Privacy Notice

Hello and welcome to GDPR in Schools Ltd and our training platform. The service is a web delivered “continuous personal development” environment, specifically tailored to use in data protection for the education sector.

This is a privacy notice for the service to help you understand what data we collect and what we do with it.

Who We Are  is a website operated by GDPR in Schools Limited, who run the data protection compliance application at and offer services around data protection to schools.

If you have questions or concerns about us or our web site, email us on

What Data We Collect and Why We Collect It

For the purposes of running this website we will collect and persist the following information:


Our training platform only uses necessary cookies to facilitate the operation and good performance of the platform.

Embedded content from other websites

Items on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who We Share Your Data With

We have partnered with Thinkific Labs Inc., Vancouver, Canada, to deliver this service. Data storage and the hosting of the training content is managed by Thinkific.

Canada enjoys an adequacy decision under the UK GDPR, but we note that Thinkific use sub-processors in 3rd countries, particularly the USA.

How Long We Retain Your Data

Your data will remain on the platform until you or your schools request from us to remove the data.

What Rights You Have Over Your Data

You have all the rights granted to you by the General Data Protection Regulation (2018) and the Data Protection Act (2018).

GDPRiS – in most cases – is not the data controller, but your school is. Please exercise your data protection rights via the school, who will need to ultimately give permission. You are welcome to contact us directly, but we will need to check with your school.

What is the Lawful Basis for Processing

If your school signed you up, then we act as the data processor, you are what is called the data subject. If you signed up with us directly, then we are the data controller.

Where schools are the data controller, they will need to determine the lawful basis for the processing. Because the processing does not present any particular risk, and the school are obliged to train their staff in data protection, the school in most cases will choose Art 6(1)e – processing is necessary for a task carried out in the public interest.

Where you engage with us directly, then the processing is based on Art 6(1)b – the processing is necessary for the performance of a contract.

Get In Touch

You can email us with any queries or comments: or or call UK 02039610110.

June 2021