Privacy notice

How we look after data

Last updated 3 November 2026.

The short version

The lab doesn't collect names, email addresses or accounts. This website has no cookies, no analytics and no trackers. Pupils' work is used only to run their Make Day, isn't used to train AI, and is deleted 30 days after the day.

Who is responsible

Make Day Lab is run by RDZZ LTD, a company registered in England and Wales (number 14352914), registered office 483 Green Lanes, London, England, N13 4BS. For anything in this notice, including a request to see or delete data, email privacy@makeday.co.uk.

• During a school's booked Make Day, the school is the controller of its pupils' data, and RDZZ LTD processes it on the school's instructions.
• For this website, the free try, enquiries, bookings and our emails to schools, RDZZ LTD is the controller.

During a booked Make Day

The lab keeps a random ID for each tablet, what pupils type, their creations (including any drawing they cut out) and a log of requests. Pupils' typed words are cleared from the log after 7 days. Everything else is deleted 30 days after the day, once the school has its file of every creation. Photos are sent to the AI for one request and aren't stored. The age a pupil taps stays on the tablet. The full table is on the safety and data page.

We process this data only on the school's instructions, keep it confidential and secure, use only the sub-processors below, help the school with requests and incidents, and delete it as described. We'll sign a data processing agreement on request.

The free try

Anyone can try the lab from this website. It handles the same data as a Make Day, with RDZZ LTD as controller, on the basis of our legitimate interest in letting teachers try what they might book. What visitors type is cleared after 7 days, and everything else made in the free try is deleted after 30 days. The lab saves a random ID, the code and your latest creation in your browser's own storage, because it can't work without them. It doesn't use cookies or trackers. Please don't type personal details into it.

If you email us or book

We keep your name, role, school, email address, the details of your booking and our messages. We use them to answer you, run your Make Day and invoice you, on the basis of our contract with your school or, for enquiries, our legitimate interest in answering them. Booking and invoice records are kept for six years, because company accounting records require it. Enquiries that don't lead to a booking are deleted after 12 months.

If we contacted your school

We may have emailed your school once about Make Day Lab. The controller for that contact is RDZZ LTD, as above.

• Where your details came from: the general contact address your school publishes on its own website, and public records about the school and its legal entity (the DfE's Get Information about Schools and Companies House).
• What we keep: the school's name, its legal entity, the contact address we used and the page it was published on, when we contacted you, and any reply. We don't keep anyone's personal name.
• Why, and on what basis: legitimate interests (Article 6(1)(f) UK GDPR) in telling schools about a service made for them. Each email is written for your school and sent by a person. There are no tracking pixels, and we send at most one follow-up.
• How long: deleted 12 months after our last contact if nothing comes of it.
• Stopping it: reply "no", or email privacy@makeday.co.uk. We then delete your details and keep only a short record so we don't contact you again.

Who else sees it

• Cloudflare hosts the lab. A booked school's database is restricted to the EU; the free try's database is in Western Europe.
• Our AI model provider runs the AI in the United States. It deletes what it receives within 30 days, unless a request is flagged under its usage policy or the law requires otherwise, and it doesn't train its models on this data. Transfers to the US are covered by its data processing addendum, which includes the ICO's International Data Transfer Addendum. Schools that book get the provider's name in our data processing agreement.
• Vercel hosts this website.
• Porkbun forwards email sent to our makeday.co.uk addresses, and Google provides the mailbox it arrives in.

Each of them acts under contract. We don't sell or share data for anyone else's marketing, and there's no advertising anywhere.

Your rights

You can ask for a copy of your data, ask for it to be corrected or deleted, object to how it's used, or ask for it in a portable format. Email privacy@makeday.co.uk and you'll have a reply within one month. For pupils' data from a booked Make Day, we'll help the school answer. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.