Privacy Policy

1. What Data We Collect

We may collect the following categories of personal data:

• ✦Parent / guardian full name, email address, phone number and country of residence
• ✦Child's full name, date of birth and current year group
• ✦Chosen programme and any additional notes provided during application
• ✦Payment information — processed securely by Stripe; we do not store card details
• ✦Communications sent to us via contact forms, email or WhatsApp
• ✦Website usage data via Google Analytics (anonymised — see Section 6)
• ✦Open Day registration details
• ✦Teacher application information including qualifications and references

2. Why We Collect Your Data

We collect and process personal data for the following purposes:

• ✦Processing enrolment applications and communicating with prospective families
• ✦Managing student records and school administration
• ✦Processing fee payments and sending invoices
• ✦Delivering education via Google Classroom and Google Meet
• ✦Sending school communications including term dates, timetables and updates
• ✦Responding to enquiries submitted via our website or WhatsApp
• ✦Recruiting qualified teachers
• ✦Improving our website and services through anonymised analytics

Our lawful basis for processing is contract performance (to deliver education services you have enrolled for), legitimate interests (to communicate with prospective families and improve our services), and legal obligation (safeguarding requirements).

3. Who We Share Your Data With

We share data only with trusted third-party processors necessary to deliver our services:

• ✦Stripe Inc — secure payment processing (stripe.com/gb/privacy)
• ✦Google LLC — Google Workspace, Classroom, Meet and Analytics (policies.google.com/privacy)
• ✦Web3Forms — form submission processing (web3forms.com/privacy)
• ✦Cloudflare Inc — website hosting and security (cloudflare.com/privacypolicy)

We do not sell, rent or trade your personal data to any third party for marketing purposes.

4. How Long We Keep Your Data

• ✦Enquiry / contact data: 12 months from last contact
• ✦Enrolment application data: for the duration of the student's time at the school, plus 7 years
• ✦Financial records: 7 years (HMRC requirement)
• ✦Unsuccessful teacher applications: 6 months

5. Your Rights

Under UK GDPR you have the right to:

• ✦Access the personal data we hold about you
• ✦Correct inaccurate data
• ✦Request deletion of your data (subject to legal obligations)
• ✦Object to or restrict processing in certain circumstances
• ✦Withdraw consent where processing is based on consent
• ✦Lodge a complaint with the Information Commissioner's Office (ico.org.uk)

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

6. Cookies & Analytics

Our website uses Google Analytics 4 to understand how visitors use the site. This data is anonymised and does not personally identify you. Analytics cookies are only placed with your consent via our cookie banner. See our full Cookie Policy for details.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data. Our website is served over HTTPS (SSL encryption). Payments are processed by Stripe, which is PCI DSS compliant. Access to personal data is restricted to authorised staff only.

8. Children's Data

As a school, we necessarily process data relating to children. We collect children's data only with the explicit consent of a parent or guardian. We do not knowingly collect data from children under 13 directly. All children's data is handled with the highest standard of care in accordance with our Safeguarding Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data: