School data terms

How skip-hop and the Virtual Skipping League handle class and pupil data for schools.

These terms apply when a school enters class or pupil data on skip-hop.co.uk or the Virtual Skipping League (vsl.org.uk). A staff member accepts them for the school the first time they add a class.

Roles

The school is the controller of its class and pupil data. skip-hop is the processor and only uses that data on the school's documented instructions, as set out in these terms. This covers both websites as one service.

What data, and why

Full surnames never leave the school. When a teacher enters or imports a class, a script in their own browser shortens each surname to one or two letters before anything is saved. Full surnames are never sent to skip-hop, never stored on our systems, and never seen by anyone outside the school.

Our commitments

skip-hop will:

  1. Process the data only for the purposes above, on the school's instructions
  2. Make sure anyone with access is bound by confidentiality
  3. Never use pupil data for marketing, profiling or advertising
  4. Help the school answer requests from parents and pupils about their data
  5. Help the school with any data protection impact assessment it carries out

Security

Data is encrypted in transit and at rest. Database access rules mean staff only see their own school's classes, and pupil names can only be read by that school's signed-in staff. skip-hop's admin tools show scores and totals, never names. Admin access is limited to skip-hop's two founders and protected by two-step sign-in.

Sub-processors

The school agrees that skip-hop uses the providers listed in our privacy notice that store class data: Supabase (UK, London) and Netlify. skip-hop will give the school 30 days' notice before adding or changing one, so the school can object.

Breaches

If a breach affects the school's data, skip-hop will tell the school without undue delay, and within 48 hours of becoming aware of it. That gives the school time to meet its own 72-hour deadline for reporting to the ICO.

Ending the service

A school can delete a class or a pupil at any time, and that removes them from both sites. When the account closes, skip-hop deletes the school's class and pupil data within 12 months, or sooner on request. On request, it first sends the school an export.

Audits

skip-hop will give the school the information it needs to show these terms are being kept, and will answer reasonable written questions within 30 days. Contact: info@skip-hop.co.uk, skip-hop, 9 Larkspur Way, Dorking, Surrey RH5 4TS.

Last updated: 16 October 2026.