What we collect
- Applications: full name, email address, ADI or PDI status, optional comments, and your confirmations of UK status and agreement to participate in the monthly feedback programme.
- Monthly feedback: the experiences, problems and suggestions you choose to share in replies to the programme emails. These emails are sent and managed manually.
- Historical programme records: information previously supplied, including device details, responses, problem reports, screenshots and any testimonial permission. Existing records are preserved for reference, not used as requirements for the new programme.
- Security data: limited technical information such as session records and rate-limiting data.
Never include real pupil information or other sensitive personal data in application comments or feedback emails. Your use of pupil information within the main ADIZY application remains governed by its own terms and Privacy Policy.
How we use it
We use this information only to select testers, operate the programme, send and review monthly feedback emails, arrange complimentary access under the agreed participation terms, and keep the programme secure. We do not use it for unrelated marketing or add you to an unrelated mailing list. Application approval does not create an account or activate access.
Lawful bases (UK GDPR)
- Consent for voluntary information you choose to provide and for any testimonial publication.
- Fulfilling the programme terms for operating the programme and arranging complimentary access.
- Legitimate interests for fraud prevention and security.
Testimonials
A testimonial is optional. Permission to publish it is a separate, explicit choice that is unticked by default. Nothing is published automatically: a person at ADIZY reviews and approves anything before publication, and you can withdraw permission at any time.
Who processes it
Website application data and historical records are stored using Replit's hosting storage and database services. Website notifications, approval invitations and manager sign-in emails are delivered through Resend. Invitation submission status is retained with the programme record; a successful submission does not confirm delivery to your inbox. Monthly feedback emails and replies are handled manually through the programme manager's company email service. Access to applications and feedback is restricted to the programme manager.
How long we keep it
- Application records and historical feedback are preserved as the programme changes. The previous programme's scheduled deletion no longer applies. The manager reviews retention manually and removes information when it is no longer needed for programme administration, participation terms or legitimate record-keeping.
- Monthly feedback email replies are managed and reviewed manually in the company inbox.
- Email previews: deleted after 7 days. Abandoned screenshot uploads are deleted within a day. Expired access tokens and sessions are cleaned up automatically. Scheduled deletion runs hourly while the service is running.
Cookies
The programme uses a strictly necessary HttpOnly cookie, adizy_beta, for the manager's private sign-in, for up to 8 hours. Participants do not need a separate programme login. Cookies issued under the previous programme expire naturally; the old tester verification cookie, adizy_beta_verify, lasted up to 15 minutes. The main ADIZY application has its own sign-in. See the Cookie Policy.
Your rights
Under UK GDPR you can ask to access, correct, delete, restrict or object to the use of your data, and request portability where applicable. You can withdraw consent or ask for deletion at any time by emailing hello@adizy.co.uk. Withdrawing may mean you can no longer complete the programme. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).