Privacy notice for poppop.studio

Last updated 6 October 2026

About this privacy notice

This notice explains how we collect and use your personal data when you use poppop.studio. We follow the General Data Protection Regulation (GDPR).

Who we are

We are the team at poppop.studio. We control how your personal data is used.

The data controller is Jonathan Holden, jonny@poppop.studio.

What personal data we collect and how we use it

When you We collect Why we collect it How long we keep it
Use our contact form
  • Your name
  • Your email address
  • The message you send us
  • When you contacted us
  • We need it to reply to your message
  • We need it to keep a record of our conversation
  • Our legal basis is our legitimate interest in responding to your message
 2 years after your last message
Use our support form or email support@poppop.studio
  • Your name, if you give it
  • Your email address
  • Your school or organisation, if you give it
  • Which product your request is about
  • Your message, and any files or pictures you send with it
  • Our replies, and yours
  • When you contacted us
  • We need it to answer your request
  • We need it to keep a record of the conversation, in case you get back in touch about it
  • Our legal basis is our legitimate interest in supporting the products we provide
  • Our support inbox is hosted by Google Workspace, so emails you send us are stored there too
 2 years after your request is closed, then deleted automatically
Sign up for our newsletters
  • Your email address
  • Your name (optional)
  • When you subscribed
  • Which newsletters you signed up for
  • You've asked to receive our newsletters
  • Our legal basis is your consent
 Until you unsubscribe
Create an account
  • Your name
  • Your email address
  • Your password (stored securely)
  • Your local authority
  • When you registered
  • We need it to create and manage your account
  • Our legal basis is our legitimate interest in providing the account-based tools you've registered to use
 While your account is active. If you ask us to delete your account, we'll delete your data too.
Use Ask Ai Free
  • The question you asked
  • The answer given, with its sources
  • When you asked
  • Your name, if you were signed in
  • To see how the tool is actually used and to improve it
  • Our legal basis is our legitimate interest in running and improving Ask Ai
  • To generate the answer, your question is sent to Anthropic, the company that makes Claude, the Ai model Ask Ai uses. If it's a follow-up, the earlier questions and answers in the same conversation are sent too
 12 months with us, then deleted automatically. Anthropic keeps a separate copy on their own systems for up to 30 days, then deletes it too.
Use Spoke
  • The checklist progress you save
  • You've asked us to save your checklist progress
  • Our legal basis is our legitimate interest in providing the Spoke checklist tool
  • Your checklist progress is shared with colleagues at the same local authority, matched by your email domain or, if you registered as a partner of a council, added by us at your request, rather than kept as a private individual copy
 While your account is active. If you ask us to delete your account, we'll delete your data too.
Read Learn lessons while logged in
  • Which lessons you've completed
  • To show you your own progress through a course
  • Our legal basis is our legitimate interest in showing you your progress
  • This is private to your account, not shared with anyone else
 While your account is active. If you ask us to delete your account, we'll delete your data too.
Get Learn lessons by email
  • Your name and email address
  • Which course you joined and when
  • Which lesson is next and when the last one was sent
  • Any pause date you set
  • To send you one lesson a day and let you pause and pick up again
  • Our legal basis is that you asked us to send them
  • Each email goes out through Sender, the service we use to send email, which keeps a record of delivery
 While you are enrolled. If you ask us to delete your account, we'll delete your data too.

Ask Ai and Anthropic

Ask Ai is built on Claude, an Ai model made by Anthropic. Anthropic doesn't use your question to train their models, and automatically deletes it from their own systems within 30 days, separately from how long we keep it (see the table above).

Sending your question to Anthropic means sending it outside the UK, to their servers in the United States. See "International transfers" below for how that's safeguarded.

Your data protection rights

You have the right to

  • See what data we have about you
  • Change any incorrect data
  • Have your data deleted
  • Stop us using your data
  • Move your data somewhere else
  • Remove your consent for newsletters

To use any of these rights, please contact us through our contact page.

Cookies and tracking

We use only necessary cookies to make our website work. We don't use tracking cookies.

International transfers

We keep your data in the European Economic Area (EEA), with two exceptions. Ask Ai sends your question to Anthropic, who process it in the United States. Our email, including the support inbox, is hosted by Google Workspace, and Google may store and process emails in the United States.

Both transfers are covered by the UK International Data Transfer Addendum to the EU's Standard Contractual Clauses, the standard legal safeguard for sending personal data to a country, like the US, that doesn't have its own UK adequacy decision.

How to complain

If you're unhappy with how we use your data, you can

  • Contact us so we can try to fix the problem
  • Contact your local data protection authority, for example the ICO (opens in a new tab) in the UK

Updates to this notice

When we change this notice, we'll update the date at the top of this page.

How to contact us

Use our contact page or email jonny@poppop.studio if you have questions about your privacy.