Privacy Policy
Last updated: June 2026
1. Who We Are
Our Planet Needs You (“OPNY”, “we”, “us”) is the data controller for personal data collected through the OPNY School Programme. You can contact us at info@ourplanetneedsyou.com.
2. What Data We Collect
When a school registers interest or completes the onboarding form, we collect:
- School name, address, phone number and website
- School Government ID (DfE URN or equivalent)
- Names and email addresses of school staff (head teacher, sustainability lead, and any additional contacts)
- Aggregate pupil diversity data (gender and ethnicity breakdown — no individual pupil data)
- Consent records (terms, GDPR, photo and marketing preferences)
3. How We Use Your Data
We use the data collected to:
- Process your school's application and manage programme participation
- Set up school portal accounts for authorised staff
- Send programme updates, resources and communications to consenting contacts
- Report on the diversity and reach of the programme in aggregate
4. Lawful Basis
We process school and staff data on the basis of legitimate interests (administering the programme) and consent where explicitly given (marketing communications and photography). Aggregate pupil diversity data is processed on the basis of legitimate interests for equality and diversity reporting.
5. Data Sharing
We do not sell your data. We may share it with trusted service providers (such as our database and email providers) who process data on our behalf and are bound by data processing agreements. We do not share personal data with third parties for their own marketing purposes.
6. Data Retention
We retain school and staff data for as long as the school participates in the programme, and for up to three years after participation ends, after which it is securely deleted.
7. Your Rights
Under UK GDPR you have the right to access, correct, or delete your personal data, to object to processing, and to withdraw consent at any time. To exercise any of these rights, email us at info@ourplanetneedsyou.com.
8. Cookies & CAPTCHA
Our forms use Cloudflare Turnstile to protect against automated submissions. Turnstile may set cookies and collect limited technical data (such as browser signals) to determine whether a submission is from a human. See Cloudflare's privacy policy for details.
9. Changes to This Policy
We may update this policy from time to time. We will notify registered schools of material changes by email.