Privacy Policy: Challenge for schools
Auris Tech Limited
Last updated 2026-09-10
Who this addendum is for
This addendum is for schools that register for the National Read Aloud Challenge. It explains what we hold about your school, what you will receive, and what becomes your responsibility.
Everything else (who we are, how we secure data, where data is stored, international transfers, your rights, and how to contact us) is in the Privacy Policy. That policy and this addendum together are our privacy notice for you.
1. How the Challenge works for a school
Parents enter their own children, not schools. You can register, rally your pupils and receive results, but you cannot enter a child yourself and you do not hold pupil accounts. Your results are built from the children whose parents chose to link them to you.
2. What we hold about your school
| Data | Why we have it |
|---|---|
| Details of your school, including its name, type, location and size | To identify the school, attribute results to it, and produce regional and like-for-like rankings |
| Name, role and work contact details of the person registering | To run the Challenge with you, send you results, and answer your questions |
| Sign-in details for your Challenge account | To let you sign in, and to keep the account secure |
| How you heard about us, and any partner who referred you | To understand how schools find the Challenge, and to credit a referring partner |
| Correspondence with us | To answer your questions and keep a record of what we told you |
Auris Tech is the controller for this information.
We rely on legitimate interests to register your school and run the Challenge: you chose to enter, and we need a named contact and basic details about your school in order to run it and to get the results back to you. You can object at any time, though we may not be able to keep your school in the Challenge if you do.
We rely on legitimate interests to record how you heard about us, and to follow up with you about Fonetti afterwards, on the basis that a school which has run a reading challenge is likely to have a professional interest in a reading platform. If you would rather not hear from us, reply to any message and say so, or use the unsubscribe link in any marketing email. We keep only enough of a record to make sure we honour that. Section 10.3 of the Privacy Policy explains how we approach marketing to schools.
3. What you receive about children
Where a parent chooses to link their child to your school, you receive their data in two stages:
- When they link: their name and their child’s name, so that you know which of your pupils have joined and can encourage others.
- After the Challenge closes: a report covering each of those children individually, alongside your school’s own totals.
Section 6 of the Challenge addendum sets out exactly what the report contains, because that is the disclosure the child’s parent is told about and agrees to.
We rely on legitimate interests to act on the link: a parent who uses your code is asking us to connect their child to you, and you need to know which of your pupils have joined in order to run your side of the Challenge.
A parent can remove the link, or object to it, at any time. That stops the report, so a child whose parent has unlinked will not appear in it, though it does not remove what you have already seen.
4. What this means for your school
- We are not processing pupil data on your behalf. Registering for the Challenge does not make us your processor, and there are no processing terms between us for pupil data. If your school also uses the Fonetti School Platform, that is a separate arrangement with its own terms.
- You become a controller of the report. From the moment you receive it, your own privacy notice, retention rules and lawful basis apply to the children’s data in it. We cannot delete it from your records on a parent’s behalf, and parents asking about your copy need to come to you.
5. Published results
Separately from the leaderboards, we may publish figures that identify nobody, for example your school’s total reading hours or its position in a ranking of schools.
Individual children appear in public results only where their own parent has opted in, and never through anything your school decides. If you would like your pupils named or photographed in Challenge publicity, we will ask each child’s parent directly, because they are the ones who entered and a school cannot give that consent on their behalf.
6. How long we keep it
| Data | Retention period |
|---|---|
| School registration, contact and sign-in details | 3 years after your last Challenge |
| Correspondence with us | 12 months |
| Our copy of your post-Challenge report | Deleted 3 years after the Challenge closes, whether detailed or summary. Your copy is yours to manage |
| Year-on-year Challenge figures | Kept indefinitely, so that we can report on the Challenge from one year to the next. These are totals and averages, not records about individual children |
7. Your rights
The details we hold about the person registering are that person’s own personal data, and they have the rights set out in section 14 of the Privacy Policy. Email support@fonetti.com to use any of them.
Rights requests from a parent about their child’s data go to the parent’s own route, not through your school. Where a parent contacts us about data in a report we have already sent you, we will tell them it is yours and, if they ask, help them approach you.