Privacy

Egino privacy notice

How the current pilot website handles information, including Behaviour Support Hub use and enquiries.

Last updated: 3 November 2026 · Free Behaviour Support pilot

Who is responsible?

Egino Education is currently operated by Ceri Murray, trading as Egino Education, and is not yet a registered limited company. Ceri Murray is responsible for the account, enquiry and service-administration information described here. Contact eginoeducation@outlook.com for privacy questions or requests. If a company takes over the service, we will explain any change in responsibility.

This service is for adult education and coaching professionals. It is not intended for children to register or submit their information. Schools remain responsible for their own pupil records and professional decisions.

Behaviour descriptions and generated support

Do not enter names, dates of birth, addresses, school identifiers or details that could identify a pupil or player. Health, ALN and safeguarding details can be sensitive even without a name; use only the minimum general context necessary. Do not use this tool to record incidents or report safeguarding concerns.

In this static pilot, the Education and Sports Describe tools generate suggestions in your browser using locally supplied rules. The inspected code does not send the entered description or generated plan to an AI provider, Supabase or an Egino plan-history database. Education Describe can submit a fixed broad category and strategy code to protected school reporting. The description and plan remain in the browser. Sports Describe does not contribute to this Education reporting.

Descriptions and plans remain in the open page while you use it; the application does not deliberately save them for later retrieval. Your browser may restore page contents, and anything you print, download, copy or photograph becomes a separate record under your control. Clear the page and close the tab after use, especially on shared devices. This is not a guarantee that your browser or device retains nothing.

Suggestions are for professional consideration. They do not diagnose, assess a child or make automated decisions about someone’s education, care or access to services. A qualified adult must decide what is appropriate.

Information we use and why

  • Accounts and school access: email address, user identifier, any supplied display name, organisation membership, staff role, product permissions and trial/subscription dates. You provide some details; a school administrator or Egino may provide your invitation and role. Supabase processes credentials and authentication/session records. We use these to deliver and secure the requested service.
  • Service emails: your email address, invitation/password-reset message and delivery information are handled through Supabase and Resend. Never share password-reset links with others.
  • Enquiries: name, email, setting type and the message you submit through our Netlify contact form or Outlook email. Please exclude identifiable pupil/player details. We use these to respond and arrange support.
  • Technical information: hosting, authentication and email providers may process IP addresses, browser/device information, request times, security events and delivery logs to operate and protect the service.
  • Billing tests: an owner-only Stripe sandbox is used to test subscriptions. There is no automatic charge for this free pilot. Do not enter real card details in sandbox tests. Stripe receives checkout and test-payment details when its checkout is opened.

Providing account information is necessary to access protected tools; without it we cannot verify access. Enquiries are optional.

Lawful bases

We use legitimate interests to administer school-requested staff accounts, respond to enquiries, deliver a controlled professional pilot, prevent misuse and secure the service. Those interests are providing useful support while limiting data collection and protecting users. Where you personally enter into a service agreement, steps requested before a contract and performance of that contract may apply. We use legal obligation where a specific law requires a record. We do not treat reading this notice as consent.

You may object to processing based on legitimate interests. Email us and explain your circumstances. We will consider your request and explain any compelling reason or legal requirement that prevents us stopping.

Browser storage and shared devices

Supabase uses persistent browser storage for authentication. Egino also caches your email, role, organisation and permissions to display the correct platform. Signing out clears the application’s account profiles and local sign-in session. Sign out before leaving a shared device.

Language/setting preferences, recently visited tool links, and helpful/not-helpful clicks may remain in local storage until you clear site data. These are device-local, not a school-wide analytics service. Older builds may also have stored behaviour categories/timestamps, leadership prototype notes or CPD reflections/completion flags on the device. CPD is not part of this pilot. Use the button below to remove Egino’s optional local history/prototype records without deleting your sign-in session.

No advertising tracker or third-party audience analytics script was identified in the supplied ZIP. Hosting and security logs are separate. This inspection does not verify browser extensions, Netlify-injected features or later deployment changes. External font and script downloads can still disclose technical request information to their providers.

Providers and their privacy information

We use the following services for the stated purposes. Their notices supplement this notice; they do not replace Egino’s responsibilities.

External resources you choose to visit have their own privacy practices. We do not send your behaviour description with those resource links.

International processing

Providers and their subprocessors may process information outside the UK. Selecting an Ireland sending region in Resend controls where messages are sent from; it does not make all stored data UK/EU-only. Resend states that customer data is stored in the United States. Provider contracts describe their international-transfer arrangements, which may include applicable adequacy arrangements or standard contractual clauses and a UK addendum. Contact us for information about safeguards relevant to your use. We do not promise UK-only storage.

How long information is kept

Account and membership records are needed while you have access and while we resolve trial closure, access disputes or support requests. Trial expiry blocks access; it does not automatically erase the account. You may request closure/deletion by email. We review what remains necessary when a trial closes and remove or anonymise information that no longer has a service, security or legal purpose.

Enquiries and related correspondence are retained while dealing with your request and any resulting work or dispute; we review closed enquiries and remove unnecessary detail. Security and email-delivery logs and backup copies follow the provider’s configured retention and deletion cycles. We can explain the applicable settings on request. A deletion from the active system may not immediately remove time-limited backups.

Optional local browser data remains until cleared through this page or your browser. Printed or exported copies are controlled by whoever keeps them. We do not yet claim an automated deletion schedule or a fixed provider-log retention period.

Your rights and complaints

Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your personal information, and object to processing based on legitimate interests. Rights are subject to legal conditions. We may need proportionate information to verify your identity. Contact eginoeducation@outlook.com; do not send identity documents unless requested through an agreed secure route. We normally respond within one month, subject to lawful extensions.

If a school manages your account, you can also contact its administrator or data protection contact. We will explain our role and help route requests where necessary. We do not sell your personal information.

You can complain to the Information Commissioner’s Office (ICO). You do not have to contact Egino first, although we welcome the opportunity to resolve a concern.

This notice will be revised when the operator, products, providers or processing change. A Welsh-language version of this revised notice is not yet available; contact us for assistance in Welsh.

Protected school reporting

Education support generation submits only a school identifier, random request reference, approved category/strategy codes and reporting week. A restricted account identifier is attached by the server for access checks, duplicate control and minimum-contributor thresholds. Optional helpful/not-helpful feedback is stored once per request. This is pseudonymous data, not a claim of complete anonymity. No description, pupil details, generated plan, precise activity timestamp or free-text feedback is accepted by this reporting endpoint.

Authorised school SLT/admin members see the last eight completed weeks only. Each reportable group requires at least five contributing accounts; counts appear in ranges of five. Current-week data, individual activity and raw reporting records are not available to leaders. These controls reduce identification risk but cannot eliminate every inference from knowledge held outside Egino.

The reporting purpose is understanding support-seeking patterns and perceived usefulness, under the legitimate interests described above. It does not measure incident prevalence, individual staff performance or intervention effectiveness. A maximum of 50 requests per account per week can contribute. Restricted reporting rows are kept for a rolling 12-week window; daily deletion and deletion during report capture/read enforce that window after backend activation. Provider logs and backups have separate retention. Contact Egino about access, objection or deletion requests. Reporting becomes available only after its backend setup has been activated and verified.

School administration and invitations

Egino owners and authorised school administrators manage staff email addresses, school membership and roles. Invitations reserve a school licence while account creation is in progress. New accounts receive a Supabase/Resend invitation; existing accounts use their existing password. Authorised administrators can see membership and account-setup status for their school. Staff and SLT cannot administer school memberships.

Restricted invitation records include email, role, organisation, request status and the administrator responsible. Access-change audit records contain actor/target account identifiers, organisation, action and date. These support access administration and security under our legitimate interests. Automatic cleanup of these administration records has not yet been activated. Records currently remain until reviewed and removed through an authorised process. A proposed schedule is under review: release unfinished reservations after seven days, delete completed/cancelled/failed invitation records after 90 days, and delete access-change audit records after 180 days. Authentication accounts, memberships, provider logs and backups follow their separate retention arrangements. Removing school access suspends that school membership; it does not delete the person’s account or other memberships.