Legal

Privacy Policy

How PE Pathway collects, stores and uses data — written in plain English.

Version 1.2  ·  October 2026  ·  Fit4Fun Sports Dance & Fitness Limited
1Who We Are

PE Pathway is a product of Fit4Fun Sports Dance & Fitness Limited, a company registered in England and Wales. We run an online platform that helps UK primary schools deliver, assess and report on Physical Education.

CompanyFit4Fun Sports Dance & Fitness Limited, trading as PE Pathway
Contacthello@pepathway.co.uk  ·  www.pepathway.co.uk
2Our Role: Controller and Processor

Data protection law treats us differently depending on whose data it is and why we hold it.

DataOur role
Pupil data entered by schoolsProcessor. The school is the data controller. We only use pupil data on the school’s instructions, to provide the platform.
School and staff accounts, billing records, website enquiries and feedbackController. We decide how this data is used, as set out in this policy.

Our Data Processing Agreement covers pupil data and forms part of our Terms of Service.

3What Data We Collect

We collect only what is needed to run the platform. We do not collect special category data (such as health, ethnicity or religion) as defined by UK GDPR Article 9.

3.1 School and staff data
3.2 Pupil data
We do not collect pupil dates of birth, home addresses, parent contact details, medical information, SEN records, ethnicity, gender or any other personal characteristic.
3.3 Billing data

Card payments are taken by Stripe. We never see or store card details. We keep the school’s plan, subscription status and Stripe reference numbers.

For schools that pay by invoice, we keep the billing contact’s name and email address, the school’s billing address and invoice and payment records in our accounting software.

3.4 Website enquiries

If you register interest or book a demo on our website, we receive your name, email address, school and role so that we can reply.

4How We Use the Data

We never use pupil data for advertising, profiling, research or any purpose other than providing the platform to the school.

5Legal Basis for Processing
DataLegal basis (UK GDPR)
Pupil dataDecided by the school as data controller, usually public task (Article 6(1)(e)). We process it only on the school’s instructions.
School and staff accountsContract — needed to provide the service the school has subscribed to (Article 6(1)(b))
Billing recordsContract and legal obligation — for example, keeping financial records for tax (Article 6(1)(b) and (c))
Website enquiries, feedback and improving the platformLegitimate interests — replying to people who contact us and keeping the platform working well (Article 6(1)(f))
6AI-Generated Report Comments

PE Pathway uses Anthropic’s Claude AI to draft end-of-block and annual report comments from teachers’ assessments.

7Who We Share Data With

We never sell or rent personal data. We use the trusted service providers below to run PE Pathway. Each may only use the data to provide its service to us, under a data processing agreement, and not for any purpose of its own.

ProviderPurposeLocation
SupabaseDatabase and loginIreland (EU)
ReplitApp hostingEurope
AnthropicDrafting report comments (see section 6)USA
ResendService emails such as invitations and password resetsEU
StripeSubscription paymentsUK, EU and USA
QuickBooks (Intuit)Invoices and accounting records for schools that pay by invoiceUK and USA
CloudflareDomain, website hosting and securityGlobal network
Microsoft 365Our email inbox (hello@pepathway.co.uk)UK / EU
FormspreeWebsite enquiry formUSA
Google Fonts and jsDelivrSupply fonts and code to your browser (they receive your IP address only)Global network

We may also share data with law enforcement or regulators where the law requires it.

8International Transfers

Our main database is in the EU, which the UK recognises as providing adequate protection. Where a provider processes data outside the UK and EU, such as Anthropic, Stripe, Intuit and Formspree in the USA, the transfer is protected by safeguards approved under UK law, such as the UK Addendum to the EU Standard Contractual Clauses or the UK International Data Transfer Agreement, as set out in that provider’s data processing terms.

9Data Security
10Data Retention
11Your Rights

Under UK GDPR, you have the right to:

To use any of these rights, email hello@pepathway.co.uk. We will respond within one month.

Requests about pupil data should go to the pupil’s school, as the data controller. We will help the school respond.
12Children’s Data

Pupil data is entered by teachers acting in their professional role. PE Pathway does not interact with children directly and does not collect data from them.

Schools are responsible for telling parents how pupil data is used, as part of their usual data protection arrangements. We keep pupil data to the minimum needed and send only first names to our AI provider.

13Data Breaches

If a data breach affects personal data, we will notify affected schools without undue delay and give them the information they need. Where required, we will report the breach to the Information Commissioner’s Office.

14Cookies and Browser Storage

The PE Pathway app does not set advertising, analytics or tracking cookies.

15Changes to This Policy

We may update this policy from time to time. We will email schools about any important changes.

16Contact and Complaints

For any data protection question, email hello@pepathway.co.uk.

If you are not happy with our response, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.