Data Protection

Schools and trusts normally act as Controller for pupil data. ReadRight Pro acts as Processor for that school-controlled data, processing it on the school's documented instructions.

• ReadRight Pro uses authenticated staff accounts and organisation/school access controls.
• Pupil information is used to provide reading assessment, reporting and progress tracking.
• ReadRight Pro follows data-minimisation principles and asks only for the pupil information needed to deliver the service.
• Raw reading audio is intended for temporary processing rather than permanent pupil voice archiving.
• AI-derived outputs support teacher judgement rather than replace it.
• Stripe handles payment processing separately from pupil assessment data.
• ReadRight Pro does not sell pupil data and does not use pupil information for behavioural advertising.

Schools should not enter unnecessary safeguarding, medical or otherwise unrelated sensitive information into ReadRight Pro. The standard service does not require it.

ReadRight Pro uses cookies and browser storage only where necessary for authentication, security and core operation. No advertising or behavioural tracking technologies are intentionally used.

ReadRight Pro maintains the following documents, which can be supplied to schools and trusts for due diligence and procurement:

• A School Data Processing Agreement
• A Data Retention & Deletion Policy
• A Sub-processor Register
• DPIA support information
• An Information Security Overview

The School Data Processing Agreement is published here, and the remaining documents are available on request.

Schools can contact hello@readrightpro.com regarding data protection, deletion or return requests, DPIA information, or procurement questions.

See also our Privacy Notice.