Last updated: 22 August 2026
This notice explains what personal information Forkhill collects when you use the learning app, why we need it, and what you can do about it. It is written for students and for the parents and guardians who set accounts up.
The data controller is Forkhill Tuition, a business name of Peter O’Hagan (sole trader) ("Forkhill", "we", "us"), operated by Peter O'Hagan.
If you have any question about this notice, or want to exercise any of the rights described in section 8, email that address and a person — not an automated system — will answer.
Forkhill serves students in both the Republic of Ireland and Northern Ireland. Which rules apply depends on where you are.
| If you are in | The law is | Your regulator is |
|---|---|---|
| Republic of Ireland | The EU General Data Protection Regulation and the Data Protection Act 2018 | The Data Protection Commission (DPC) — dataprotection.ie |
| Northern Ireland | The UK GDPR and the Data Protection Act 2018 | The Information Commissioner's Office (ICO) — ico.org.uk |
Your rights are substantially the same under both. Where the two differ in a way that matters — most importantly the age at which a young person can agree to this on their own — that is called out below.
The app sends a small, limited diagnostic report to our Supabase database when it encounters an error. It contains the error message, where it happened, the screen that was showing, and the app version. It is capped per page load and is not designed to contain answers, notes, question content, or anything typed into a learning field.
The learning app contains no Meta pixel or advertising tracker. On a Forkhill course landing page,
Meta measurement is off unless an adult visitor accepts it. If accepted, Meta may set _fbp
and _fbc cookies and Forkhill keeps the campaign and click references long enough to connect
a completed purchase to the advert. The app also stores the sign-in session, the last course chosen,
the exam-date reminder and a short-lived pending purchase choice. Clearing browser storage removes
these items and signs you out.
What we do not collect. We do not ask for your address, phone number, date of birth, school, or photographs. Card details are entered on Stripe's checkout page, not into the Forkhill learning app, and Forkhill does not receive or store the full card number or security code.
| What for | Lawful basis |
|---|---|
| Creating your account and letting you sign in | Performance of a contract with you |
| Marking answers, tracking progress, scheduling reviews, and building your daily plan | Performance of a contract with you |
| Improving how questions are marked, by reviewing patterns in where the marking scheme and students disagree | Our legitimate interest in a teaching product that marks fairly |
| Keeping accounts secure and preventing misuse | Our legitimate interest in a safe service |
| Recording limited technical errors so we can operate and repair the service | Our legitimate interest in a reliable and secure service |
| Taking payment, keeping transaction records and handling refunds or billing questions | Performance of a contract, and our legal and accounting obligations |
| Measuring whether a Facebook advert led to a landing-page visit or completed purchase | Your consent — off unless you accept it, and you can change your mind |
| Answering your emails and handling billing questions | Performance of a contract, and our legal obligations |
We do not make any decision about you by automated means that has a legal or similarly significant effect. The app's marking and progress tracking are automated, but they are advisory: they never lock content, and they are not used to exclude anyone from anything.
The mistake notebook is designed to be private to you.
To be straightforward with you: Forkhill runs the database your notes are stored in, so it is technically possible for us to access them. We will only do so where it is genuinely necessary to operate or repair the service, or where the law requires it. Please do not put sensitive personal details about yourself or anyone else into a note — the prompts are there to capture what went wrong in a question, and that is all they need.
Forkhill is a study tool for exam-year students, so many of our users are under 18.
Regardless of that, our policy is stricter and simpler: if the student is under 18, a parent or guardian must set up the account, agree to these terms, and arrange payment. The account is bought by an adult on the student's behalf.
We aim to follow the ICO's Age Appropriate Design Code for users in the UK. In practice that means: we collect the least we can, settings default to the most private option, advertising measurement is off until an adult accepts it, there is no learning-profile marketing, no behavioural nudging, and nothing that pressures a student to keep using the app.
A parent or guardian can ask us at any time to show them what we hold about their child, correct it, or delete it. Where a student is old enough to understand the request themselves, we will normally involve them in it too.
We do not sell your information, and we do not share it for anyone else's marketing. We use a small number of service providers who process data on our instructions:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Hosts the database and manages sign-in. Your account and learning records live here. | European Union |
| Supabase (email) | Sends account emails such as confirmation and password-reset links. | European Union |
| Stripe | Hosts card checkout, processes payment, helps prevent payment fraud, and keeps transaction records. | Stripe may process data internationally using its published data-transfer safeguards. |
| Cloudflare | Delivers and protects the public app. In doing so it processes ordinary network information such as IP address and request details. | Cloudflare's global network, using its published data-transfer safeguards where required. |
| Meta | Only after consent on a course landing page, measures visits and completed purchases. For a purchase this may include campaign and click references, purchase value and currency, and a one-way hashed version of the purchaser's email so Meta can attribute the sale. No answer, grade, lesson, review or private-note data is sent. | Meta may process data internationally using its published data-transfer safeguards. |
Your account and learning records are stored in the European Union. Forkhill is based in Northern Ireland, so those records move between the UK and the EU under the adequacy arrangements in force. Stripe and Cloudflare may process the limited information described above outside the UK and EU under their contractual transfer safeguards. We will update this notice if the providers or arrangements materially change.
We advertise on Facebook. The learning app contains no Meta pixel and Forkhill never sends Meta answers, grades, lesson activity, review history or Mistake Notebook content. If an adult accepts measurement on the course landing page, a completed purchase is sent to Meta with the limited details described above. The choice can be changed through the landing page's Privacy & cookie choices button or by emailing us.
We may also disclose information if we are legally required to, or where it is necessary to protect someone's safety.
Under both Irish and UK data protection law you can ask us to:
Email forkhilltuition@gmail.com and we will respond within one month. There is no charge.
If you are unhappy with how we have handled your information, you can complain to your regulator: the Data Protection Commission in the Republic of Ireland, or the Information Commissioner's Office in Northern Ireland. You do not have to come to us first, though we would rather have the chance to put it right.
Access to the database is restricted per account, so one student's records cannot be read by another. Passwords are stored only as secure hashes. Answers, worked solutions, and marking rules stay on the server and are never sent to your browser. All traffic is encrypted in transit.
No system is perfectly secure, but if a breach ever put your rights at risk we will tell you and the relevant regulator as the law requires.
If we change anything important — new data, a new purpose, or a new provider — we will update the date at the top and tell account holders by email. Small clarifications may be made without notice.