Legal

Privacy Policy

Last updated: 10 June 2026

Back to C3NTR

1. Who We Are

C3NTR is a knowledge platform for structured-learning schools, developed and operated by andBeyond.digital Ltd (registered as ANDBEYOND.DIGITAL LTD) ("andBeyond", "C3NTR", "we", "us", or "our"). We are a company registered in England & Wales, company number 17260951, with registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), andBeyond.digital Ltd is the data controller of personal data collected through this website, the early-access programme, and the C3NTR mobile and web products. Our ICO registration is currently pending.

You can contact our Data Protection Lead regarding data matters at info@c3ntr.app.

2. What Data We Collect

We may collect and process the following personal data:

  • Full name, provided when you complete the early access form.
  • Phone number, provided when you complete the early access form, used to contact you about your request.
  • Technical data, including your IP address, browser type, operating system, and pages visited, collected automatically via server logs and analytics tools.
  • Communications, any information you include when contacting us by email.

We do not collect payment card details, government identification, or special-category data (as defined in Article 9 UK GDPR) through this website.

3. How We Collect Your Data

  • Directly from you, when you submit the early access form or email us.
  • Automatically, through server logs and, where applicable, analytics cookies when you visit this website. We collect only the minimum data necessary for site operation and improvement.

4. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR Article 6:

  • Legitimate interests (Article 6(1)(f)), processing your name and phone number to fulfil your early access request and to communicate with you about C3NTR. Our legitimate interest is conducting our business and providing the service you have requested. We have assessed this against your rights and interests and consider it appropriate.
  • Consent (Article 6(1)(a)), where we use non-essential cookies or analytical tracking, we rely on your explicit consent, which you may withdraw at any time.
  • Legal obligation (Article 6(1)(c)), where we are required to retain or disclose data to comply with applicable law.

5. How We Use Your Data

  • To respond to and fulfil your early access request.
  • To send you updates about C3NTR's development, launch timeline, and related news (you may opt out at any time).
  • To improve this website and our service through aggregated, anonymised analytics.
  • To comply with legal obligations and respond to lawful requests from authorities.

We will not use your data for automated decision-making or profiling as defined in UK GDPR Article 22.

6. Data Sharing & Third-Party Processors

We share your personal data only with trusted third-party processors who act on our instructions and are bound by data processing agreements:

  • Google LLC / Firebase, our primary platform provider. Form submissions are processed by a Firebase Cloud Function hosted in europe-west2 (London) and stored in Cloud Firestore within the same region. Email notifications are delivered via Gmail (Google Workspace). Processing occurs within the UK / EEA. See Google's Privacy Policy and Firebase Privacy.

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

The full, current list of sub-processors engaged for the C3NTR mobile app and web portal — including Google / Firebase, Stripe, Pexels, and Cloudflare Turnstile — is published at c3ntr.app/subprocessors.html, with a 30-day change-notice subscribe form.

7. International Data Transfers

Personal data collected through the early access form is processed and stored within the United Kingdom / European Economic Area (Google Cloud region europe-west2, London). No transfer outside the UK/EEA is required for core form processing. Where any ancillary Google infrastructure operates outside these regions, Google's EU Standard Contractual Clauses and UK International Data Transfer Addendum apply. You may request details by contacting us at info@c3ntr.app.

8. Data Retention

We retain personal data collected through the early access form for up to 2 years from the date of collection, or until you request deletion, whichever is sooner. After this period, data is securely deleted or anonymised.

Technical data (server logs) is retained for up to 90 days for security and diagnostic purposes.

9. Your Rights Under UK GDPR & DPA 2018

As a data subject in the United Kingdom, you have the following rights:

  • Right of access (Article 15), request a copy of the personal data we hold about you.
  • Right to rectification (Article 16), request correction of inaccurate or incomplete data.
  • Right to erasure (Article 17), request deletion of your personal data ("right to be forgotten"), subject to our legal obligations.
  • Right to restriction (Article 18), request that we limit how we use your data in certain circumstances.
  • Right to data portability (Article 20), receive your data in a structured, machine-readable format where technically feasible.
  • Right to object (Article 21), object to processing based on legitimate interests, including for direct marketing purposes.
  • Right to withdraw consent, where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@c3ntr.app. We will respond within one calendar month, as required by UK GDPR Article 12. There is no charge for most requests.

10. Cookies

This website may use strictly necessary cookies required for basic site operation. We do not currently deploy advertising or social-media tracking cookies. If we introduce optional analytics cookies in the future, we will present a consent notice and update this policy accordingly. For full details of the cookies we use and how to manage them, see our Cookie Policy.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. All data in transit is encrypted using TLS. Access to personal data is restricted to personnel with a legitimate business need.

No transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

12. Personal-Data Breaches

If a personal-data breach occurs that creates a risk to the rights and freedoms of natural persons, we will notify the affected school's leader (the email associated with the schoolLeader account in the C3NTR portal) without undue delay, and in any event within 72 hours of becoming aware of the breach, as required by UK GDPR Articles 33–34. The notification will include the nature of the breach, the categories and approximate number of data subjects and records affected (so far as known), the likely consequences, and the measures taken or proposed.

School leaders are responsible for passing on breach notice to affected members of their school. We will also notify the Information Commissioner's Office (ICO) where the law requires.

Notification of a breach does not constitute an admission of fault or liability.

13. Supervisory Authority & Complaints

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters:

  • Website: ico.org.uk
  • Helpline: 0303 123 1113
  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address your concern directly before you contact the ICO.

14. AI Features and On-Device Processing

C3NTR includes two categories of AI functionality. Both are designed to keep your data within your control:

  • On-device semantic search, a small AI model bundled inside the C3NTR mobile app. All search processing runs locally on the user's device. No article content, search queries, or personal data are transmitted to any external server for this purpose.
  • AI writing assistant (optional), available only in the C3NTR web portal. School leaders may connect their own API key for a third-party AI provider (Anthropic Claude or OpenAI ChatGPT). The key is stored in the school leader's own browser using localStorage on the C3NTR web portal and is never transmitted to or stored by C3NTR's servers. When a user chooses to generate content, the request is sent directly from their browser to the relevant AI provider using their own key. The content of those requests is governed by the AI provider's own privacy policy. C3NTR has no visibility into those requests. The mobile app does not include an AI writing assistant.

No AI feature in C3NTR profiles individual students, makes automated decisions about individuals, or sends personal data to third-party AI services without the deliberate action of the school leader.

15. Content Import and On-Device Processing

C3NTR includes a content import feature that allows school leaders and instructors to bring in content from documents, web pages, and shared files. The following applies to how data is handled during this process:

  • On-device processing, when you import a URL, the page is fetched directly from your device to the source website. C3NTR does not proxy, cache, or store the fetched page on its servers. Text extraction and image detection happen locally on your device.
  • Saved content, any text or images you choose to import are saved to your school's content library in Firestore, in the same way as content you create directly. This data is subject to the same storage, access, and retention policies described elsewhere in this document.
  • Source attribution, the original URL is stored alongside imported content for reference. This metadata is visible only to members of your school with appropriate permissions.

No personal data from external websites is collected, stored, or processed by C3NTR during the import process. The feature does not track, profile, or build records of which external websites users visit.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

17. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, please contact us: