Our policies

Single-page evidence pack for school / MAT / trust procurement teams. Legal entity, insurance, DPIA, sub-processors, data residency, safeguarding flow, DSL named, retention - everything in one place.

Our duty of care to every student, how concerns are identified and handled, and who is responsible.

Operational pathway: how the platform detects, captures, reviews and escalates a safeguarding concern. SLAs, retention, RLS isolation, and how to set up a school-specific DSL queue.

What personal data we collect, why we collect it, how it is stored, and your rights under UK GDPR.

How we comply with the UK GDPR and the Data Protection Act 2018 across all our systems and processes.

School-friendly summary: where data lives (UK / London), lawful bases, retention periods, sub-processors, breach process and how to request our DPA.

Public risk-matrix summary covering account data, learning data, accessibility telemetry, SEND register, and analytics. Full signed PDF available on request - typically what schools need to attach to their own information register.

The dated, versioned list of every third party that processes data on our behalf - Supabase, Cloudflare, PayPal, Stripe, Google. Includes region, DPA reference, and our 30-day change-notification commitment. The page procurement officers usually want to bookmark.

Print-ready summary for school IT, DPOs, and procurement officers. Covers data residency, encryption, access control, MFA, RLS isolation, backups, breach process, and certification roadmap (Cyber Essentials in progress).

What cookies and local storage we use, what they do, and how to manage your preferences.

The terms under which you use SoloCogs - accounts, subscriptions, content, and liability.

On launch: cancel anytime, 14-day cooling-off, pro-rata refunds on annual plans, plus the situations where we always refund (and the ones where we don't).

How the platform may and may not be used - particularly important given our student user base.

How to raise a concern or complaint, what to expect in response, and how to escalate if needed.

How we keep students safe online - platform design, content standards, and incident response.

Our commitment to equitable access and inclusive practice across everything we do.

How to raise serious concerns about conduct, safeguarding, or malpractice - without fear of reprisal.

Who owns the content, how it may be used, and how to report a copyright concern. Includes our notice-and-takedown process.