STEMBus
Privacy Policy
This policy explains how STEMBus handles personal information, with a particular focus on our adult feedback form. It is written in plain English for teachers, parents, schools and other visitors.
Last updated: 7 October 2026
This is a draft for your review. A few items are clearly marked “To be confirmed” and should be resolved before this page is publicly promoted.
1. Who we are
STEMBus is the public-facing brand for hands-on STEM learning delivered to schools and communities, including the FIRST LEGO League BIOGLOW season, STEM Maker Sessions and the Solar & Sustainability Academy. STEMBus is operated by StuTech Innovations CIC, a Community Interest Company registered in England and Wales (Company No. 17504775). In this policy, “STEMBus”, “we” and “us” refer to STEMBus / StuTech Innovations CIC.
You can contact STEMBus about this privacy policy or any data enquiry using the details below:
- enquiries@thestembus.co.uk
- 07770 812208
- Riverbank Farm, Beaumont, Carlisle CA5 6EF
2. STEMBus feedback
STEMBus operates an adult feedback form at /feedback.
The feedback form is intended for:
- teachers and teaching assistants
- headteachers and school leaders
- parents and carers
- other adults who have experienced or observed STEMBus activities
The form is not intended for children to submit personal information.
Depending on how somebody completes the form, we may collect:
- their role or category (for example, teacher, parent)
- school or organisation
- STEMBus activity or programme
- date of visit
- 1–5 feedback ratings
- written feedback
- recommendation response
- publication or quotation permission
- name
- role
- email address
Name and contact details are only collected where appropriate to the publication permission option selected. You do not have to provide a name or email address to give feedback.
3. Children’s information
The adult feedback form asks respondents not to include children’s names or other information that could identify an individual pupil in their written feedback.
This statement relates specifically to the feedback system described above. It does not describe every situation in which STEMBus may process information relating to children as part of delivering activities in schools and communities.
4. Why we collect feedback
We may use feedback to:
- evaluate STEMBus activities and programmes
- improve future delivery
- understand educational impact
- prepare programme and funder impact reporting
- analyse aggregate trends such as engagement, teamwork, confidence, curiosity and problem-solving
- understand whether respondents would recommend STEMBus
Where you have given explicit permission, selected comments may also be considered for use as testimonials or quotations, as set out in the “Publication permission” section below.
5. Publication permission
When you submit feedback, you choose one of four permission options:
Private feedback only
We may use your response for internal evaluation and programme or funder reporting, but your comments will not be used publicly for marketing.
Anonymous quotation
We may quote your comments publicly, but we will not identify you or your school or organisation.
School / organisation attribution
We may quote your comments publicly and identify your school or organisation.
Named testimonial
We may quote your comments publicly and use your name, role and school or organisation.
- Feedback is not automatically published.
- Comments are manually reviewed before any public use.
- Selecting a publication option does not mean STEMBus is required to publish your comment.
- Additional permissions or approvals may apply to funded programmes or partner communications.
6. Storage
Feedback submissions are stored using the website’s native PocketBase storage, which runs as part of the website’s Hostinger hosting environment.
Authorised STEMBus personnel can review feedback submissions and export them for legitimate programme administration and evaluation purposes.
To be confirmed before publicationThe precise physical hosting location of the PocketBase data has not been confirmed. Please confirm the data hosting location (for example, the Hostinger data centre region) so this section can be completed, or confirm that it should remain unspecified.
7. Legal basis
Under the UK GDPR, we must have a lawful basis for processing personal information. For the feedback system we rely on the following:
- Legitimate interests — for processing feedback to evaluate and improve our activities, understand educational impact, and prepare programme and funder reporting. This is part of running and improving our educational programmes.
- Consent — for any public use of your comments as a quotation or testimonial, and for collecting your name, role, school or email address where you choose a publication option that requires attribution. You can withdraw this consent at any time by contacting us.
To be confirmed before publicationThis lawful-basis assessment is our proposed approach based on the actual data collection. Please review it with appropriate human or legal input before publication, particularly if any funder or partner requires a different basis for impact reporting.
8. Retention
Personal information should not be retained for longer than is reasonably necessary for the purpose for which it was collected.
To be confirmed before publicationA specific retention period for feedback submissions has not yet been established. Please confirm how long feedback responses (and any personal information within them) should be kept before this page is published.
9. Your data rights
Under UK data protection law you have a number of rights in relation to your personal information. These include:
Access
Ask what personal information we hold about you and receive a copy.
Correction
Ask us to correct information that is inaccurate or incomplete.
Erasure
Ask us to delete your personal information in certain circumstances.
Restriction
Ask us to limit how we use your information in certain circumstances.
Objection
Object to us processing your information in certain circumstances.
Withdrawal of consent
Where processing relies on your consent, withdraw it at any time.
To exercise any of these rights, contact STEMBus using the details in the “Who we are” section above. We may need to verify your identity before responding. Some rights are not absolute; in certain circumstances we may be entitled to refuse or restrict a request where a legal exception applies.
11. Third parties
We only share personal information with third parties where it is necessary to run the feedback system and our programmes.
The feedback system is hosted within the website’s Hostinger hosting environment, which provides the PocketBase storage used to hold submissions. Website images are served from Hostinger’s content delivery network.
To be confirmed before publicationPlease confirm whether any other third-party processors handle feedback data (for example, email or reporting tools used to review or share responses), so this section can be completed accurately.
12. Complaints
If you have a concern about how we handle your personal information, please contact STEMBus first using the details in the “Who we are” section. We will try to resolve your concern promptly.
You also have the right to raise a complaint with the UK Information Commissioner’s Office (ICO), the independent authority that upholds information rights. You can find information about how to make a complaint on the ICO website at ico.org.uk/make-a-complaint, or contact the ICO by phone on 0303 123 1113.
