Privacy Policy

Highlight Teaching

Version 1.1 • Last updated: July 2026

1. Introduction

Highlight Teaching Ltd (“Highlight Teaching”, “we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect when you visit our website, create an account, purchase our products or services, or otherwise interact with us; how and why we use it; who we share it with; and the rights you have in relation to it.

We are the “controller” of your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Registered company name: Highlight Teaching Ltd

Company registration number: 17325134

Registered office: Suite RA01, 195–197 Wood Street, London E17 3NU

Email for privacy matters: info@highlightteaching.co.uk

ICO registration number: ZC193619

This policy should be read together with our Cookie Policy and our Terms & Conditions, both available on our website.

2. The personal data we collect

We collect and process the following categories of personal data:

Identity and contact data — your name, email address, and where relevant your job title, school or organisation, and its address.
Account data — your username, password (stored in encrypted form), account settings, licence type and purchase history.
Transaction data — details of products and services you have purchased, order references, invoicing details and payment status. Payments are processed by secure third-party payment providers; we do not store complete payment card numbers on our systems.
Technical and usage data — your IP address, device identifiers, browser type and version, operating system, login dates and times, pages visited, and records of Content accessed and downloaded under your account.
Marketing and preference data — your marketing preferences and your interactions with our emails (such as opens and clicks, where our email provider records these).
Communications data — the content of enquiries, support requests, complaints, reviews or feedback you send us.

We do not intentionally collect any special category data (such as health or religious information) and ask that you do not include such information in communications with us. We do not knowingly collect personal data relating to children: our website and products are directed at education professionals and purchasers aged 18 or over.

3. How we collect your data

We collect personal data: directly from you, when you create an account, make a purchase, subscribe to updates, complete a form or contact us; automatically, through cookies and similar technologies when you use our website (see our Cookie Policy) and through the operation of your account (such as download and access logs); and from third parties, such as confirmation of payment from our payment providers, or details provided by your school, trust or employer where it purchases a licence covering you as a named or authorised user.

Where your school or organisation purchases a licence under which you are an authorised user, it is responsible for ensuring it is entitled to share your details with us for that purpose.

Purpose

Creating and administering your account; processing orders and payments; delivering Digital Content

and services; providing customer support

Lawful basis (UK GDPR Article 6)

Performance of a contract

Sending service communications (order confirmations, delivery emails, renewal reminders, changes to terms)

Performance of a contract / legal obligation

Performance of a contract / legal obligation.

Keeping accounting, tax and company records

Legal obligation

Legitimate interests (protecting our intellectual property, preventing fraud and securing our services)

Monitoring account activity, download patterns, IP addresses and device identifiers to detect licence misuse, account sharing, fraud or unauthorised access, and enforcing our Terms & Conditions and licences

Maintaining the security of our website and systems, including backups and incident response

Legitimate interests (network and information security)

Improving our website, products and services, including analysing usage on an aggregated basis

Legitimate interests (understanding how our services are used and improving them)

Consent; or, for existing customers, legitimate interests relying on the “soft opt-in” (see Section 5)

Sending marketing emails about our products and services

Responding to enquiries, complaints and legal claims

Legitimate interests (managing our business and legal position); legal obligation where applicable

14. Changes to this policy

4. How and why we use your data

We use your personal data only where the law allows us to. The table below sets out the purposes for which we process personal data and the lawful basis we rely on for each.

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms and concluded that our processing is proportionate; you may object to such processing at any time (see Section 10).

14. Changes to this policy

5. Marketing

Where you have bought from us or enquired about our products, we may send you marketing about similar Highlight Teaching products and services under the “soft opt-in” rules, and you will be given a clear opportunity to opt out at the point your details are collected and in every message we send. In all other cases we will only send marketing to individuals with consent. Where we send marketing to organisational email addresses (for example, a school office address), we do so in accordance with the rules applicable to corporate subscribers, and we honour opt-out requests in all cases.

You can opt out of marketing at any time by using the unsubscribe link in any marketing email or by contacting info@highlightteaching.co.uk. Opting out of marketing will not affect service communications relating to your purchases or account.

11. Automated decision-making

We do not sell your personal data. We share personal data only with:

Service providers acting on our behalf under contracts that protect your data, including: Wix.com Ltd, which hosts and operates our website and online store; Wix Payments, which processes payments made through our website (together with its underlying banking and card-acquiring partners); Microsoft 365, our email and productivity provider; Wix’s built-in analytics and, with your consent, Google Analytics (provided by Google Ireland Ltd and Google LLC); and video hosting and webinar platforms (YouTube);
Professional advisers, including our accountants, insurers and legal advisers, where reasonably necessary;
Authorities and regulators, including HMRC, courts, law enforcement and the Information Commissioner’s Office, where we are legally required or permitted to do so; and
A buyer or successor in the event of a sale, merger or reorganisation of our business, in which case this policy will continue to apply to your data.

Where a school, trust or organisation holds the licence under which you access our Content, we may confirm to that organisation whether named users are registered and provide aggregate usage information relevant to its licence.

7. International transfers

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Automated systems may flag unusual account activity (such as excessive downloading) for review, but any decision to suspend or terminate an account or licence is taken by a person.

Some of our service providers process data outside the United Kingdom. In particular, Wix (our website, store and payments platform) processes data on servers in the European Economic Area, the United States and Israel, and Google Analytics data may be processed in the United States. Where personal data is transferred outside the UK, we ensure an adequate level of protection through one or more of: transfers to countries covered by UK adequacy regulations (which include the EEA and Israel); the UK Extension to the EU–US Data Privacy Framework, for certified US providers; or the UK International Data Transfer Agreement or Addendum incorporating standard contractual protections. Details of the safeguards applying to a particular transfer are available on request.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes for which it was collected:

Account data — for as long as your account is active, and for up to 24 months after your account is closed or last used, unless a longer period is needed for the purposes below;
Transaction and accounting records — at least six years from the end of the financial year to which they relate, as required for tax and company law purposes;
Licence and enforcement records (including download logs relevant to suspected misuse) — for the duration of the licence and up to six years thereafter, reflecting limitation periods for legal claims;
Marketing data — until you opt out or your consent lapses, after which we retain only the minimum needed to honour your opt-out; and
Enquiries and correspondence — up to 24 months after the matter is closed.

When personal data is no longer needed, we delete it securely or anonymise it.

Our website uses cookies and similar technologies. Essential cookies are used on the basis of our legitimate interests in operating the website; all other cookies (such as analytics) are used only with your consent, which you can give or withdraw through our cookie banner and settings. Full details are set out in our Cookie Policy.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, reputable hosting providers, and restricting access to personal data to those who need it. Payment card data is handled by Wix Payments, a PCI-DSS compliant payment service, and is not stored in full on our systems. No transmission over the internet is completely secure, but we take the protection of your data seriously and will notify you and the ICO of any personal data breach where the law requires us to do so.

10. Your rights

Our website and resources may contain links to third-party websites and services. This policy does not apply to those third parties, and we encourage you to read their privacy notices.

Under the UK GDPR you have the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete data;
erase your data in certain circumstances;
restrict our processing in certain circumstances;
data portability — receive certain data in a structured, commonly used, machine-readable format;
object to processing based on legitimate interests, and to direct marketing at any time; and
withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at info@highlightteaching.co.uk. We will respond within one month of receiving your request (extendable by up to two further months for complex requests, in which case we will tell you). We may need to verify your identity before acting on a request. These rights are not absolute and may be subject to exemptions under data protection law; where we rely on an exemption we will explain this in our response.

11. Automated decision-making

We may update this policy from time to time. The latest version, with its version number and date, will always be published on our website, and we will take reasonable steps to bring material changes to the attention of registered users.

12. Cookies

13. Third-party links

15. Complaints

Our website and resources may contain links to third-party websites and services. This policy does not apply to those third parties, and we encourage you to read their privacy notices.

14. Changes to this policy

If you have any concern about our use of your personal data, please contact us first at info@highlightteaching.co.uk and we will do our best to resolve it. You also have the right to complain at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues: www.ico.org.uk or 0303 123 1113.

Privacy Policy

1. Introduction

2. The personal data we collect

3. How we collect your data

Purpose

Lawful basis (UK GDPR Article 6)

14. Changes to this policy

4. How and why we use your data

14. Changes to this policy

5. Marketing

11. Automated decision-making

7. International transfers

8. How long we keep your data

9. Security

10. Your rights

11. Automated decision-making

12. Cookies

13. Third-party links

15. Complaints

14. Changes to this policy

15. Complaints

6. Who we share your data with