Privacy Policy

Last updated: October 2026

Who we are

Number Phonics and The Foundations Programme are programmes from Rethink Maths Limited. Rethink Maths Limited is registered in England and Wales (company number 16482315) at Ground Floor Radley House, Richardshaw Road, Leeds, England, LS28 6LE. It is the data controller, which means it is responsible for how your personal information is used. It is registered with the Information Commissioner's Office, reference ZC142952. When we say "we" or "us" in this policy, we mean Rethink Maths Limited.

This policy covers the Number Phonics website, registering for programme updates, expressing interest in a future trial and contacting us with a question. Our Cookies page explains how we use cookies and similar technologies.

The information we collect

We do not ask you to create an account, and there is no login on this website.

When you register your interest, we collect the details you enter on the form. These include your name, email address, school or setting, role and whether you would like to be contacted about a future trial. You can also choose to tell us which age groups you work with and leave a message. The form shows which fields are required.

We keep a record of when you registered and the wording and choices you agreed to. If you email us, we also keep your email address and the contents of your message while we deal with it.

When you use the website, we process technical information such as your IP address, browser details, timestamps and request logs. We use it to run and protect the website, prevent abuse and diagnose problems.

Programme updates and future trials

When you sign up for updates, we use your details to email you about Number Phonics and The Foundations Programme, including news from the trials and the launch. Our lawful basis is your consent. You can withdraw that consent at any time using the contact details below.

If you separately ask to be considered for a future trial, we use the details you provide to follow up about suitable opportunities. We rely on your consent for this contact too. You can change that choice without stopping your programme updates, or ask us to stop both.

Expressing interest does not enrol you or your school in a trial. If you decide to take part later, we will provide the information and arrangements relevant to that study before any research data is collected.

Your registration is for the two programmes named above. We do not use it to add you to mailing lists for other Rethink products or share your details with other organisations for their own marketing.

Enquiries and running the website

We use your email address and message to answer your question and deal with any follow-up you request. Our lawful basis is our legitimate interest in responding to enquiries. Sending us a question does not itself sign you up for programme updates.

We use technical information to operate and protect the website, diagnose faults and limit repeated or automated submissions. Our lawful basis is our legitimate interest in providing a reliable service and preventing abuse. We also keep limited records of consent and unsubscribe requests to meet our data protection obligations.

We do not send an automatic confirmation email when you register. Your registration is passed to our team, who add you to the contact list and use it only for the updates and follow-up you requested.

Protecting the registration form

The registration form is protected by Cloudflare Turnstile, our security-check provider, which helps tell genuine visitors from automated submissions. It processes technical information about your browser and connection, including your IP address, and may store or read information in your browser. Cloudflare uses this information to provide the security check and to improve Turnstile's bot detection. Its Turnstile Privacy Addendum explains this in more detail.

We use the result to decide whether to accept a submission and send the related emails.

Website statistics

We use cookieless website statistics to understand how the website is used so we can improve it. Our statistics provider is Vercel, which also hosts the website, through its Web Analytics service. For each page viewed, it records the page address, the time, the website you came from (its main address only), your approximate location, such as your country and town, and your browser, operating system and type of device. We remove any extra details from the end of page addresses before they are sent.

For website statistics, the only setting we save in your browser is your choice to switch them off. Vercel uses technical information sent with page requests to count visitors without setting cookies. Our statistics provider says it discards visitor sessions after 24 hours. Combined website statistics remain available to us through a 12-month reporting window. The provider's published privacy guidance does not specify a fixed deletion period for these combined statistics. We look only at combined figures and do not use the statistics to identify individual visitors. Our lawful basis is our legitimate interest in understanding how the website is used so we can improve it.

See our Cookies page for the full position, or switch website statistics off at any time on our Website statistics page.

How we keep and share your information

Your form submission is sent to our team by email. We keep registration emails and relevant details in our email system and internal contact records so we can provide the updates and follow-up you requested. Access is limited to people who need the information for their work.

We use service providers to help run the website and deliver our services. They receive the information needed for their part of the service. Where they process personal information on our behalf, they do so on our instructions and under a data protection agreement.

They include Vercel, our hosting provider; Resend, which sends the website's emails; Microsoft 365, for our team email; Cloudflare Turnstile, our security-check provider; Upstash, which holds short-lived technical records to limit repeated submissions and prevent duplicate notifications; and Sentry, which alerts us when the website has a technical fault. If we use another service to send programme updates or manage the contact list, we will describe the relevant arrangements here.

We do not sell your personal information. We may disclose information where we are required to do so by law.

Where your information is processed

Rethink Maths Limited is based in the United Kingdom and our team email runs on Microsoft 365 in the UK. Our hosting and statistics provider operates globally and processes information in other countries, including the United States. The website's server code runs in London, but that does not mean all information about your visit stays in the UK. Resend, which sends the website's emails, stores its records in the United States, and our security-check provider runs the check through a global network. The registration form's technical records are held by Upstash in the European Union (Ireland). Technical fault reports are held by Sentry in the European Union (Germany).

Where personal information is transferred outside the UK, we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the providers' own data protection commitments.

How long we keep your information

We keep your contact details and registration choices while we provide the updates or trial follow-up you requested. We stop using them for that purpose if you withdraw your consent, if we stop providing those updates or opportunities, or if the details are no longer current.

We keep enquiry emails and optional background information while we need them to answer your question or deal with relevant follow-up. We review our records and remove information that is no longer needed. When deciding what to keep, we consider whether there is an outstanding request, an ongoing contact relationship or a specific need to deal with a complaint or meet a legal obligation. Technical records used to limit repeated submissions are deleted within 25 hours. Records used to prevent duplicate notifications when a submission is retried are deleted within 30 days.

If you unsubscribe, we keep a limited record of your email address and your request so we do not accidentally add you again. We retain evidence of consent only while it is needed to demonstrate how we used your information or deal with a related complaint. These records are not used to send you updates.

Security and technical records are kept only while needed to prevent abuse, diagnose faults or investigate an incident. Technical fault reports held by Sentry are deleted after 90 days. A record may need to be kept longer where it relates to an ongoing investigation.

Unsubscribing

You can stop programme updates or future-trial contact at any time by emailing numberphonics@rethinkmaths.co.uk. Tell us the email address you registered with and which contact you want to stop. If you ask to unsubscribe without specifying a preference, we will stop both programme updates and future-trial contact.

Every programme-update email will explain how to unsubscribe. You do not have to wait for an email to contact us, and you do not need an account or have to give a reason. We will act on your request promptly. Withdrawing consent does not affect the lawfulness of how we used your information before you withdrew it.

Your rights

You can ask for access to your personal information and ask us to correct information that is inaccurate. Depending on the circumstances, you may also have the right to ask us to delete it, restrict how we use it or give it to you in a portable format.

You can object at any time to the use of your information for direct marketing. You can also object to processing based on our legitimate interests, and withdraw your consent at any time where we rely on it.

To exercise any of these rights, email us at numberphonics@rethinkmaths.co.uk. If you are unhappy with how we have handled your information, you have the right to complain to the Information Commissioner's Office at ico.org.uk.

Children

This website is for adults finding out about the programmes. The website is not aimed at children, and we do not knowingly collect personal information from children. We do not ask for pupils' personal information through this website. Please do not include pupil names or other information that identifies a child in any form or message you send us.

Changes to this policy

We may update this policy if the website or the way we use information changes, and we will update the date above when we do. We will tell you about significant changes where appropriate, and ask for fresh consent if a new use of your information needs it.

Contact

For questions about this policy or your information, email us at numberphonics@rethinkmaths.co.uk, or write to us at Rethink Maths Limited, Ground Floor Radley House, Richardshaw Road, Leeds, England, LS28 6LE.