Privacy Policy

This policy applies to vicerta.com only — our public marketing site. The Pencil application at pencil.vicerta.com and any future Vicerta school management platform have their own privacy notices appropriate to those products and the school data they handle.

1. Who we are

Vicerta Corporation Limited is a company registered in England & Wales, company number 15954721, with a registered office in London, United Kingdom. Contact us at hello@vicerta.com for any privacy-related question.

2. What we collect, and why

We only collect data you actively give us, and only what we need.

Design Partner Programme application form

When you fill in the application form on our For Schools page, we collect:

• Your name and role
• Your school's name and type
• Approximate number of pupils and teachers (optional)
• Your email address (and optionally phone number)
• Your written reasons for applying and how you heard about us
• Whether you confirm you can commit your school

We use this information solely to evaluate your application, contact you about the programme, and shape our product roadmap. We do not use it for marketing unless you separately opt in.

Email correspondence

If you email us at hello@vicerta.com or any other vicerta.com address, we keep your email and our reply in our mail provider (currently Resend, which uses AWS SES). We retain it for as long as we have an ongoing relationship, and delete inactive correspondence after 24 months.

Server logs

Our hosting provider (Vercel) keeps short-lived technical logs containing IP addresses, browser type, and request paths. These logs are used to investigate errors and abuse, and Vercel deletes them on a rolling basis (typically within 30 days). We do not extract or analyse these logs ourselves.

3. What we don't collect

Our marketing site uses no analytics cookies, no tracking pixels, no advertising networks, and no social-media trackers. We do not profile visitors. The only cookies set are technical session cookies created by our hosting platform, which are essential for the site to function and contain no identifying information.

4. Legal basis

5. Who we share data with

We don't sell your data. We share it only with the third-party providers that operate our infrastructure:

• Supabase (database hosting, EU region) — stores your application form submission.
• Resend (email delivery, EU region) — sends our application notification emails and any replies.
• Vercel (web hosting, EU/global) — serves the website and keeps short-lived technical logs.

Each of these providers acts as a data processor on our behalf under their own Data Processing Agreement.

6. International transfers

Where data leaves the UK or EEA (for example, certain Vercel edge regions), it is protected by Standard Contractual Clauses and the appropriate UK Addendum.

7. How long we keep it

• Design partner applications: 24 months from your most recent contact, then deleted.
• Email correspondence: 24 months of inactivity, then deleted.
• Server logs: as set by Vercel, typically 30 days.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted
• Object to or restrict our processing
• Receive your data in a portable format
• Withdraw consent (where consent is the legal basis)

To exercise any of these rights, email hello@vicerta.com. We will respond within 30 days.

You also have the right to complain to the UK Information Commissioner's Office if you think we have mishandled your data. See ico.org.uk.

9. Children's data

This marketing site is aimed at adults — teachers, school leaders, and parents. We do not knowingly collect data from anyone under 13. If you believe we have such data, contact us and we will delete it.

10. Changes to this policy

If we change how we use your data, we will update this page and the "last updated" date above. Material changes will be notified to existing applicants by email.