Find Maestro Privacy Notice
Campaign-specific privacy information for the autumn 2026 Find Maestro hunt
UPDATED · 6 October 2026
1. Who we are
Academiq Maestro Ltd is the controller for personal information used in the Find Maestro campaign. Academiq Maestro Ltd is a UK company (company number 16546890).
Privacy, data-rights and safeguarding contact: admin@academiqmaestro.com
Designated Safeguarding Lead: Jennifer Ellis, Founder & Director. Safeguarding contact should be made through the email address above.
2. What Find Maestro is
Find Maestro is a free UK-wide campaign running from Monday 5 October to Friday 13 November 2026. Children and families can scan a campaign poster, select the participating venue, choose a school-year band, complete one short challenge, receive a random Maestro rarity, vote on an app design choice and then, if they wish, hand the device to a parent or guardian for optional parent-only activity.
- No child is required to create an account.
- The child-facing journey does not ask for the child’s name or email address.
- The campaign does not use child-facing pages for behavioural advertising or social-media sharing.
- The prize draw and marketing sign-up are separate parent/guardian actions.
3. Information used during the child-facing journey
| Information | Why we use it |
|---|---|
| Participating venue selected | To record the venue associated with the scan and operate the venue leaderboard. |
| School-year band selected | To present an age-appropriate challenge. We do not need the child’s date of birth or name for this. |
| Challenge answer/result | To operate the challenge and record campaign participation. |
| Maestro rarity/reveal | To operate the random rarity feature and campaign statistics. |
| Flame and card collection (kept on the child’s own phone) | To show a child their progress — the cards they have found and their growing flame. This is stored in the browser on their device and is not sent to us unless a parent or guardian chooses to save it (see section 5). |
| App-design vote | To count the child’s chosen option in aggregate. |
| Scan/participation timestamp | To run the campaign, troubleshoot issues and support integrity controls. |
| Limited technical information | Where necessary, to keep the service secure, prevent obvious duplicate/abusive use and diagnose technical problems. |
We do not use this information to build advertising profiles of children or to make decisions about them that have legal or similarly significant effects.
4. Camera / AR mode
Find Maestro offers an optional augmented-reality (AR) mode. If a participant chooses this mode, the browser will ask for permission to use the device camera. The camera feed remains on the device and Academiq Maestro does not capture, receive, upload or store camera images or video. If camera access is declined, the participant can use the equivalent classic journey without the camera.
5. Parent/guardian information
At the end of the Find Maestro campaign journey, the participant is shown a parent/guardian screen. Prize-draw entry is restricted to adults aged 18 or over. An adult may enter after completing Find Maestro themselves, or may enter on behalf of a child who has completed the Find Maestro hunt. The adult may also separately choose to join an app waitlist or receive marketing updates. These choices are separate from the child journey and marketing is not a condition of prize-draw entry. The Find Maestro Family Prize consists of a £50 flexible family experience voucher plus a Golden Maestro Winner Pack containing a personalised certificate and a selection of Maestro stickers.
| Parent/guardian data | Purpose |
|---|---|
| Email address and any prize-entry details requested | To administer the adult-only Find Maestro Family Prize draw, verify that the entrant is aged 18 or over, contact a winner and arrange prize fulfilment. |
| Saved collection: the adult’s email address and the list of cards found (type of card and date) | Only if the adult chooses “save this collection”. To email them a private link that restores the child’s cards and flame on any device, and to add new finds automatically. We do not store the child’s name, school-year band or any other detail about them with it. The link works like a password, so we only keep a one-way scrambled copy of it. The adult can delete the saved collection at any time from the collection page. |
| Marketing choice | To send marketing only where the adult has actively opted in. |
| Waitlist details, if offered | To tell the adult when the app is available or provide the information they requested. |
| Winner postal address (winner only, where needed) | To post the Golden Maestro Winner Pack after the winner has been selected. It is not required from every entrant. |
6. Venue information
Venues that sign up may provide the venue/business name, venue type, town/city, delivery address, contact name, contact email and optional notes. We use these details to verify participation, deliver campaign materials, manage the campaign and contact the venue about Find Maestro. Only agreed venue information such as the venue name, general location and venue type is shown publicly. Individual staff names, email addresses and delivery addresses are not published.
7. Our lawful bases
| Purpose | Lawful basis |
|---|---|
| Operating the child-facing hunt, venue leaderboard, security and abuse-prevention controls | Legitimate interests, with extra weight given to children’s rights and data minimisation. |
| Venue onboarding and sending the requested venue pack | Steps taken at the venue’s request / legitimate interests in administering the campaign. |
| Prize-draw administration | Contract / steps requested by the adult entrant, and legitimate interests in administering and evidencing a fair draw. |
| Saving a child’s card collection to an adult’s email | Consent of the adult, which can be withdrawn at any time by deleting the collection. |
| Optional marketing to adults | Consent. |
| Keeping security logs and responding to legal/regulatory matters | Legitimate interests and, where applicable, legal obligation. |
8. Cookies, storage and analytics
We do not use advertising cookies, behavioural advertising trackers or analytics tags on the child-facing Find Maestro journey. The child-facing journey uses limited first-party browser storage and technical identifiers where necessary to operate the campaign, remember the selected venue, remember the child’s cards and flame on their own device, keep the service secure and limit duplicate or abusive scans. These are not used to build advertising profiles of children. The cards and flame stay on the device unless an adult chooses to save them as described in section 5, and can be cleared at any time from the collection page.
9. Who we share information with
- Hosting, infrastructure and email/service providers that process information for us under contract.
- Authorised developers and technical support personnel who need limited access to maintain or secure the service.
- Print or delivery suppliers where necessary to send venue materials.
- Professional advisers, insurers, regulators, law-enforcement bodies or courts where disclosure is required or appropriate by law.
- We do not sell children’s personal information.
10. International access
Our production systems are UK-hosted. Some authorised developers supporting Academiq Maestro are based in Sri Lanka and may remotely access limited UK-hosted personal information where necessary for their work. We use contractual and organisational safeguards, including the UK International Data Transfer Agreement (IDTA), access controls and confidentiality obligations.
11. How long we keep information
| Category | Current retention rule |
|---|---|
| Raw campaign participation data | Up to 90 days after the campaign closes on 13 November 2026, then delete or irreversibly anonymise. |
| Technical deduplication/device data | Up to 48 hours after it is created, unless it needs to be retained for a documented security or fraud incident. |
| Web/server security logs | Normally up to 90 days on a rolling basis, unless linked to a specific incident or legal matter. |
| Parent/guardian prize-draw data | Up to 90 days after prize fulfilment and the winner-query period ends. The selected winner has six weeks from first notification to respond and claim the prize. Data may be kept longer where a complaint or legal issue requires it. |
| Saved card collection (adult’s email + cards found) | Deleted 6 months after the collection was last opened or added to, or sooner if the adult deletes it. If the emailed link is never opened, the email address is deleted after 30 days. |
| Venue contact details | For the campaign and any short follow-up period needed to close it, then minimise/delete unless another business relationship applies. |
| Marketing consent/preferences | Under our general marketing retention rules; an adult can unsubscribe at any time. |
| Anonymous aggregate statistics | May be kept longer where individuals can no longer be identified. |
12. Your rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict personal information, object to certain uses, and withdraw consent where consent is the basis used. A parent or guardian may also contact us about information relating to a child. To exercise a right, email admin@academiqmaestro.com.
You may complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how personal information has been handled.
13. Safeguarding
Find Maestro is designed to minimise the information collected from children. If a safeguarding concern is raised in connection with the campaign, it will be handled under Academiq Maestro’s safeguarding procedures and escalated to the Designated Safeguarding Lead where appropriate. For safeguarding concerns, contact admin@academiqmaestro.com.
14. Changes to this notice
We may update this notice if the campaign or its technology changes. We will not make a material change that increases the use of children’s information without reassessing the data-protection risks and updating the relevant campaign information.