Privacy Policy
Last updated: September 18, 2026
1. Introduction
Sipuha ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our UK postcode finder service (the "Service").
By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.
1.1 Key Terms
Personal Data: Any information that can be used to identify you, such as your IP address or browser information.
Cookies: Small text files stored on your device that help websites remember your preferences and improve your experience. Learn more about cookies at AllAboutCookies.org.
Local storage: Data kept in this browser (not a cookie, and not sent to our servers). UK PECR treats this the same way as cookies when it is stored on your device.
GDPR: The General Data Protection Regulation, a European Union law that protects your personal data and privacy. Learn more at GDPR.eu.
2. Information We Collect
We collect minimal information necessary to provide and improve our Service. We do not collect sensitive personal information such as names, email addresses, or payment information. We do not store personal data beyond what is necessary for the Service to function.
2.1 Information You Provide
When you use our Service, you may provide us with postcode queries. We do not require you to create an account or provide personal information to use our Service.
Postcode queries are processed in real-time and are not stored or associated with your personal information. We do not maintain a database of user queries or personal information.
2.2 Automatically Collected Information (Only if you consent to analytics)
We only collect technical information if you consent to analytics cookies (Microsoft Clarity). If you decline analytics cookies, we do not collect analytics. The Service still uses a consent cookie and, on this device only, optional local storage described in 2.4.
If you consent to analytics cookies, Microsoft Clarity may collect the following information:
- IP Address: Your device's internet protocol address, which may be used to determine your general geographic location (city/country level only)
- Browser Information: Type and version of your web browser (e.g., Chrome, Firefox, Safari)
- Device Information: Your operating system and device type (e.g., Windows, macOS, iOS, Android)
- Usage Data: Pages you visit, time spent on pages, mouse movements, clicks, scrolls, and how you interact with our Service
- Referral Information: The website that referred you to our Service (if applicable)
This information is collected by Microsoft Clarity only if you consent to analytics cookies. We do not directly collect or store this information ourselves.
2.3 Cookie Consent Preference
We store your analytics cookie choice in a first-party cookie named cookie_consent on your device, for up to one year. This is not an analytics cookie. It only remembers Accept or Decline.
2.4 On-device storage (this browser only)
Some features keep a small JSON record in your browser localStorage. We do not read this on our servers. It never goes into a Sipuha database. It stays until you clear site data for sipuha.com, or until the cap below is reached.
- sipuha-theme: Light or dark appearance. Written when you use the theme control.
- sipuha-search-recent: Recent search picks. Written when you choose a result.
- sipuha-places: Saved places (when you tap the heart) and opened places (school, postcode, area, or trust pages). Opened places are written only after you open Recent on this device. Saved hearts work when you tap save, without opening Recent first. Up to 24 opened items and 48 saved items.
- sipuha-shortlist: Schools you add to compare (up to 5). Written when you tap Compare on a school; cleared when you remove them or clear site data.
These records are first-party and functional. They are not Microsoft Clarity. Declining analytics does not delete them. To remove them, clear this site's data in your browser.
3. Cookies and Tracking Technologies
We use a first-party cookie for your analytics choice, and localStorage for appearance, saved places, search recents, and opened places (see 2.4). Microsoft Clarity tracking only runs if you accept analytics.
3.1 Types of Cookies We Use
Essential Cookies (Strictly Necessary):
The cookie_consent cookie remembers whether you accepted or declined analytics. Appearance, saved places, search recents, and (after you use Recent) opened places use localStorage on this device, as described in 2.4. They are needed for those controls to work. We do not use them to track you across other sites.
Analytics Cookies (Optional):
We use Microsoft Clarity to analyze how users interact with our Service. This helps us understand user behavior, identify usability issues, and improve our Service. These cookies are only set if you consent to analytics cookies.
Microsoft Clarity collects information such as mouse movements, clicks, scrolls, and page interactions. This data is anonymized and aggregated. For more information about how Microsoft Clarity handles your data, please review their Privacy Statement.
Preference Cookies (Consent Management):
We store your cookie consent preferences so we can remember your choices on future visits.
3.2 Why We Use Cookies
We use cookies to:
- Remember your analytics cookie choice
- Keep appearance, saved places, and recents on this device
- Understand how users interact with our Service (Clarity, only if you accept analytics)
- Identify and fix usability issues (Clarity, only if you accept analytics)
- Ensure the Service functions correctly
3.3 Your Cookie Choices
You have full control over cookies:
- Cookie Consent Banner: When you first visit our Service, you can choose to accept or decline analytics cookies. You can change your preferences at any time by clicking Cookies in the menu or footer.
- Browser Settings: You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling essential cookies may affect the functionality of our Service.
- Do Not Track: Some browsers offer a 'Do Not Track' feature. While we do not currently respond to 'Do Not Track' signals, you can still manage your cookie preferences through our cookie consent system.
4. How We Use Your Information
We use the information we collect as follows:
- Provide and maintain our Service
- Remember your analytics cookie choice
- Keep theme, saved places, search recents, and opened places on this device so those features work
- Analyze usage patterns and trends (via Microsoft Clarity, only if consented)
- Understand how users interact with our Service to improve user experience (via Microsoft Clarity, only if consented)
If you decline analytics cookies, Clarity does not run. On-device storage in 2.4 still works for theme, hearts, search recents, and Recent.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We do not share your personal information except in the following limited circumstances:
- Microsoft Clarity (only if you consent to analytics cookies): If you consent to analytics cookies, Microsoft Clarity collects usage data directly from your browser. We do not share your data with Microsoft Clarity; they collect it directly through their script. This data is anonymized and aggregated by Microsoft.
- Legal Requirements: When required by law or to protect our rights, we may disclose information if legally obligated to do so.
- Business Transfers: In the unlikely event of a business transfer or merger, your information may be transferred as part of that transaction.
If you decline analytics cookies, we do not share analytics data with Microsoft. On-device localStorage in 2.4 is not sent to us or to third parties.
6. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain data protection rights under the General Data Protection Regulation (GDPR). These rights apply regardless of where our servers are located.
Learn more about GDPR at GDPR.eu.
Right to Access (Article 15): You have the right to request copies of your personal data that we hold. We will provide this information free of charge within one month.
Right to Rectification (Article 16): You have the right to request that we correct any information you believe is inaccurate or incomplete.
Right to Erasure / 'Right to be Forgotten' (Article 17): You have the right to request that we erase your personal data under certain circumstances, such as when the data is no longer necessary for the original purpose.
Right to Restrict Processing (Article 18): You have the right to request that we restrict the processing of your personal data in certain situations.
Right to Data Portability (Article 20): You have the right to request that we transfer your data to another organization in a structured, commonly used format.
Right to Object (Article 21): You have the right to object to our processing of your personal data, particularly for direct marketing or legitimate interest purposes.
Right to Withdraw Consent: If we process your data based on consent, you have the right to withdraw that consent at any time. You can do this by changing your cookie preferences or contacting us directly.
How to Exercise Your Rights:
Since we do not keep a server-side account or query log, most GDPR requests are handled on your device. You can:
- Change or withdraw analytics consent at any time using Cookies in the menu or footer
- Delete cookie_consent by clearing cookies for this site
- Delete theme, search recents, saved places, and opened places by clearing this site's data (localStorage)
- Contact us through our website if you have questions about your rights
If you have consented to analytics cookies and wish to exercise your rights regarding data collected by Microsoft Clarity, please refer to Microsoft's privacy statement or contact Microsoft directly.
7. Data Retention
We retain minimal information:
- Cookie Consent Preference: Stored in the cookie_consent cookie on your device for 1 year, or until you change it.
- On-device localStorage: sipuha-theme, sipuha-search-recent, sipuha-places, and sipuha-shortlist stay in this browser until you clear site data. Opened places stop growing if you never open Recent. Saved places stay until you un-heart them or clear site data. Compare shortlists stay until you remove the schools or clear site data.
- Postcode Queries: We do not store postcode queries on our servers. They are processed in real-time and immediately discarded.
- Analytics Data (if consented): Microsoft Clarity retains analytics data according to their own retention policies. We do not retain this data ourselves.
We do not maintain a database of your saved or opened places. Clearing this site's data in the browser is how those lists are deleted.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure.
9. Third-Party Services
Our Service uses third-party services to help us operate and improve our Service. These services may collect information about your use of our Service.
9.1 Microsoft Clarity (Analytics)
We use Microsoft Clarity to understand how users interact with our Service. This helps us identify usability issues and improve the user experience.
What Microsoft Clarity Collects:
- Page views and navigation patterns
- Mouse movements, clicks, and scrolls
- Browser and device information
- Session recordings (anonymized)
Microsoft Clarity only collects this information if you have consented to analytics cookies. The data is anonymized and aggregated, and Microsoft does not use it for advertising purposes.
For more information about how Microsoft Clarity handles your data, please review their Privacy Statement.
9.2 Why We Use Third-Party Services
We use third-party services because they help us:
- Understand how our Service is used
- Identify and fix technical issues
- Improve user experience
- Ensure the Service operates reliably
We carefully select third-party services that respect user privacy and comply with applicable data protection laws, including GDPR.
10. Children's Privacy
Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights under GDPR, please contact us through our website at sipuha.com.