Number Phonics Privacy Policy

Last updated September 2026

Who we are

Number Phonics and The Foundations Programme are programmes from Rethink Maths Limited. We are registered in England and Wales, company number 16482315, at Ground Floor Radley House, Richardshaw Road, Leeds, England, LS28 6LE. Rethink Maths Limited is the data controller, which means we are responsible for how your personal information is used.

We are registered with the Information Commissioner's Office, reference ZC142952. When we say "we" or "us" in this policy, we mean Rethink Maths Limited.

This policy covers the Number Phonics website, registering for programme updates, expressing interest in a future trial and contacting us with a question. Our Cookies page explains how we use cookies and similar technologies.

The information we collect

When you register your interest, we collect the details you enter on the form. These include your name, email address, school or setting, role and whether you would like to be contacted about a future trial. You can also choose to tell us which age groups you work with and leave a message. The form shows which fields are required.

We keep a record of when you registered and the wording and choices you agreed to. If you email us, we also keep your email address and the contents of your message while we deal with it.

When you use the website, we process technical information such as your IP address, browser information, timestamps and request logs to operate the site, diagnose problems and prevent abuse. We do not ask you to create an account.

Programme updates and future trials

When you sign up for updates, we use your details to email you about Number Phonics and The Foundations Programme, including news from the trials and the launch. Our lawful basis is your consent. You can withdraw that consent at any time using the contact details below.

If you separately ask to be considered for a future trial, we use the details you provide to follow up about suitable opportunities. We rely on your consent for this contact too. You can change that choice without stopping your programme updates, or ask us to stop both.

Expressing interest does not enrol you or your school in a trial. If you decide to take part later, we will provide the information and arrangements relevant to that study before any research data is collected.

Your registration is for the two programmes named above. We do not use it to add you to mailing lists for other Rethink products or share your details with other organisations for their own marketing.

Enquiries and running the website

We use your email address and message to answer your question and deal with any follow-up you request. Our lawful basis is our legitimate interest in responding to enquiries. Sending us a question does not itself sign you up for programme updates.

We use technical information to operate and protect the website, diagnose faults and limit repeated or automated submissions. Our lawful basis is our legitimate interest in providing a reliable service and preventing abuse. We also keep limited records of consent and unsubscribe requests to meet our data protection obligations.

We do not send an automatic confirmation email when you register. Your registration is passed to our team, who add you to the contact list and use it only for the updates and follow-up you requested.

Protecting the registration form

We use Cloudflare Turnstile to help distinguish genuine visitors from automated submissions. It processes technical information about your browser and connection, including your IP address. We use the result to decide whether to accept a submission and send the related emails.

Cloudflare processes this information to provide the security check and also uses it to improve Turnstile's bot detection. Its Turnstile Privacy Addendum explains this in more detail.

Understanding use of the website

We do not currently use analytics or similar tools to measure how the website is used. If we introduce website statistics in future, we will describe here what is collected and why, and how you can object, before we switch anything on.

How we keep and share your information

Your form submission is sent to our team by email. We keep registration emails and relevant details in our email system and internal contact records so we can provide the updates and follow-up you requested. Access is limited to people who need the information for their work.

We use Vercel to host the website, Resend to send the website's emails, Microsoft 365 for our team email, Cloudflare Turnstile to help protect the form, and Upstash to hold two short-lived records for the registration form: counters that limit repeated or automated submissions (a one-way digest of your email address and connection, never the details you enter), and a processing record that lets us recognise a retried submission and prevent duplicate notifications (it does not contain your name, email address or message). These services process the information needed for their part of the service. If we use another service to send programme updates or manage the contact list, we will describe the relevant arrangements here.

We do not sell your personal information. We may disclose information where we are required to do so by law.

Where your information is processed

Rethink Maths Limited is based in the United Kingdom and our team email runs on Microsoft 365 in the UK. Some of the services we use are provided by companies based in the United States or operating globally: Vercel hosts the website and runs its code in data centres that may include the United States, Resend sends the website's emails and stores its records in the United States, and Cloudflare provides the Turnstile security check through a global network. The form's submission counters and processing record are held by Upstash in the European Union (Ireland).

Where personal information is transferred outside the UK, we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the providers' own data protection commitments.

How long we keep your information

We keep your contact details and registration choices while we provide the updates or trial follow-up you requested. We stop using them for that purpose if you withdraw your consent, if we stop providing those updates or opportunities, or if the details are no longer current.

We keep enquiry emails and optional background information while we need them to answer your question or deal with relevant follow-up. We review our records and remove information that is no longer needed. When deciding what to keep, we consider whether there is an outstanding request, an ongoing contact relationship or a specific need to deal with a complaint or meet a legal obligation. The registration form's submission counters (a one-way digest of your email address and connection) are deleted automatically within 25 hours. Its processing record, which lets us recognise a retried submission and prevent duplicate notifications and does not contain your name, email address or message, is deleted within 30 days.

If you unsubscribe, we keep a limited record of your email address and your request so we do not accidentally add you again. We retain evidence of consent only while it is needed to demonstrate how we used your information or deal with a related complaint. These records are not used to send you updates.

Security and technical records are kept only while needed to prevent abuse, diagnose faults or investigate an incident. A record may need to be kept longer where it relates to an ongoing investigation.

Unsubscribing

You can stop programme updates or future-trial contact at any time by emailing numberphonics@rethinkmaths.co.uk. Tell us the email address you registered with and which contact you want to stop. If you ask to unsubscribe without specifying a preference, we will stop both programme updates and future-trial contact.

Every programme-update email will explain how to unsubscribe. You do not have to wait for an email to contact us, and you do not need an account or have to give a reason. We will act on your request promptly. Withdrawing consent does not affect the lawfulness of how we used your information before you withdrew it.

Your rights

You can ask for access to your personal information and request that inaccurate information is corrected. You may also have the right to request deletion, restrict how we use information or receive it in a portable format, depending on the circumstances.

You can object at any time to the use of your information for direct marketing. You can also object to processing based on legitimate interests and withdraw consent where we rely on it.

To exercise your rights, email numberphonics@rethinkmaths.co.uk. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

This website is for adults finding out about the programmes. We do not ask for pupils' personal information through the registration form. Please do not include pupil names or other information that identifies a child in your message.

Changes to this policy

We may update this policy if the website or the way we use information changes. We will update the date above when we do. We will tell you about material changes where appropriate and seek fresh consent if it is needed for a new use of your information.

Contact

For questions about this policy or your information, email numberphonics@rethinkmaths.co.uk, or write to Rethink Maths Limited, Ground Floor Radley House, Richardshaw Road, Leeds, England, LS28 6LE.