PDPA
Privacy policy
Last updated 12 Oct 2026
This template is a starting point, not legal advice. Replace everything in [brackets] before publishing and have it reviewed — especially the section on minors' data.
Who we are
[Company name], [address]. Contact our data protection contact at [email].
What we collect
Parents' names and contact details; the student's first name, age and experience; programme of interest; exam results you share; and adults allowed to collect the student. We never ask for a student's ID number through the website, except where an exam board requires it at exam entry. [Check]
Minors' data
Students' data is provided and consented to by a parent or person with parental authority. Under-10s always need that person's consent; for students aged 10–20 we also ask parents where the law requires it. [Check against the latest PDPC guidance.]
Photos, video and artwork
We only publish performance, class photos or artwork that could identify a student with separate consent, never with full names. Withdraw any time via [channel].
Why we use it
To arrange trials, timetable lessons, keep students safe, send progress reports, enter exams on request and share academy news (with consent).
How long we keep it
Enquiries that don't enrol: up to [6 months]. Students: while enrolled and [2 years] after.
Who we share it with
Exam boards (on exam entry) and the services we use, such as [form service], [chat app] and [student-management system], only as needed. We never sell data.
Your rights
Access, correct, delete, restrict, object, withdraw consent, or complain to the PDPC. Contact [email].