Who is responsible
Simon Tomlins, trading as Boardpatch, is responsible for how your personal information is used. Email support@boardpatch.co.uk. Business information.
Adults’ accounts and supervised use
Accounts are for adults, including teachers and tutors, not pupils. Children may use resources with adult supervision. Do not enter identifiable, confidential or sensitive pupil information, including names, assessment records or safeguarding information.
Information we use
- Account email, user identifier, sign-in and confirmation status, session/security information and timestamps.
- Saved favourites, monthly clean-output usage, document references and generation status.
- Worksheet content submitted for protected previews and final rendering, and generated documents held for private delivery.
- Support messages and information you choose to include.
- Technical request/security information processed to deliver and protect the service.
- Once payments are activated: Stripe customer, billing and subscription references/status. Boardpatch does not itself store your full card details.
Place Value Counters, Bar Model Builder and Times Tables Arrays can save boards in your browser’s local storage. These boards stay in that browser on your device; they are not saved to your Boardpatch account or synchronised across devices. This is separate from account favourites. Some other interactive work also happens in your browser. Protected document generation also sends content to server-side services; it does not happen solely on your device.
Services involved
- Supabase: authentication, account/database records, favourites, allowances, entitlements and private storage.
- Cloudflare: website delivery, DNS, incoming support-email routing and protected final-document rendering.
- Resend: confirmation, recovery and transactional account email.
- Support inbox: messages sent to support@boardpatch.co.uk are forwarded to Boardpatch’s private support inbox, hosted by Microsoft Outlook.com. We use those messages to answer your enquiry. The private destination address is not published.
- Stripe, once activated: payments, subscriptions and customer portal.
- Google, once activated: basic identity through openid, email and profile. Google sign-in does not grant Premium.
Protected Science printables use the approved asset library and preserve credits. The Classification Key and Solar System tools also request image information from Wikipedia and load images from Wikimedia directly in your browser. These requests disclose your IP address, browser/request information and the requested image or article to Wikimedia; Boardpatch does not send your account details or saved favourites with them. Wikimedia processes these requests under its Privacy Policy. Following an external source or attribution link takes you to another provider’s website.
Purposes and legal bases
We use information to provide sign-in, favourites, requested documents and subscriptions, respond to support requests and protect the service.
Retention and deletion
We keep your account details and favourites while you have an account. To request deletion, email support@boardpatch.co.uk. We verify your identity and normally complete deletion within 30 days. We revoke access, stop any future subscription renewals and remove your favourites, worksheets and other account information that is no longer needed. Any refund rights still apply.
- Issued documents are available for 24 hours. Generated files and their worksheet content are deleted within 48 hours of generation. Content from a generation confirmed as failed or abandoned is deleted within 48 hours of that confirmation.
- Generation records are kept for 90 days after completion. Monthly allowance records are kept for 90 days after the relevant month ends. A minimal record prevents the same request being counted again for 12 months from the original request; it contains no worksheet content and cannot reopen an expired document.
- Our account-security and service diagnostic records are kept for up to 90 days. Providers may use shorter log periods. Active sign-in and security settings are kept while needed for your account.
- Resolved support correspondence is kept for 12 months and reviewed for deletion monthly. Resend’s Free-plan email and delivery logs are retained for 30 days under its provider-managed retention.
- Necessary billing and accounting records are kept separately, normally for five years after the relevant 31 January tax-filing deadline. For billing after account deletion, Boardpatch keeps only the minimum restricted payment, subscription and refund references, amounts, statuses and retention dates needed to handle later payment, cancellation, refund or dispute events. This does not preserve or restore your account or Premium access. Stripe holds the underlying payment records.
- Operational backups are kept for 30 days. Protected recovery copies are removed once replacement recovery checks have passed. A minimal deletion record is kept for 30 days and until older recovery copies are removed, so an old backup cannot restore your account to normal service.
We may retain specific information for longer where a genuine legal obligation or ongoing dispute requires it, and remove it when that reason ends. Boards saved only in your browser remain on your device until you clear them.
Your rights and choices
Change your password from Account. For access, correction, deletion, restriction, objection or portability requests, contact support@boardpatch.co.uk. Rights depend on the processing and legal basis. We may verify identity before acting. You can raise a concern with the ICO.
Account details are needed to provide account features; without them those features are unavailable. We will update this notice when relevant practices change.