Skip to main content
Legal

Privacy Policy

This notice explains how Blundens Ltd handles personal data when providing Loudwater and operating the Loudwater website.

Who we are

Blundens Ltd (company number 14230311), whose registered office is at 483 Green Lanes, London, N13 4BS, provides the Loudwater service and trades under the Loudwater name. References to "Loudwater", "we", "us" or "our" in this notice mean Blundens Ltd.

Our data roles

A school, trust or other subscribing organisation is normally the controller of personal data entered into Loudwater for education administration. Blundens Ltd processes that Customer Data on the customer's documented instructions under the Data Processing Agreement.

Blundens Ltd acts as an independent controller for information needed to administer customer accounts, billing, contractual records, security, fraud prevention, service support, website operation and our own legal obligations.

Personal data we collect

  • Names, email addresses, telephone numbers, and school contact details.
  • Account and authentication information needed to access the platform.
  • Customer Data supplied or generated when authorised users use education, workforce, finance, safeguarding and administration features.
  • Billing, order, agreement acceptance and support records.
  • Questions and replies from the website assistant, retained for our authorised team to review enquiries and improve responses.
  • Device, browser, IP address, access, diagnostic and audit information used to operate and secure the service.

Purposes and lawful bases

Where Blundens Ltd is a controller, we process personal data to perform contracts, take requested pre-contract steps, comply with legal obligations and pursue legitimate interests in delivering, securing, supporting and improving Loudwater. We use consent where required, including for non-essential cookies. Where we act as a processor, the customer determines the lawful basis and purposes.

Sharing and service providers

We share personal data only where needed to provide and secure the service, comply with law, establish or defend legal rights, or complete an approved corporate transaction. Suppliers that process personal data for us are subject to contractual confidentiality, security and data protection requirements. We do not sell Customer Data.

International transfers

Where personal data is transferred outside the United Kingdom, we use a lawful transfer mechanism and appropriate safeguards as required by UK data protection law. Customer-specific processing locations and subprocessors are governed by the Data Processing Agreement.

Retention

We retain controller data only for as long as reasonably necessary for the relevant purpose, contractual commitments, dispute resolution and legal obligations. Customer Data is retained and deleted in accordance with the customer's instructions, the agreement and configured retention controls.

Security

We implement commercially reasonable measures to protect personal data, including access controls, encryption, logging, monitoring and incident-management processes. No system can eliminate all risk, and customers remain responsible for their users, permissions, devices and lawful instructions.

Your rights and complaints

Depending on the circumstances, individuals may have rights to access, correct, erase, restrict or object to processing, and to receive portable data. For Customer Data, contact the school or organisation that controls the data first. You may also complain to the UK Information Commissioner's Office.

Parent App account deletion

A Parent App user can request deletion of their mobile account and associated app data, or selected app-specific data without deleting the account, through our account deletion page. Deleting the app account does not automatically erase education records controlled by a school. Those records remain subject to the school's lawful instructions, duties and retention schedule.

Children's privacy

Loudwater is an education administration service used by authorised organisations. Schools and trusts determine why and how student data is processed, and Blundens Ltd processes that data under their instructions and the applicable agreement.

Changes to this privacy policy

We may update this notice where our processing or legal obligations change. Material changes will be communicated through appropriate channels. The date below identifies the current version.

Contact

For privacy enquiries, contact legal@blundens.com. Please identify the relevant school or organisation when the request concerns Customer Data.

Last updated: 30 July 2026