Privacy policy
Last updated 8 November 2026
In short: schools use BumpSlip to record accidents, incidents and illness. The school decides what is recorded and is responsible for that information; we look after it for them, keep it in the UK, and never sell it or use it for advertising.
1. Who we are
BumpSlip is run by BumpSlip Ltd. For anything about privacy, email info@bumpslip.com.
2. Our two roles
For pupils, parents and school staff using BumpSlip, the school is the “controller”: it decides what is recorded and why. We are the school’s “processor”: we only handle that information to provide BumpSlip, on the school’s instructions, under our Data Processing Agreement. If you are a parent or carer, your child’s school’s own privacy notice explains how it uses this information, and the school is the right place to ask about it.
For people who visit this website, contact us or buy BumpSlip for a school, we are the controller, and this policy explains what we do.
3. Information we process for schools
When a school uses BumpSlip, it may contain:
- Pupils: name, class, date of birth, unique pupil number (UPN) and any medical note the school adds (for example an allergy or asthma).
- Parents and carers: name, phone number and email address, and when they opened their copy of a slip or tapped “I’ve read this”.
- Incidents: what happened, where and when, treatment given, whether a parent was contacted, the outcome, who collected the pupil, and the history of any changes.
- School staff: name, school email address, role, and a record of the slips they logged, approved or changed.
Incident and medical details are information about health, which the law treats as especially sensitive. We protect it accordingly.
4. Information we collect as controller
- Enquiries: if you email us or book an intro call, we keep your name, school, role, contact details and our messages, so we can reply and follow up. Our lawful basis is legitimate interests.
- Customers: the school’s billing contact, address and subscription details, to provide the service, bill for it and keep accounts. Our lawful bases are contract and legal obligation (we keep accounting records for six years). Card payments are handled by our payment provider; we never see or store full card numbers.
- Website and app: our hosting provider keeps short-term technical logs (such as IP address, browser and the page requested) to keep the service secure and working. Our lawful basis is legitimate interests.
7. Where information is kept
School records are stored in the United Kingdom, in London. Emails are sent through a provider in Ireland, in the EU, which the UK recognises as giving adequate protection. Where a supplier is based outside the UK, we make sure UK safeguards are in place, such as the UK International Data Transfer Addendum.
8. How long we keep it
- School records: for as long as the school uses BumpSlip, because accident records need to be kept. When a school leaves, it has 30 days to download its records, and we then delete them within 90 days.
- Links sent to parents stop working after 30 days; the slip itself stays in the school’s records.
- Enquiries: up to two years after our last contact, unless you become a customer.
- Billing records: six years, as the law requires.
- Technical logs: a short time, normally no more than 30 days.
9. Your rights
You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how it is used, and to have it moved to another provider. Some of these rights have exceptions, for example where a school must keep an accident record.
If your request is about information a school holds in BumpSlip (for example about your child), please ask the school, as it is the controller. If you contact us instead, we will pass your request to the school and help it respond. For anything else, email info@bumpslip.com. We will reply within one month.
10. Children
Pupils don’t use BumpSlip themselves. Information about children is entered by school staff and handled with extra care: each school can only see its own pupils, and slips only reach the parent or carer on the school’s records, after the school office has approved them.
11. Complaints
If you are unhappy with how we have handled your information, please tell us first at info@bumpslip.com. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
12. Changes to this policy
We will update this page when anything changes and tell customer schools by email about important changes.