Privacy notice

Who we are

Allergy Ledger is made by ARX Algorithms. Contact us about privacy at privacy@allergyledger.co.uk.

This website

This website does not use advertising trackers or analytics cookies, and it does not set cookies that need your consent. See our cookie notice.

When you ask about a pilot, a quote or our documents, you send us an email. We use your name, role, school and contact details only to reply to you and set up your school, and keep that correspondence for as long as we need it to do so, and for up to two years after our last contact. Our lawful basis is legitimate interests: responding to a request you made.

The free policy generator runs entirely in your browser. What you type into it is not sent to us.

The Allergy Ledger app

Each school is the controller of the information it records in Allergy Ledger about its pupils, staff and parents. ARX Algorithms acts as the school's processor and handles that information only on the school's instructions and only to run the service. If you are a parent or member of staff, please contact your school first about your information; we will help the school respond.

• Data is stored in the UK (London)
• Pupil data is never sold, shared or used for advertising, analytics or AI training
• Role-based access means each person sees only what their job needs
• Every change is recorded in an audit trail
• Data is encrypted in transit and at rest; the copy kept on a phone for offline use is encrypted and wiped on sign-out
• Notifications and email subject lines never contain health information

Our data processing agreement, DPIA template and list of sub-processors are available on request.

Your rights

You have rights to access, correct and delete your information, to object to or restrict how we use it, and to complain to the Information Commissioner's Office (ico.org.uk). Contact us first and we'll do our best to help.