Legal
Privacy Policy
How PE Pathway collects, stores, and uses your data — written in plain English.
Version 1.0 · May 2026 · Fit4Fun Sports Dance & Fitness Limited
1Who We Are
PE Pathway is a trading name of Fit4Fun Sports Dance & Fitness Limited, a company registered in England and Wales. We operate an online platform designed to support the delivery, assessment, and reporting of Physical Education in UK primary schools.
| Data Controller | Fit4Fun Sports Dance & Fitness Limited |
|---|
| Contact | [email protected] · www.pepathway.co.uk |
|---|
2What Data We Collect
PE Pathway collects the minimum data necessary to operate the platform. We do not collect sensitive personal data as defined by UK GDPR Article 9.
2.1 School and Teacher Data
- School name, address, and contact details
- Teacher name, email address, and year group
- Login credentials (passwords are stored in encrypted form and are never readable by PE Pathway staff)
- Session delivery activity — which sessions have been opened and marked complete
2.2 Pupil Data
Pupil data is limited strictly to the following. No other pupil data is collected or required.
- First name and surname
- PE grade per session (Working Towards / Expected / Greater Depth / Not Completed)
- Sport and academic year the grade relates to
PE Pathway does not collect pupil date of birth, home address, medical information, SEN status, ethnicity, gender, or any other personal characteristic. Pupil records contain only names and PE assessment grades.
3How We Use the Data
All data collected is used solely for the purposes of operating the PE Pathway platform. Specifically:
- To enable teachers to log in and access structured PE session content
- To save class marking data and display session progress
- To generate end-of-block and annual AI report narratives based on marking data
- To populate the school admin dashboard with whole-school PE delivery data
- To generate Ofsted-aligned PE reports for school use
We do not use pupil data for advertising, profiling, research, or any purpose other than the delivery of the platform service as described above.
4Legal Basis for Processing
PE Pathway processes personal data under the following legal bases as set out in UK GDPR:
| Data Type | Legal Basis |
|---|
| Teacher and school data | Contract — necessary to deliver the platform service the school has subscribed to (Article 6(1)(b)) |
| Pupil assessment data | Legitimate interests — supporting schools in meeting their statutory duty to assess and report on PE as part of the national curriculum (Article 6(1)(f)) |
Schools are the Data Controller for pupil data. PE Pathway acts as a Data Processor on behalf of the school. A Data Processing Agreement (DPA) is available to all subscribing schools on request.
5Data Storage and Security
- All data is stored on servers located within the United Kingdom or European Economic Area
- Data is encrypted in transit (HTTPS/TLS) and at rest
- Access to the platform database is restricted to authorised PE Pathway staff only
- Teacher passwords are hashed using industry-standard encryption and are never stored or readable in plain text
- Pupil data is accessible only to teacher and school admin accounts within the subscribing school
6Data Retention
PE Pathway retains data for as long as a school subscription is active. Upon cancellation:
- The school's account and all associated data remains accessible for 30 days following the cancellation date
- During this 30-day window, the school may export their data via the admin dashboard
- After 30 days, all school data — including teacher accounts, pupil names, and assessment records — is permanently and irreversibly deleted from PE Pathway servers
- PE Pathway does not archive, retain, or transfer cancelled school data to any third party
If a school re-subscribes after the 30-day deletion period, they will begin with a completely fresh account. No historical data will be recoverable.
7Data Sharing
PE Pathway does not sell, rent, or share personal data with third parties for commercial purposes. Data may be shared only in the following limited circumstances:
- With the Anthropic API, for the sole purpose of generating AI report narratives. Only pupil first name, grade, sport, and session count are passed. No other identifying information is included in API calls.
- With hosting and infrastructure providers (including Supabase for database hosting and Resend for transactional email) under appropriate data processing agreements
- With Stripe, for the sole purpose of processing subscription payments. PE Pathway does not store payment card details.
- With law enforcement or regulatory authorities if legally required to do so
8Your Rights
Under UK GDPR, schools and individuals have the following rights in relation to their data:
- Right of access — request a copy of data held about your school or staff
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of data (subject to contractual obligations)
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9Children's Data
PE Pathway is designed for use in schools. Pupil data is entered by teachers acting in their professional capacity and is subject to the school's own data protection policies and parental consent arrangements. PE Pathway does not interact directly with children and does not collect data directly from children.
Schools are responsible for ensuring appropriate parental notifications and consents are in place for the use of assessment platforms, as part of their standard data protection obligations.
10Cookies
PE Pathway uses only essential cookies required to maintain login sessions. We do not use advertising, tracking, or analytics cookies. No third-party cookies are set by the platform.
11Changes to This Policy
We may update this Privacy Policy from time to time. Schools will be notified by email of any material changes. Continued use of the platform following notification constitutes acceptance of the updated policy.
12Contact and Complaints
For any data protection queries, contact: [email protected]
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.