Resource Raven Privacy Policy

Last updated: 6 October 2026

Resource Raven is a trading name of Megan Warren, a sole trader based in England.

This Privacy Policy explains what personal information Resource Raven collects, how we use it, who we share it with, and the choices and rights available to you.

If you have questions about this policy or how we handle your information, please contact us at: privacy@resource-raven.com

We will update this policy when our services or the way we process personal information changes.

1. Who we are

Resource Raven is a teacher-resource discovery platform. We help users search for educational resources across marketplaces and independent creator stores.

Resource Raven does not sell or deliver the resources found through the platform. When you click through to purchase a resource, you are visiting the creator's or marketplace's website, which has its own terms and privacy policy.

For data protection purposes, Megan Warren, trading as Resource Raven, is the data controller for the personal information we process through Resource Raven.

2. Information we collect

The information we collect depends on how you use Resource Raven.

Account information

If you create an account, we collect:

• your email address;
• your name, if you choose to provide it;
• your account role;
• your password in securely hashed form. We do not store passwords in plain text;
• your saved resources;
• creators you follow;
• account creation and verification information; and
• session information needed to keep you signed in.

Creator applications and creator information

If you apply to become a Resource Raven creator, we may collect:

• your name or business name;
• your email address;
• your website or store information;
• links to your marketplace stores;
• information about the resources you submit;
• information provided during our review of your application; and
• communications between you and Resource Raven.

Information that creators provide about their businesses and resources may be displayed publicly on Resource Raven.

Reports

Anyone may report a resource.

If you submit a report, we may collect:

• the reason for the report;
• additional information you choose to provide;
• your account information, if you are signed in; and
• an email address if you ask us to contact you about the report.

Messages you send us

If you contact us through the website, we collect your name (if you provide it), your email address and your message, so that we can respond to you.

Email-list sign-ups

If you sign up for an email list, we collect your email address, the list you joined, the source of the sign-up and the date of the sign-up. Sign-ups made through our pre-launch page are collected and stored for us by our hosting provider, Netlify.

Information collected automatically

Resource Raven collects limited technical and operational information when you use the service.

We do not store or log the words you enter into the Resource Raven search box.

We do record certain purchase-link activity. When someone clicks a Buy button, we record the resource, the particular listing they clicked and the time of the click. This information is used to help identify resources that are currently popular.

We do not attach this purchase-link measurement to your account.

IP addresses are not stored in the Resource Raven database. They may be held temporarily in server memory for security and rate-limiting purposes, such as limiting repeated sign-in attempts or form submissions.

Our hosting provider may maintain its own technical request logs, including IP addresses, in accordance with its own policies and retention practices.

Approximate region

Resource Raven may use information supplied by the hosting environment, or your browser's language and time zone, to determine an approximate region for the purpose of displaying appropriate terminology and price information.

This information is not stored as a personal profile and is not sold or provided to third parties for advertising.

If you manually select a region, that preference is stored locally in your browser and sent with your searches so that we can show the right terminology and prices. We do not store it.

3. Cookies and browser storage

Resource Raven uses a small number of browser technologies.

Necessary login cookie

When you create an account or sign in, Resource Raven uses a cookie called rr_session.

This cookie:

• keeps you signed in;
• is first-party;
• is HttpOnly;
• uses SameSite protections;
• is Secure when the site is operating over HTTPS;
• lasts for up to 30 days; and
• is removed when you sign out.

This cookie is necessary for account functionality.

Visitors who never create an account or sign in do not receive this cookie.

Local browser storage

Resource Raven may also store certain information locally in your browser, including:

• your chosen region;
• temporary search-result information used to restore your position when navigating backwards; and
• a temporary indication that you attempted to save or follow something while signed out, so the action can be completed after signing in.

This information is stored in your browser and is not sent to Resource Raven's servers for tracking purposes.

Resource Raven does not currently use Google Analytics, advertising trackers, tracking pixels, session-replay software or third-party advertising cookies.

4. How we use your information

We use personal information where necessary to:

• create and manage accounts;
• authenticate users and maintain secure sessions;
• allow users to save resources and follow creators;
• process creator applications;
• manage creator accounts and resource submissions;
• display creator and resource information;
• respond to reports and investigate potential problems;
• respond to messages and enquiries you send us;
• send account verification and password-reset emails;
• send service-related emails;
• operate and secure the website;
• prevent abuse, fraud and unauthorised access;
• understand which resources are attracting clicks and interest;
• improve Resource Raven's search, organisation and user experience;
• maintain backups and restore the service if necessary;
• comply with legal obligations; and
• protect our rights and the rights of our users and creators.

We may also use aggregated or non-identifying information to understand general patterns in how Resource Raven is being used.

5. Our lawful bases

Depending on the circumstances, we rely on one or more of the following lawful bases under UK data protection law:

Contract

Where processing is necessary to provide an account or another service you have requested.

Legitimate interests

Where processing is reasonably necessary to operate, secure and improve Resource Raven, administer the platform, prevent misuse, respond to reports, understand general resource popularity and protect our business, provided those interests are not overridden by your rights and interests.

Legal obligation

Where we need to process information to comply with a legal or regulatory requirement.

Consent

Where we specifically ask for your consent and consent is the appropriate lawful basis, you may withdraw it at any time.

6. Creator and resource information

Creators provide Resource Raven with information about their resources and where those resources can be purchased.

This information may include resource titles, descriptions, thumbnails, creator names, subjects, grades, resource types, tags, prices, marketplace links and other catalogue information.

Creators are responsible for ensuring that information they submit is accurate and that they have the rights and permissions necessary to provide it to Resource Raven.

Resource Raven does not host the underlying educational resources and does not sell them.

7. Who we share information with

We do not sell your personal information to advertisers.

We may share personal information with service providers that help us operate Resource Raven, where necessary for them to provide their services to us.

These may include:

• hosting, website-form and infrastructure providers, including Render and Netlify;
• email delivery providers, including Resend;
• backup and storage providers, once an off-site backup service is selected;
• security and technical service providers where necessary; and
• professional advisers or authorities where disclosure is required or permitted by law.

We do not provide creators with personal information about users simply because those users have viewed or clicked on their resources.

When you leave Resource Raven and visit a creator's website or a third-party marketplace, that service may collect information about you according to its own privacy policy and terms.

8. Email

Resource Raven may send emails necessary to operate the service, including:

• account verification;
• password resets;
• acknowledgement of certain reports;
• creator application or account communications; and
• other important service-related notices.

We will not send marketing emails simply because you create an account.

If we introduce optional marketing or newsletter communications, we will provide an appropriate way to opt in or out as required by law.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including where necessary to meet legal, accounting, security or dispute-resolution requirements.

Account information is generally retained while an account remains active.

Information associated with reports, creator applications and platform administration may be retained for as long as reasonably necessary to investigate issues, maintain the integrity of the platform and protect against repeated abuse.

Temporary authentication tokens expire after their intended period.

Resource Raven maintains backups of its database. Information deleted from the active database may therefore remain in backups until those backups expire or are securely overwritten.

Our current local backup process retains the newest 14 backups plus one backup per week for eight weeks. Off-site backup retention will depend on the provider and retention policy selected for the service.

10. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

Passwords are securely hashed and are not stored in plain text.

Account sessions use secure session mechanisms and appropriate cookie protections.

However, no internet service can guarantee absolute security.

11. Your data protection rights

Depending on the circumstances, you may have rights to:

• ask for access to the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete your personal information;
• ask us to restrict certain processing;
• object to certain processing;
• ask for your information to be provided in a portable format where the right applies; and
• withdraw consent where we rely on consent.

To exercise a right, contact us at: privacy@resource-raven.com

We may need to verify your identity before responding to a request.

Resource Raven does not currently provide a self-service account deletion or data-export function. If you ask us to delete your account or provide your personal information, we will handle the request manually.

We will respond to valid data protection requests within the timeframe required by applicable law.

12. International transfers

Some of the service providers used to operate Resource Raven may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place.

Our current service providers and their processing locations may change as Resource Raven develops. This policy will be updated when material changes occur.

13. Children

Resource Raven is intended for teachers, creators and other adults searching for educational resources.

Resource Raven is not designed for children to create accounts or submit personal information.

If we become aware that we have collected personal information from a child in circumstances where this was not appropriate, we will take reasonable steps to address the situation.

14. Third-party websites

Resource Raven links to creators, marketplaces and other third-party websites.

We do not control those websites and are not responsible for their privacy practices.

When you follow a link away from Resource Raven, the privacy policy and terms of the destination website apply.

15. Changes to this policy

We may update this Privacy Policy when our services, technology, legal obligations or data practices change.

The latest version will always be available on the Resource Raven website, with the date of the most recent update shown at the top.

16. Complaints

If you have concerns about how Resource Raven handles your personal information, please contact us first at: privacy@resource-raven.com

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

17. Contact

Resource Raven

Megan Warren, trading as Resource Raven

England

Email: privacy@resource-raven.com