Privacy Policy

Last Updated: 24 July 2026

1. Introduction

Jolly Learning Ltd ("Jolly Learning", "we", "us" or "our") is committed to protecting and respecting your privacy.

This Privacy Notice explains how we collect, use, store, share and protect personal information when you:

• visit our websites;
• purchase products through our online stores;
• use our training platform at training.jollylearning.com;
• use Jolly Classroom;
• use Connect;
• attend our events, webinars or training sessions;
• subscribe to our newsletters or marketing communications;
• contact our customer support teams; or
• otherwise interact with us.

We process personal information in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and, where applicable, other privacy laws in the countries and regions in which we operate, including the European Economic Area and the United States.

2. Who We Are

Jolly Learning Ltd is the organisation responsible for processing personal information as described in this Privacy Notice.

Contact Details

Jolly Learning Ltd
77 Hornbeam Road
Buckhurst Hill
Essex
IG9 6JX
United Kingdom

Email: info@jollylearning.com

Privacy Contact

Responsibility for data protection currently sits with our Chief Executive Officer.

For any questions about this Privacy Notice or your personal information, please contact info@jollylearning.com

3. Scope of this Privacy Notice

This Privacy Notice applies to the following websites, platforms and services operated by Jolly Learning.

Corporate Websites

• www.jollylearning.com

Online Stores

• shop.jollylearning.co.uk
• shop.jollylearning.com
• jollylearning.ie
• jollylearning.co.za
• india.jollylearning.com
• nigeria.jollylearning.com

Educational Platforms

• training.jollylearning.com
• app.jollyclassroom.com
• www.jollyclassroom.com

Partner and Trainer Portal

• connect.jollylearning.com

This Privacy Notice applies to all products, services, websites and digital platforms operated by Jolly Learning unless a separate privacy notice is provided.

This Privacy Notice should be read alongside our Cookie Policy.

4. Personal Information We Collect

The information we collect depends on how you interact with us.

Website Visitors

We may collect:

• IP address
• browser type and version
• operating system
• device identifiers
• pages viewed
• referring websites
• session information
• cookie identifiers

Customers and Purchasers

When you place an order or create an account, we may collect:

• name
• email address
• billing address
• delivery address
• telephone number
• organisation name
• VAT information where applicable
• order history
• payment status
• customer account information

We do not store full payment card details.

Marketing Contacts

We may collect:

• name
• email address
• organisation
• job title
• country
• communication preferences
• event attendance information
• newsletter engagement data

LearnWorlds Users

When you register for training courses, we may collect:

• username
• first name
• last name
• email address
• encrypted password
• course enrolments
• learning progress
• assessment activity
• completion records
• certificates issued

Teacher Accounts in Jolly Classroom

We may collect:

• name
• email address
• school name
• school contact details
• account settings
• platform usage information
• support communications

Pupil Records in Jolly Classroom

Schools may choose between:

• named pupil records; or
• pseudonymised pupil identifiers through Jolly Classroom's Pupil Privacy Mode.

Jolly Learning encourages schools to use the minimum amount of personal information necessary to achieve their educational objectives.

Required information may include:

• first name and surname; or
• unique pupil identifier.

Optional information determined by the school may include:

• date of birth
• gender
• profile photograph
• SEND information
• ESL/EAL information
• educational tracking categories selected by the school
• assessment and progress information

Trainers, Distributors and Partners

When using Connect or participating in our trainer or distributor programmes, we may process:

• name
• email address
• telephone number
• organisation name
• country
• territory information
• training records
• certification status
• account credentials
• communications and support requests
• subscription information
• business relationship information
• platform activity information
  
  

5. How We Collect Information

We collect personal information:

Directly from You

We also collect information generated through your use of our digital platforms, including when you:

• place an order;
• create an account;
• subscribe to newsletters;
• register for training;
• attend events;
• complete forms;
• contact support;
• register for Connect.

From Schools

Schools may provide information about teachers and pupils when using Jolly Classroom.

Information may also be synchronised automatically from school management systems and authorised third-party integrations, including Wonde, where enabled by the school.

Through Technology

We collect information through:

• cookies;
• analytics tools;
• website forms;
• tracking technologies;
• server logs.

Through Third Parties

Including:

• payment providers;
• educational integrations such as Wonde;
• distributors;
• business partners;
• authorised resellers.
  
  

6. How We Use Personal Information

We use personal information to:

• provide products and services;
• process orders;
• manage customer accounts;
• administer training courses;
• issue certificates;
• deliver Jolly Classroom functionality;
• provide access to Connect;
• provide technical support;
• improve our products and services;
• administer events and webinars;
• communicate with customers;
• analyse how our websites, products and services are used in order to improve them;
• comply with legal obligations;
• protect our systems and users;
• send marketing communications where permitted;
• manage trainer accreditation programmes;
• administer distributor relationships;
• facilitate customer support;
• manage educational partnerships.

We may monitor account usage, login activity, IP address information and other platform usage data to:

• protect the security of our services;
• detect unauthorised access;
• identify potential misuse of accounts;
• enforce licensing and subscription terms;
• investigate suspected fraud or abuse; and
• protect the rights of Jolly Learning, our customers and authorised users.
  
  

7. Lawful Bases for Processing

Under UK GDPR we must identify a lawful basis for processing personal information.

Purpose	Lawful Basis
Processing orders	Contract
Delivering online services	Contract
Providing LearnWorlds courses	Contract
Providing Jolly Classroom services	Contract
Providing Connect services	Contract
Customer support	Legitimate Interests
Product improvement	Legitimate Interests
Website analytics	Consent where required
Marketing communications	Consent and/or Legitimate Interests
Fraud prevention	Legitimate Interests
Financial record keeping	Legal Obligation
Compliance requests	Legal Obligation

Where we rely on legitimate interests, we consider and balance our interests against the rights and freedoms of affected individuals.

8. Schools, Teachers and Pupils

Data Controller and Processor Roles

The role of Jolly Learning depends on the circumstances.

School Data

In most cases, schools determine why and how pupil information is used within Jolly Classroom.

In these circumstances:

• the school acts as the Data Controller;
• Jolly Learning acts as a Data Processor.

Our Responsibilities as Processor

When acting as a processor, we:

• process information only on school instructions;
• apply appropriate security measures;
• assist schools with data subject requests;
• assist schools with compliance obligations.

Educational Records

Jolly Classroom may process:

• pupil identifiers;
• names;
• learning activities;
• assessment results;
• attainment information;
• progress records;
• teacher observations.

This information is used to support literacy teaching and educational outcomes.

Importing Data

Schools may create pupil records manually or import pupil information using CSV files.

Schools are responsible for ensuring they have an appropriate lawful basis for uploading pupil information to Jolly Classroom.

Exporting Data

Jolly Classroom does not currently provide functionality allowing teachers or schools to export pupil records directly from the platform.

Special Category Information

Schools may choose to record information relating to educational support requirements, including SEND or other educational support categories.

Schools are responsible for ensuring they have an appropriate lawful basis and any required Article 9 condition before recording such information.

Jolly Learning processes such information solely on the instructions of the school.

Children's Information

Jolly Learning recognises that children's information requires enhanced protection.

We design our educational services using privacy-by-design principles, seek to minimise the personal information required for educational use and provide schools with configurable privacy options, including Pupil Privacy Mode.

Schools remain responsible for providing any required privacy information to parents and pupils regarding their use of Jolly Classroom.

Wonde Integration

Jolly Classroom may integrate with Wonde to facilitate account provisioning and synchronisation of school, staff and pupil information.

Where a school enables Wonde integration, Jolly Classroom may receive the following information from Wonde:

Pupil Information

• first name;
• last name;
• gender;
• date of birth (where available).

Teacher and Staff Information

• full name;
• email address.

Where a new staff member is identified through Wonde and an email address is available, Jolly Classroom may automatically send an invitation email to enable account access.

To support ongoing synchronisation, Jolly Classroom maintains a technical identifier linking pupil and staff records to their corresponding Wonde records.

When records are removed from Wonde:

• pupil records are archived within Jolly Classroom; and
• staff records may be removed from the platform.

Jolly Classroom also records the date and time of successful synchronisation activity for administrative and auditing purposes.

Schools remain responsible for determining whether Wonde integration is enabled and for ensuring they have an appropriate lawful basis for sharing personal information through Wonde.

9. LearnWorlds Training Platform

When users register for courses through training.jollylearning.com we process personal information to:

• manage learner accounts;
• deliver course content;
• record progress;
• administer assessments;
• issue certificates;
• provide learner support;
• process payments.

Payments are processed securely by Stripe.

Certificates may contain personal information such as a learner's name and completion details.

10. Marketing Communications

We may use information about your interactions with our websites, services, training platforms and communications to personalise the information and communications we send to you.

We may send information about:

• products;
• services;
• educational resources;
• training opportunities;
• events;
• webinars;
• promotions.

We may contact:

• existing customers;
• educational professionals;
• subscribers;
• event attendees.

You can unsubscribe at any time using the unsubscribe link included in our communications.

You may also contact us directly to update your preferences.

11. Cookies and Similar Technologies

We use cookies and similar technologies across our websites and digital services.

Cookies are small text files placed on your device when you visit a website. They help websites function effectively, remember preferences, improve user experience and provide information about how websites are used.

We use cookies and similar technologies to:

• provide essential website functionality;
• remember user preferences;
• analyse website performance;
• understand how visitors interact with our websites;
• improve user experience;
• measure the effectiveness of marketing activities;
• support security and fraud prevention.

Full details of the cookies used on our websites, including information about cookie categories, retention periods and how to manage your preferences, can be found in our Cookie Policy.

Where required by law, we will obtain your consent before placing non-essential cookies on your device.

You can withdraw or update your cookie preferences at any time.

12. Analytics and Advertising Technologies

We currently use technologies including:

• Google Analytics 4
• Google Tag Manager
• Google Ads conversion tracking
• Google Merchant Center tags
• Meta Pixel
• HubSpot Tracking Code
• Shopify Analytics / Shopify Customer Events / Shopify Web Pixels
• Microsoft Clarity
• Contentsquare / Hotjar-style session analytics
• Judge.me review analytics
• Yotpo review analytics
• LearnWorlds platform analytics, for the training site

These technologies help us understand how our websites and services are used, improve performance, evaluate marketing activities and better understand customer needs.

Information collected may include:

• device information;
• browser information;
• IP address;
• website interactions;
• pages visited;
• referral information;
• advertising engagement information.

Where required by law, these technologies will only be activated following consent.

13. Sharing Personal Information

We may share personal information with trusted service providers and business partners where necessary to operate our services.

Service Providers

We currently use service providers including:

Provider	Purpose
Shopify	Ecommerce platform and order management
LearnWorlds	Learning management system
HubSpot	Customer relationship management and marketing
Stripe	Payment processing
Google Cloud	Hosting and infrastructure
Google Analytics	Website analytics
Wonde	School data integration
Missive	Customer support and email management
Professional advisers	Legal, accounting and compliance support
Razorpay	Payment processing (India)
PayFast	Payment processing (South Africa)
Cloudflare	Website security and content delivery

We require service providers to process personal information securely and in accordance with applicable data protection laws.

Authorised Distributors and Training Partners

Where necessary, we may share limited customer, school, subscription or training-related information with authorised distributors and training partners in order to:

• fulfil product orders;
• administer subscriptions;
• provide local support;
• provide training services;
• manage customer relationships;
• facilitate Jolly Classroom implementation;
• administer distributor and trainer programmes.

Recipients are required to process personal information in accordance with applicable data protection laws and contractual obligations.

Legal and Regulatory Disclosures

We may disclose personal information:

• where required by law;
• to comply with court orders or legal obligations;
• to respond to lawful requests from public authorities;
• to establish, exercise or defend legal claims;
• to protect our rights, property, users or services.

Business Transfers

If Jolly Learning undergoes a merger, acquisition, restructuring, investment transaction or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality and security measures.

14. International Transfers

Some of our suppliers and service providers may process personal information outside the United Kingdom and European Economic Area.

Where personal information is transferred internationally, we take steps to ensure that appropriate safeguards are in place to protect personal information and ensure that it continues to receive an appropriate level of protection.

Such safeguards may include:

• UK International Data Transfer Agreements (IDTAs);
• the UK Addendum to the European Commission's Standard Contractual Clauses;
• adequacy regulations issued by the UK Government;
• recognised certification frameworks and approved transfer mechanisms.

We carefully assess international transfers of personal information and ensure that appropriate safeguards are in place where required. Depending on the supplier and destination country, these safeguards may include adequacy regulations, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the European Commission's Standard Contractual Clauses or other recognised transfer mechanisms under applicable data protection law.

A current list of our key subprocessors and information about international data transfers is available here.

Although we seek to host personal information in appropriate locations, some of our suppliers may access or process personal information from other countries in order to provide support, maintenance or technical services. Where this occurs, we ensure that appropriate safeguards are in place.

You may contact us if you would like further information about the safeguards used for international transfers.

15. Security

We implement appropriate technical and organisational measures designed to protect personal information against:

• unauthorised access;
• accidental loss;
• destruction;
• misuse;
• alteration;
• disclosure.

Security measures include:

• access controls;
• authentication controls;
• encryption where appropriate;
• secure hosting environments;
• monitoring and logging;
• supplier due diligence;
• staff access management;
• regular review of security practices.

We monitor account activity, authentication events, IP addresses and platform usage information to help detect unauthorised access, fraudulent activity, licence misuse and security incidents. Such monitoring helps us protect our services, customers and users.

Hosting and data residency

Jolly Classroom customer and pupil data is hosted in London, United Kingdom.

Access Controls

Access to personal information is restricted to authorised employees, contractors and service providers who require access in order to perform their duties.

Access permissions are reviewed and managed in accordance with business and security requirements.

Despite our efforts, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security.

Privacy by Design

Jolly Learning considers privacy and security throughout the design, development and operation of its products and services. Where appropriate, we seek to minimise the personal information we collect, provide configurable privacy controls and implement appropriate security measures to protect personal information.

16. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected and to comply with legal, regulatory and contractual obligations.

Our current retention framework is:

Data Type	Retention Period
Customer orders	7 years
Financial records	7 years
Marketing contacts	6 months after consent retracted
LearnWorlds learner accounts	3 years after last activity
Support tickets	3 years
GA4 website event data	14 months

Where Jolly Learning acts as a processor on behalf of schools, retention periods may be determined by contractual arrangements with the school and the school's own retention policies.

Upon termination of services, schools may request deletion of pupil information in accordance with applicable agreements and legal obligations.

Retention periods may be amended where legal, regulatory or contractual requirements apply.

17. Your Rights

Depending on the circumstances and applicable law, you may have the following rights in relation to your personal information.

Right of Access

You have the right to request confirmation of whether we process your personal information and to obtain a copy of that information.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of personal information in certain circumstances.

Right to Restrict Processing

You may request that we restrict the processing of your personal information in certain circumstances.

Right to Data Portability

Where applicable, you may request a copy of certain personal information in a structured, commonly used and machine-readable format.

Right to Object

You may object to processing carried out on the basis of legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

Rights Relating to Marketing

You may opt out of marketing communications at any time by:

• using the unsubscribe link included in our emails; or
• contacting us directly.

Exercising Your Rights

To exercise any of your rights, please contact:

info@jollylearning.com

We may request information necessary to verify your identity before responding to your request.

18. Automated Decision-Making

Jolly Learning does not currently use personal information for automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

We do use automated systems and workflows to support the delivery of our services, communications and marketing activities. For example, automated emails may be sent based on user actions, account activity, course progress, event registrations or customer preferences.

These automated processes are designed, reviewed and monitored by Jolly Learning personnel and are not used to make decisions that have legal or similarly significant effects on individuals.

19. Additional Information for US Residents

If you are a resident of a US state with applicable privacy legislation, you may have additional rights regarding your personal information under the laws of your state.

Depending on your location, these rights may include:

• Right to Know
• Right to Correct
• Right to Delete
• Right to Access
• Right to Opt Out of certain processing activities

Jolly Learning does not sell personal information as defined under applicable US state privacy laws.

Where required, we also recognise browser-based Global Privacy Control (GPC) signals as described in our Cookie Policy.

20. Data Protection Complaints

If you have concerns about how Jolly Learning has collected, used, shared or protected your personal information, we encourage you to contact us first so that we can investigate your concerns and, where possible, resolve them.

You can make a data protection complaint by contacting us at:

Email: info@jollylearning.com

Please include enough information to help us understand your concerns, such as your name, the service you are using (where applicable), and details of the issue.

What You Can Expect

When we receive a data protection complaint, we will:

• acknowledge receipt of your complaint within 30 days;
• investigate your concerns without undue delay;
• contact you if we need any additional information;
• keep you informed where appropriate during our investigation; and
• provide you with the outcome of our investigation and any actions we have taken, where applicable.

If you are not satisfied with our response, or you believe we have not handled your complaint appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: www.ico.org.uk

Telephone: 0303 123 1113

Making a complaint to Jolly Learning does not affect your right to complain directly to the ICO at any time.

21. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect:

• changes to our services;
• changes to our business operations;
• changes in legal or regulatory requirements;
• improvements to our privacy practices.

Any updates will be published on our websites and, where appropriate, notified to users through email, website notices or in-product notifications.

The latest version of this Privacy Notice will always be available on our websites.

We encourage users to review this Privacy Notice periodically to stay informed about how we process and protect personal information.

Contact Us

If you have any questions about this Privacy Notice or the way Jolly Learning processes personal information, please contact:

Jolly Learning Ltd
77 Hornbeam Road
Buckhurst Hill
Essex
IG9 6JX
United Kingdom

Email: info@jollylearning.com

Website: www.jollylearning.com

At Jolly Learning, protecting the privacy of teachers, pupils, schools and families is an important part of how we design and deliver our products and services.

We regularly review our privacy practices to ensure they continue to meet legal requirements and the expectations of the educational communities we serve.