performance data is permanently deleted or anonymized upon parental request.

8. Your Statutory Rights Under UK GDPR

Under the UK General Data Protection Regulation, you and your child have enforceable statutory rights:

  • Right of Access (Subject Access Request): You have the right to request a free copy of the personal data we hold about you or your child.
  • Right to Rectification: You can request correction of inaccurate or incomplete personal details.
  • Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal information, subject to statutory retention exceptions.
  • Right to Restrict or Object to Processing: You have the right to limit how we use your data or object to specific processing activities.
  • Right to Data Portability: You may request that we transfer your student learning records to another provider in a structured, machine-readable format.

To exercise any of these rights, please email our Data Protection desk at privacy@vmat.uk. We respond to all verified statutory requests within one calendar month without charge.

9. Your Right to Lodge a Complaint with the ICO

If you have any concerns about our data handling, we invite you to contact us first so we can resolve the issue promptly. However, you have the statutory right to lodge a formal complaint at any time with the UK independent supervisory authority:

Information Commissioner’s Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

Helpline: 0303 123 1113

Website: https://ico.org.uk

10. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our child protection standards, please contact:

Data Protection Lead: V-MAT UK

Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Email: privacy@vmat.uk / info@vmat.uk

Telephone: +44 7356 242408

Please also view our Terms & Conditions and Refund & Cancellation Policy.
💬