Privacy
This site is a static record. It sets no cookie of its own, asks for nothing and has nothing to submit. Two services loaded from Google still see you arrive, and this notice says which, what they receive, and how to stop them.
- Applies to
- council.prepgraph.com
- Last reviewed
- 29 August 2026
- Framework
- DPDP Act, 2023
- Requests
- [email protected]
The Council is being constituted. Its founding cohort is forming and no Council publication, roundtable or research output has yet been produced. Everything described as planned is a commitment of intent, not a record of work done.
What this site collects
Nothing of its own. Every page here is built in advance and served as a plain file from Cloudflare's network. There is no account, no login and no form on this site that posts anywhere: the routes that invite you to write to the secretariat or nominate a colleague open your own mail client or WhatsApp, so a message exists only if you choose to send one. The Council sets no cookie, runs no analytics of its own and learns nothing whatever from a page you merely open.
Hosting is a service like any other, and the independence policy requires that any third party handling Council data be engaged under written contract and named in the annual transparency statement.
Two services loaded from Google are the exception, and they are the whole of what follows. Neither is here to identify you. Both nonetheless see you arrive.
The two things loaded from Google
Google Analytics 4
The site loads Google's analytics script and records a page view each time you open a page. It uses the measurement identifier G-3X8PYMXCXG, which is the same property as prepgraph.com, and it tags every page view from this site with the content group “council” so that Council traffic can be read apart from the company's product site. The script sets cookies in your browser so that a returning browser is recognised as the same one, and what it records — the page, the page that referred you, an approximate location derived from your network address, and your browser and device — goes to Google, which handles it on its own terms and not on the Council's.
Google Fonts
The two typefaces this site is set in, Source Serif 4 and IBM Plex Sans, are requested from Google's font servers as a page loads. Google therefore receives your network address and the address of the page asking for the fonts, before you have done anything on the site at all. There is no version of this site that quietly avoids that: it is what loading a font from someone else's server means.
| Loaded by this site | What it receives | How to stop it |
|---|---|---|
| Google Analytics 4 G-3X8PYMXCXG | The page you opened, the page that referred you, an approximate location from your network address, your browser and device, and a cookie that recognises the same browser on a later visit. | Any content blocker, or a browser setting that blocks third-party scripts and cookies. Nothing on this site depends on the script. |
| Google Fonts | Your network address and the address of the page requesting the typefaces. | Block fonts.googleapis.com and fonts.gstatic.com. The site then sets itself in Georgia and your system sans, and reads perfectly well. |
| This site itself | Nothing. No account, no form, no cookie of the Council's. | Nothing to stop. |
The analytics property belongs to PrepGraph, which convenes and funds the Council, and it is shared with the company's commercial site. The independence policy says that Council web pages carry no analytics that identify an individual reader, and none here do: what can be seen is aggregate traffic — how many people opened the Charter, and roughly from where — never who you are, and it is joined to no commercial record. That boundary is held by how the property is configured and by the rules in the independence policy, not by anything that makes the alternative impossible. A reader who would rather not be counted at all should block the script, and is right to prefer the version of this that does not depend on our word.
If you write to the secretariat
[email protected] is a mailbox held by the secretariat. Your address and what you wrote are kept in order to answer you, to send you the thing you asked for, and to keep the thread intelligible if you write again. That is the whole of the purpose.
The address is not added to a newsletter, a marketing list or a sales list. It is not entered into PrepGraph's commercial systems, is not enriched from them, and does not become a lead, an opportunity or a prospect record. Council correspondence is sent from this address rather than through any marketing platform, and carries no open tracking, click tracking or tracking pixel — something a recipient can confirm from the message itself rather than from this page.
Ask, and your address and the correspondence are deleted. The same right is fixed, for anyone who takes part in the Council's work, by the independence policy rather than by this page:
A participant may require deletion of their Council record. It is completed within thirty days and confirmed in writing, and the number of such requests is reported annually.
Participation is not a prospect record
This is the commitment the rest of the notice exists to protect, and it is the independence policy's, not this page's:
Taking part in Council work makes no school, principal or teacher a prospect, lead or reference for PrepGraph.
Where the Council does hold a record of someone who takes part in its work, it is a short one: Name, role, institution, one contact address. Nothing that would be useful to a salesperson, and nothing recorded about budgets, contracts or renewal dates. It is kept in a Council system that is never joined to PrepGraph's commercial systems, is retained for the period of participation and twenty-four months afterwards, and is then deleted. If you are separately a PrepGraph customer, or in ordinary commercial contact with the company, that relationship proceeds on its own footing and no fact originating in the Council enters it, including the bare fact that you took part.
The Council has held no activity and appointed no member, so there is at present no participant register at all. What is written here is the rule that will apply when there is one, recorded before the fact so that it can be held against us.
Children
The Council collects no personal data relating to children, on this site or through participation in its work, and requires access to no student record for any of it. The readiness framework asks a school to examine its own practice; it asks the school to send nothing in. A principal can use every instrument on this site without a single child's name leaving the school.
Research is the one place where children's data could arise, and it is governed by a separate instrument rather than by this notice. A study involving children runs only under a protocol reviewed in advance by a named reviewer who is not employed by, contracted to or invested in PrepGraph, with the consent of the school and of a parent or guardian, on a minimal-collection basis, and never in a form that identifies an individual child. The reviewer's name and the fact of the review are published with the study.
The standard we work to
The secretariat works within the Digital Personal Data Protection Act, 2023 — the framework the Council's participating schools already work within, which is the reason for choosing it. Where that Act and this notice differ, the Act governs.
That is a statement of a standard and nothing more. No authority has registered, certified, approved or audited the Council, this site or its arrangements; the Council holds no compliance mark of any kind and does not intend to display one. Anyone who wants assurance beyond our word should look at what the Council publishes about its own failures, which is what the annual transparency statement is for.
Asking, correcting, deleting, complaining
Write to [email protected], marked for the Chair. Anyone may write: no membership, relationship or standing is required, and you need not say why you are asking. Ask what is held about you, ask for it to be corrected, ask for it to be deleted, or say that this notice has not been kept. Requests and grievances are answered within thirty days.
If personal data held by the Council is ever breached, the people affected are told within seventy-two hours of the Council identifying it, and the breach is recorded in the annual transparency statement — whether or not anybody outside would otherwise have known of it.
Related instruments
Most of the rules above are not this page's to make.
Participant data, the firewall between Council work and PrepGraph's commercial systems, and the annual inspection of both are set out in the independence policy. Research involving children runs under the separate research instrument, with a reviewer the funder does not choose.