Privacy
Chalkford is a reference site. Reading it requires no account, and the site sets no advertising or analytics cookies. This page says exactly what is collected when you do interact with it.
Who we are
Chalkford is operated by Mynightoff Limited (company number 06129966, registered in England and Wales; ICO registration reference ZC093109). For everything on this page we are the data controller. Contact: privacy@chalkford.com.
What we collect
Three things, and nothing else.
- When you ask for an access code: your email address, and — only if you choose to fill them in — your name, your school or trust, your role, and anything you write in the note field.
- When you suggest a correction to a card: your message, the card it relates to, your email address if you give one, and your browser's user-agent string.
- When you read one of the free pages: the page path, the referring page if there was one, your browser's user-agent string, the two-letter country your request came from, and whether the request looked automated. This is counted so we know whether anyone is reading. It is not tied to a cookie, a session or an identifier, and your IP address is never stored.
We do not use Google Analytics or any other analytics service, we run no advertising, we do no profiling or automated decision-making, and we never sell, rent or share your data for marketing.
Why we're allowed to
- Access requests — steps taken at your request, and our legitimate interest in running a closed beta and replying to you.
- Corrections — our legitimate interest in keeping a reference site accurate, which is the whole point of it.
- Page counts and bot protection — our legitimate interest in knowing the site is used and in keeping the forms free of spam.
Cookies
Only strictly necessary ones, so there is no consent banner to click.
-
ch_access— set when you enter a valid access code, and removed when you sign out. It holds the internal ID of the code you used and a signature proving we issued it. It carries no name, no email address and nothing about what you read. Expires after 30 days. -
ch_in— a companion flag, readable by the page, whose only job is to show the signed-in version of the header without a flash of the wrong one. It grants no access on its own.
Your light/dark preference is stored in your browser's local storage. It never reaches our servers.
Who else processes it
- Cloudflare hosts the site, runs its database and provides the Turnstile check that keeps the forms free of bots. As the network the site sits behind, Cloudflare processes connection data including your IP address, under its own terms and with the appropriate international transfer safeguards. We do not receive or store that IP address.
- Email. Access codes are sent by hand from our own mailbox. There is no bulk mailing list and no marketing platform.
That is the complete list. If it changes, any replacement will offer equivalent or stronger protection, and this page will say so.
How long we keep it
- Access requests — until the beta ends, or 12 months after we decide on the request, whichever comes first.
- Corrections — for as long as the correction matters to the card, since it is part of the record of why the card says what it says. Any email address attached to one is deleted on request.
- Page counts — 12 months.
Your rights
Under UK GDPR you can ask us for a copy of the personal data we hold about you, to correct it, to delete it, to receive it in a portable format, or to object to or restrict what we do with it. Email privacy@chalkford.com and we will respond within one month. There is nothing to prove: ask from the address you gave us and that is enough for us to find it.
If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Children
Chalkford is written for adults working in schools and is not directed at children. We do not knowingly collect data from anyone under 18.
What's on the site
The material Chalkford quotes is published legislation, statutory guidance and inspection guidance — public documents about duties on schools, not personal data about anyone. Nothing on this site relates to an individual pupil, and it must never be used to record or discuss one; see the terms of use.
Changes
We will update this page when what we do changes, and the version and date at the top will move. Material changes will be flagged to anyone holding an access code.