(Compliant with UK GDPR and Data Protection Act 2018)

Effective Date: 01.09.2025

Updated: July 2026

Next Review: July 2027

Version: 2.0

LPI Education Ltd is committed to protecting your privacy and handling all personal data in a lawful, transparent and secure manner. This Privacy Policy explains how we collect, use and safeguard your personal data when you visit our website or engage with our consultancy, supervision or training services.

1. Who We Are

LPI Education Ltd (“we”, “our”, “us”) is the data controller for the personal data we collect and process.

Company registration number: 16595801

Registered office: 8 St Andrews Way, Bromsgrove, Worcestershire, B61 7NR

We provide consultancy, school improvement services, safeguarding supervision, leadership supervision, coaching, training and professional development to schools, trusts and educational organisations.

This Privacy Policy explains how we collect, use, store and protect personal data in line with:

• UK GDPR and the Data Protection Act 2018

• Working Together to Safeguard Children (WTSC) 2026

• Keeping Children Safe in Education (KCSIE) 2026

• ICO guidance and accountability expectations

2. What Personal Data We Collect

2.1 Website & Enquiry Data

• Name, email address, job title

• School or organisation details

• Information submitted via our contact form

• Cookies and analytics data (e.g., website usage statistics)

2.2 Service Delivery Data

• Attendance records

• Supervision agreements

• Minimal reflective supervision notes (non-case specific)

• Anonymised thematic notes for quality assurance

• Contracting documentation and commissioning information

2.3 Safeguarding‑Related Data

We may receive safeguarding information from schools when:

• providing safeguarding supervision

• supporting DSLs

• delivering safeguarding audits or consultancy

This may include:

• concerns, referrals, DSL notes

• multi‑agency communications

• outcomes and actions

2.4 What We Do NOT Collect

In line with our supervision model and WTSC 2026 expectations for safe professional boundaries, we do not collect or record:

• identifiable pupil information

• identifiable staff information

• case details, chronologies or decision logs

• safeguarding records

• operational case management information

• children’s personal data

Supervision notes are thematic and non‑identifiable.

3. Special Category Data

We do not routinely process special category data (e.g., race, health, biometrics, religious beliefs).

Where safeguarding concerns arise, we may process or share information lawfully under:

• Public task (safeguarding)

• Vital interests (to prevent harm)

• Legal obligation (statutory duties)

WTSC 2026 requires safeguarding information to be shared when necessary, proportionate and in the best interests of the child.

Where possible, this will be discussed with the supervisee before action is taken.

4. How We Use Your Data

We use your personal data to:

• Respond to enquiries

• Deliver consultancy, supervision, coaching and training

• Maintain supervision records in line with our supervision agreement

• Improve our website and user experience

• Fulfil contractual and legal obligations

• Maintain organisational quality assurance

We do not use supervision notes for:

• performance management

• HR processes

• capability assessments

• Ofsted evidence

We do not use automated decision‑making or profiling.

5. Lawful Basis for Processing

Our lawful bases include:

• Contractual necessity – delivering services

• Legitimate interests – quality assurance, minimal supervision notes

• Consent – website enquiries or optional communications

• Public task – safeguarding responsibilities

• Legal obligation – HMRC, safeguarding duties

When schools share safeguarding information with us, we rely on their lawful basis and extend this through our contractual agreement.

6. Sharing Your Data

We do not sell your data.

We may share data only:

• When legally required (e.g., safeguarding, court orders, HMRC)

• With trusted service providers (e.g., secure email hosting, website hosting)

• With safeguarding partners where necessary under WTSC 2026

Supervision notes are accessible only to the supervisor and are not shared with line managers, HR, governors, Ofsted or external auditors unless required by law.

7. Data Security

We use secure, password‑protected and encrypted systems.

Digital security measures include:

• Encrypted storage

• Multi‑factor authentication

• UK‑based or adequacy‑compliant cloud systems

• No use of personal devices

• Cyber‑security measures aligned with KCSIE 2026

Physical records (rarely used) are stored in locked cabinets with restricted access.

8. Data Retention

We retain data only as long as necessary:

Secure disposal includes:

• Digital deletion

• Shredding of physical documents

• Removal from backups where feasible

9. Your Rights Under UK GDPR

You have the right to:

• Access your data

• Request correction or deletion

• Object to or restrict processing

• Request data portability

• Withdraw consent (where applicable)

To exercise your rights, contact: jmcnally@lpieducationltd.co.uk

10. Subject Access Requests (SARs)

You may request a copy of the personal data we hold about you.

We will respond:

• Within 1 month, or

• Within 3 months for complex requests (you will be informed within 1 month if an extension is needed)

Requests are free unless manifestly excessive.

11. How to Make a Complaint

If you are concerned about how we handle your data, you can contact the ICO:

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Telephone: 0303 123 1113

Website: https://ico.org.uk

12. Updates to This Policy

We may update this policy to reflect changes in legislation or our services.

The revised date at the top of this page indicates when updates were made.