Last updated: 26/07/26
LITTLETALK SLT LIMITED (company number 16333340), trading as Chatterdillo, provides the Chatterdillo web app and related services. This notice explains how personal information is used when you visit or use the Service directly, and how we support schools that use the Service with learners.
Depending on how the Service is used, we process account email addresses and names, school and role information, learner names and dates of birth, screener answers and recommendations, exercise activity, targets, progress notes, subscription references, support messages, and technical security information. Schools may provide account and learner information to us. We ask users not to enter unnecessary medical or other sensitive information in free-text fields.
We process browser and device information, IP addresses, request and security logs, and cookie choices when needed to operate and protect the Service. If you accept analytics, Google Analytics also processes information about visits and interactions.
Essential cookies and browser storage support security, sessions, and your cookie choice. Google Analytics is loaded only if you accept analytics. Adjust your cookie settings to accept, reject, or change your choice.
sessionid keeps signed-in users connected to their server-side session and normally lasts for the browser session. csrftoken protects forms and requests against cross-site request forgery and may last for up to one year. chatterdillo_cookie_consent is local browser storage that remembers your analytics choice and policy version until storage is cleared or the version changes.
If you accept analytics, Google Analytics 4 may set cookies beginning _ga to distinguish browsers and measure use of the Service. These commonly last for up to two years. We do not load Google Analytics or send analytics events before you accept. Rejecting analytics prevents future Google Analytics requests and removes accessible analytics cookies where possible.
We use personal information to provide and secure accounts, deliver learner exercises and recommendations, show authorised users progress information, administer schools and parent subscriptions, respond to support requests, meet legal obligations, and improve the Service using analytics where permission has been given.
For school-directed learner processing, the relevant school generally decides why the information is used and Chatterdillo handles it on the school's instructions. The school should provide its own privacy information and identify its lawful basis. For direct parent accounts, account delivery and subscriptions are generally necessary to perform the contract. We rely on legitimate interests where necessary to secure, support, and improve the Service, subject to the rights of affected people; legal obligation where the law requires processing; and consent for optional analytics and optional direct marketing. The precise role and basis can vary by activity and school arrangement.
We use measures including encrypted connections, encryption of selected stored fields, password hashing, authentication, role-based permissions, and secure session controls. No online service can guarantee absolute security. We review controls according to the sensitivity and risks of the information processed.
We use service providers where needed to operate the Service. These include Hetzner for hosting, Zoho for transactional email, Stripe for parent subscription payments, Skolon for connected school identity and roster services, Google Analytics when analytics is accepted, and Calendly when a user chooses to book a call. Website asset and network providers may also receive technical request information. Some providers act as independent controllers for parts of their services. We disclose information to authorities or professional advisers where required or permitted by law.
Providers may process information in the UK, EEA, or other countries. Where UK data protection law restricts a transfer, an applicable adequacy regulation or contractual safeguard must be used. Contact us for information about safeguards relevant to your data.
We keep information only for as long as needed for the purpose, school instructions, account administration, legal and accounting duties, security, disputes, and backup cycles. Retention therefore varies by category. We are formalising a category-level retention schedule and will update this notice with specific periods or criteria. A school may instruct us to return or delete school-controlled data, subject to lawful exceptions.
Depending on the circumstances, you may have rights to be informed, access information, correct inaccurate information, erase information, restrict processing, receive portable information, object to processing, and withdraw consent. Rights are not absolute and may need to be handled by the relevant school where it is the controller. Contact our support team. You may also complain to the UK Information Commissioner's Office at ico.org.uk.
Chatterdillo is designed for adult-supervised educational use. Its rule-based screener uses answers to recommend activities; it does not diagnose a condition or make a decision with legal or similarly significant effects. Children can ask a parent, guardian, or school to help them understand how their information is used or exercise their rights.
We may update this notice when our processing or legal obligations change. We will update the date above and provide additional notice where a change materially affects people.
Our Privacy Lead oversees data protection matters. To ask a privacy question or exercise
your data protection rights, contact support@chatterdillo.com or use our
support page.
Registered office: 19 Ganghill, Guildford, Surrey, GU1 1XE. Registered in England and Wales.
