Privacy Policy

1. Who we are

BlueberryML Ltd (“BlueberryML”, “we”, “us”, “our”) is a company registered in England and Wales. Our registered address is 2nd Floor, College House, 17 King Edwards Road, Ruislip, London, HA4 7AE.

We build and license ClassGrade — an AI-powered adaptive learning platform. This privacy policy explains how we handle personal data in connection with our website (blueberryml.com) and our business operations.

2. Data we collect

Website visitors

When you visit blueberryml.com we may collect standard server log data including IP address, browser type, pages viewed, and referring URL. This data is used solely for security and analytics purposes and is not linked to any individual.

Enquiry submissions

If you submit an enquiry via our contact form, we collect your name, organisation, email address, and message content. This data is used solely to respond to your enquiry and is not shared with third parties for marketing purposes.

Platform users (ClassGrade)

Student, teacher, and parent data within the ClassGrade platform is processed by BlueberryML as a data processor on behalf of our client (the data controller). Please refer to your institution's own privacy notice for details of how your data is handled within ClassGrade.

3. How we use your data

• To respond to enquiries you submit via our contact form
• To maintain the security and performance of our website
• To fulfil our contractual obligations to ClassGrade licence partners
• To comply with legal obligations

We do not use personal data for unsolicited marketing, profiling, or any purpose other than those stated above.

4. Legal basis for processing

We process personal data on the following legal bases under the UK GDPR:

• Legitimate interests — website security, analytics, and responding to unsolicited enquiries
• Contract — processing necessary to deliver ClassGrade services to licence partners
• Legal obligation — where processing is required by law

5. Sub-processors and data sharing

We use a small number of third-party sub-processors to deliver our services, including Anthropic, Google Cloud, Deepgram, and Amazon Web Services. All sub-processors are subject to Data Processing Agreements and operate under equivalent data protection standards.

We do not sell personal data. We do not share personal data with third parties for their own commercial purposes. Full sub-processor details are available in our GDPR & Data Sovereignty page.

6. Data retention

Contact enquiry data is retained for no longer than 12 months, or until the enquiry is resolved, whichever comes sooner. Website log data is retained for a maximum of 90 days. Platform data retention is governed by the terms of each client's Data Processing Agreement.

7. Your rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate personal data
• Erasure of your personal data (“right to be forgotten”)
• Restriction of processing in certain circumstances
• Object to processing based on legitimate interests
• Data portability where processing is based on consent or contract

To exercise any of these rights, please contact us at our registered address or via the contact form. We will respond within 30 days.

8. Cookies

blueberryml.com uses only technically necessary cookies required for the website to function. We do not use tracking cookies, advertising cookies, or third-party analytics cookies that require consent.

9. Contact and complaints

For any privacy-related questions, contact us at:

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.