
Legal
Last updated: March 2026. Please read these policies carefully before using the Ivy Maths website or Services.
Ivy Maths ("we", "us", "our") is a trading name of SANDBOXED LIMITED, a company registered in England and Wales.
Company number: 14000421 Correspondence address: 86-90 Paul Street, London, England, EC2A 4NE, United Kingdom Website: ivymaths.com
You can reach us through the contact form on this site.
By accessing or using the Ivy Maths website and any services offered through it (collectively, the "Services"), you agree to be bound by these Terms and Conditions. If you do not agree to these terms, please do not use our Services.
These terms apply to all users of the Services, including parents, guardians, educators, and tutors.
Ivy Maths provides online educational assessment tools and related resources, including the Gap Assessment, designed to help parents, carers, and educators understand a child's academic standing against the UK National Curriculum. Our tools are intended for informational and educational purposes only and do not constitute formal academic certification or professional educational advice.
You must be at least 18 years of age to purchase or create an account with Ivy Maths. Our Services are intended for use by parents, guardians, educators, and tutors acting on behalf of children. By using our Services, you confirm that you are legally entitled to do so and, where applicable, that you have appropriate consent to submit information relating to any child.
Where the Services require you to create an account, you are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your account. You agree to notify us immediately through the contact form on this site if you become aware of any unauthorised use of your account.
All content, materials, question banks, assessment frameworks, reports, and software made available through the Ivy Maths platform are the intellectual property of SANDBOXED LIMITED and are protected by applicable copyright and intellectual property law. You may not reproduce, distribute, modify, or create derivative works from any Ivy Maths content without our express written permission.
To the fullest extent permitted by law, SANDBOXED LIMITED shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of our Services. Our total liability for any claim arising from the use of our Services shall not exceed the amount paid by you for the Service in question.
Nothing in these terms limits or excludes liability for death or personal injury caused by negligence, or for fraud or fraudulent misrepresentation.
We reserve the right to update or amend these Terms and Conditions at any time. Changes will be published on this page with an updated effective date. Continued use of our Services following any changes constitutes your acceptance of the revised terms.
These Terms and Conditions are governed by and construed in accordance with the laws of England and Wales. Any disputes arising under these terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.
Prices for our paid Services are displayed on the website. All prices are in pounds sterling (£), and any other currency shown is a conversion for your convenience. We reserve the right to amend pricing at any time. Existing purchases are not affected by subsequent price changes.
Payment is processed securely at the point of purchase via our third-party payment provider. We do not store or have access to payment card details. By completing a purchase, you confirm that you are authorised to use the payment method provided.
Due to the digital nature of our Services, we are unable to offer refunds once an assessment has been accessed or a report has been generated. If you experience a technical issue that prevents you from accessing a Service you have paid for, please contact us through the contact form on this site and we will endeavour to resolve the matter promptly.
Under the Consumer Contracts Regulations 2013, you may have a right to cancel your order within 14 days of purchase, provided the digital content has not been accessed. Once accessed, this right is waived.
Where Services are offered on a subscription basis, you authorise us to charge your payment method on a recurring basis at the frequency stated at the time of purchase. You may cancel your subscription at any time via your account settings. Cancellation takes effect at the end of the current billing period; no partial refunds are issued for unused time.
We collect the following categories of personal data when you use our Services:
• Account data: name, email address, password (hashed) • Profile data: child's year group, subjects selected, assessment preferences • Assessment data: responses, scores, and generated reports • Usage data: pages visited, features used, device and browser type • Communications: messages sent to us via email or contact forms
We use your personal data to:
• Provide and improve our Services • Generate assessment reports and deliver results • Communicate with you about your account or enquiries • Send service-related updates (not marketing, unless you opt in) • Comply with our legal obligations
We do not use your data for automated decision-making that produces legal or similarly significant effects.
We process your personal data on the following legal bases under the UK GDPR:
• Contract performance: processing necessary to deliver the Services you have purchased • Legitimate interests: improving our platform and ensuring security • Legal obligation: complying with applicable law • Consent: where you have opted in to marketing communications
Under UK data protection law, you have the right to:
• Access the personal data we hold about you • Correct inaccurate or incomplete data • Request deletion of your data ("right to be forgotten") • Restrict or object to certain processing • Data portability, receive your data in a structured, machine-readable format • Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, contact us through the contact form on this site.
SANDBOXED LIMITED is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We act as the data controller for personal data processed through our platform.
We have appointed a data protection lead responsible for overseeing our compliance obligations. Any data protection queries can be sent through the contact form on this site.
We take the processing of children's data with particular seriousness. Under the UK GDPR and the Children's Code (Age Appropriate Design Code), we apply the following safeguards:
• We require a parent or guardian to consent to and control any data submitted relating to a child • We do not collect more data about a child than is strictly necessary to deliver the Service • We do not use children's data for profiling or targeted advertising • We do not share children's data with third parties except where strictly necessary to deliver the Service (e.g. hosting infrastructure) • Children's assessment data is retained only for as long as necessary to provide the Service or as required by law
Our Services are hosted within the UK and EU. Where personal data is transferred outside these regions, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), to ensure your data receives equivalent protection.
SANDBOXED LIMITED acts as the data controller for personal data processed through this platform.
If you have concerns about how we process your data that we have been unable to resolve, you have the right to lodge a complaint with the ICO at www.ico.org.uk.
Personal data collected through the Ivy Maths platform is stored on secure cloud infrastructure located in the UK and European Economic Area (EEA). We use industry-standard encryption in transit (TLS) and at rest to protect your data.
We retain your personal data for as long as your account is active or as needed to provide our Services. Specific retention periods are:
• Account data: retained for the duration of the account, plus 30 days after deletion request • Assessment data and reports: retained for 24 months from the date of the assessment • Communications: retained for 12 months • Financial transaction records: retained for 7 years in compliance with HMRC requirements
You may request deletion of your data at any time through the contact form on this site.
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:
• Encrypted data transmission (HTTPS/TLS) • Encrypted data storage • Access controls limiting data access to authorised personnel only • Regular security reviews and updates
In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the ICO within 72 hours as required by law.
We engage the following categories of third-party data processors to help deliver our Services. All processors are bound by data processing agreements that require them to handle your data in compliance with UK GDPR:
• Cloud hosting and infrastructure providers • Payment processing providers • Email delivery services (for transactional emails only) • Analytics providers (aggregated, anonymised usage data only)
We do not sell, rent, or trade your personal data to any third party for marketing purposes.
Our website may contain links to third-party websites or services. These links are provided for your convenience and informational purposes only. Ivy Maths has no control over the content, privacy practices, or security of those sites and accepts no responsibility for them. We recommend reviewing the privacy policy of any third-party site you visit.
Certain features of our platform may involve integration with third-party tools (for example, curriculum databases or payment gateways). Where such tools process personal data on our behalf, we ensure appropriate contractual safeguards are in place. We will notify users of any material changes to the third-party tools we use that affect how your data is processed.
For any questions, concerns, or requests relating to these policies, please contact us at:
Contact form: https://ivymaths.com/contact Post: SANDBOXED LIMITED, 86-90 Paul Street, London, England, EC2A 4NE, United Kingdom