Last updated: January 2026

Cwmwl Clyd | Cosy Cloud (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you interact with our website, services, and educational mindfulness platform.

This policy is written to reflect our work specifically with schools in Wales and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

Cwmwl Clyd | Cosy Cloud is a bilingual (Welsh & English) online mindfulness and well-being platform designed specifically for schools in Wales.

Data Controller:
Cwmwl Clyd | Cosy Cloud
Cardiff, Wales, United Kingdom

Email: contactcosycloud@gmail.com

We are responsible for deciding how and why your personal data is processed.

2. Who This Policy Applies To

This Privacy Policy applies to:

• Teachers and school staff
• School administrators
• Website visitors
• Email subscribers
• Local authorities, partners, and organisations engaging with our services

Our platform is designed for use by children, but accounts, subscriptions, and access are managed by adults (schools and educators).

3. Children’s Data and Schools

Protecting children’s privacy is extremely important to us.

• We do not knowingly collect personal data directly from children through our website.
• Pupils may access mindfulness content under the supervision and control of their school.
• Any pupil-related information used by schools (e.g. class feedback, wellbeing reflections) should be anonymous, aggregated, or non-identifiable.
• Schools act as Data Controllers for pupil data they choose to share, and Cwmwl Clyd acts as a Data Processor where applicable.

If we ever become aware that personal data relating to a child has been collected unintentionally, we will delete it promptly.

4. Information We Collect

a) Information You Provide

We may collect:

• Name
• School or organisation name
• Email address
• Role (e.g. teacher, headteacher)
• Messages sent via contact forms or email

This information is collected when you:

• Contact us
• Sign up for updates or resources
• Register for trials, pilots, or training
• Purchase or access services

b) Automatically Collected Information

When you visit our website, we may collect:

• IP address
• Browser type and device
• Pages visited and time spent
• Referring websites

This data is collected using tools such as analytics software and is used only for statistical and performance purposes.

5. Cookies

Our website uses cookies to:

• Ensure essential functionality
• Understand how visitors use our site
• Improve user experience

Non-essential cookies (such as analytics) are used only with your consent, managed via our cookie banner. You can change your preferences at any time through your browser settings.

6. How We Use Your Information

We use personal data to:

• Provide and manage our services
• Communicate with schools and educators
• Respond to enquiries
• Deliver resources, training, and updates
• Improve our platform and content
• Meet legal and contractual obligations

We do not sell personal data.

7. Lawful Basis for Processing (UK GDPR)

We process personal data under the following lawful bases:

• Consent – where you opt in to receive communications
• Contract – where data is required to deliver services to schools
• Legitimate interests – to operate and improve our platform
• Public task – where schools use our services to support pupil wellbeing
• Legal obligation – where required by law

8. Email Communications

If you subscribe to our mailing list or receive communications from us:

• We will only send relevant information
• Every email includes an unsubscribe option
• You can withdraw consent at any time

9. Sharing Your Information

We may share data only when necessary with:

• Trusted service providers (e.g. website hosting, email platforms)
• Educational or research partners involved in approved pilots
• Legal or regulatory authorities where required

All third parties are required to handle data securely and lawfully.

10. Data Retention

We retain personal data only for as long as necessary:

• Enquiries: up to 12 months
• Email subscribers: until you unsubscribe
• School accounts: for the duration of the relationship and a reasonable period afterwards
• Analytics data: anonymised and retained for performance analysis

11. How We Protect Your Data

We use appropriate technical and organisational measures to safeguard data, including:

• Secure hosting
• SSL encryption
• Limited access to data
• Trusted third-party providers

12. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Request correction or deletion
• Restrict or object to processing
• Withdraw consent
• Request data portability
• Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO website: https://ico.org.uk

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

14. Contact Us

If you have questions about this Privacy Policy or how we handle data, please contact:

Cwmwl Clyd | Cosy Cloud
Cardiff, Wales, United Kingdom
Email: contactcosycloud@gmail.com