SchoolJewel

Security and supplier information sheet

6 November 2026 · Version 1.2

Plain-language answers to the questions governors, trusts and IT leads usually ask a supplier. Last reviewed November 2026.

Question	Answer
Who runs SchoolJewel?	Vladimir Keves, a sole trader trading as LD Pro, 6 Coldhams North, Huntingdon, England, PE29 1UB. ICO registration ZB688986.
Roles under UK GDPR	The school or trust is the controller of pupil and staff information; LD Pro is the processor. For its own account, payment, support and security information, LD Pro is a controller.
Hosting and location	Websupport s. r. o. (EU). Our hosting provider is based in the European Union, and all of our servers are located within the European Union. Encrypted backups are held with Amazon Web Services (AWS) S3 storage in the European Union. No pupil information is transferred outside the UK or EEA.
Backups	Backups of the database, which holds all personal information, are encrypted on our server before they leave it, and are then copied to encrypted storage with Amazon Web Services (AWS) S3 in the European Union. Backups are overwritten on a rolling basis and are kept for up to 90 days from the date each backup was created.
Encryption	All traffic uses HTTPS. Backups of the database, which holds all personal information, are encrypted on our server before they leave it, and stay encrypted in storage.
Access control	Three roles. Pupils can only see their own points, prizes and messages. Teachers can only manage their own class. School Leaders can only see their own school. Every request is checked for a valid session, a security token and ownership of the information involved. Browsers cannot choose whose data they ask for.
Staff passwords	Teacher passwords are randomly generated (14 characters), shown once and stored only in hashed form. Creating a new password logs out every open session. Teacher and pupil accounts have no access to the WordPress administration area, and email password-reset is disabled for them.
Pupil login	Pupil usernames and passwords are generated by SchoolJewel and printed on login cards (with an optional QR code). They are designed for young children and are held so that teachers can reprint cards. They unlock only that pupil’s own points, prizes and messages, which contain nothing sensitive. A teacher can issue a new password at any time.
Data minimisation	No pupil email addresses, dates of birth, addresses, photographs or sensitive data. Pupils cannot type free text, upload files or message anyone. Names are chosen by the school, and full names are not needed.
Integrity of points	Each award or removal is recorded in a history. Per-school locking prevents conflicting changes, and a repeated submission cannot be saved twice.
Deletion	A teacher can delete a pupil, and a School Leader can delete a class, at any time. Linked records are removed. A whole school is deleted within 30 days of a request.
Staff access	Limited to what is needed to provide support and maintain the service. Bound by confidentiality.
Incidents	We notify the School Leader of a personal data breach without undue delay, aiming for within 48 hours.
Sub-processors	Websupport s. r. o. (EU); Amazon Web Services (AWS) S3 storage in the European Union (encrypted backups only). See the Services and sub-processors list. At least 30 days’ notice before any change.
AI and profiling	No AI features and no AI training on pupil data. No advertising profiling. Points and Personal Best are simple calculations and are not used to make decisions about pupils.
Cookies and analytics	A small number of cookies to log in, keep the site secure, remember settings and count visits (basic Google Analytics statistics: pages viewed and visit length, never names or information entered into the platform). No advertising and no cross-site tracking. See https://schooljewel.com/privacy/.
Accessibility	Built for keyboard and screen-reader use, strong colour contrast, large touch targets, and a text-to-speech Listen button for younger pupils. An accessibility statement is on our website.
Your own supplier questionnaire	We are a small independent supplier and are happy to complete your school’s or trust’s questionnaire. Email info@schooljewel.com.