Privacy Policy
Company
Anatomy Question Pro Limited (“we,” “us,”, “our” and “Running Paper” in this notice) is the legal entity operating and providing services through www.runningpaper.co.uk (“Service” and “Site”).
Anatomy Question Pro Limited is registered in England and Wales (Company Number: 14874659). We are registered with the Information Commissioner’s Office (ICO) and are Cyber Essentials accredited.
Our ICO registration number is ZB706592.
In most cases, we act as a data processor. In these cases, the school will be the data controller, responsible for deciding how and when your school, teacher and student data is collected and used, while we process the data strictly under their instructions. The school will serve as data controllers.
Where we act as a data processor, we have agreements in place with the school that limit how we process personal data, in compliance with applicable Data Protection Legislation. This applies to personal data processed via our platform or any related applications we supply.
When you log in to our platform through our Service, visit our Service, or contact Running Paper support, we will receive certain data directly from you, such as your name and login details. For this data only, we will be the person responsible for deciding how and when your data is used, and we will be the data controller.
Our Service is designed as a platform for teachers
This privacy policy does not apply when we act as a data processor. In those cases, our agreement with the school will apply and you should read the school’s privacy policy or privacy notice to understand what personal data is collected and how it is used and shared.
Definitions
'Service': The Service refers to the platform (www.runningpaper.co.uk) operated by Anatomy Question Pro Limited.
'Personal Data': Personal Data means any information relating to an identified or identifiable individual.
'Usage Data': Usage Data is information collected automatically, such as activity on our Service.
'Cookies': Cookies are small files stored on your device to improve your user experience.
'Data Controller': An entity (in this case, Anatomy Question Pro Limited) that determines the purposes and means of processing Personal Data.
'Data Processor': Third parties that process Personal Data on behalf of the Data Controller.
'Data Subject': Any individual whose data is being processed.
Information Collection and Use
We collect several types of information to provide and improve our Service including:
Personal Data: Examples include your name, email address. This data is used to personalise your experience and communicate with you about updates, promotions, or changes to our Service.
Usage Data: Examples include activity logs (e.g., pages visited, time spent). This data helps us monitor and improve the Service and diagnose technical issues.
Cookies: Examples include session cookies for login continuity and preference cookies to save your settings. These enhance functionality and analytics.
Use of Data
Anatomy Question Pro Limited uses the data we collect for:
Providing and maintaining our Service.
Notifying you of changes to our Service.
Improving user experience through analytics.
Sending you updates or promotional materials (with opt-out options).
Legal Basis for Data Processing
Under the GDPR, we process your Personal Data on the following bases:
Contractual Necessity: To fulfill our obligations in providing the Service.
Consent: When you provide explicit consent for specific activities.
Legitimate Interests: When processing is necessary for legitimate business purposes, such as improving the Service.
Legal Compliance: When processing is required to comply with applicable laws.
Retention of Data
We retain Personal Data only as long as necessary for the purposes outlined in this Privacy Policy. Usage Data may be retained longer for analysis and security.
Data Transfer
We may transfer and process data both within and outside the UK and European Economic Area (EEA). All data transfers are governed by UK GDPR and EU GDPR regulations and done under the Data Privacy Framework (DPF).
All these third-party providers maintain the highest standards of data security, including ISO 27001 certification and strict GDPR compliance protocols. We regularly audit our data processing activities to ensure continued compliance with data protection regulations.
Data transfers to countries outside the UK or EEA are conducted in compliance with applicable laws.
Disclosure of Data
Legal Requirements: We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Third-Party Services
We may share your data with trusted third-party service providers to process your data to facilitate our Service.
Examples include hosting, authentication and email providers.
All third parties comply with strict data protection standards and are contractually obligated to safeguard your information.
All data processing is done under UK GDPR and EU GDPR regulations and the Data Protection Act 2018.
All third-party providers maintain the highest standards of data security, including ISO 27001 certification and strict GDPR compliance protocols. We regularly audit our data processing activities to ensure continued compliance with data protection regulations.
For a list of third parties we work with, please contact us via the 'Contact Us' page.
Analytics
We use Google Analytics, a web analytics service offered by Google that tracks and reports website traffic. In compliance with GDPR requirements, Google Analytics is disabled by default and will only be activated with your explicit consent.
If you choose to opt-in, we use the collected data to track and monitor the use of our Service to improve user experience.
You can manage your analytics preferences at any time through our cookie settings panel.
For more information on the privacy practices of Google, please visit the Google Privacy Terms web page.
Cookies
We use two types of cookies on our Service:
Essential Cookies: These are necessary for the proper functioning and security of our Service. They include authentication cookies provided by Clerk that manage your login sessions and security features. These cookies are strictly necessary and cannot be disabled.
Non-Essential Cookies: These include analytics cookies from Google Analytics that help us understand how users interact with our Service. In compliance with GDPR requirements, these cookies are disabled by default and will only be activated with your explicit consent through our cookie consent banner.
Security Measures
We implement a range of security measures, including encryption, secure servers, and regular audits, to protect your data.
While we strive to use commercially acceptable means to protect your data, no method of transmission or storage is 100% secure.
User Rights
You have the right to access the personal data we hold about you and request corrections or deletions where appropriate.
You may request a copy of your data in a structured, machine-readable format and request that we transfer it to another provider.
You have the right to object to data processing or restrict certain data processing activities.
To exercise your rights, please contact us via the 'Contact Us' page.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons.
We will notify you of material changes by posting the updated policy on our website with a new effective date.
Contact Information
If you have any questions about this Privacy Policy, please contact us via the 'Contact Us' page or write to us at:
Anatomy Question Pro Limited, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ