Data protection pack
Everything your data protection officer, business manager and safeguarding lead need to check before you run a survey, published in full with nothing behind a form.
These documents are drafts while the company is being set up. Text in [square brackets] will be completed before launch, and the agreement will be reviewed by a solicitor.
For your DPO and business manager
The contract, the suppliers, how data is kept safe and for how long, and an impact assessment ready to adapt.
- Data processing agreement
The Article 28 contract between your school and us
- Sub-processors
Who else handles data, for what, and where
- Security overview
Hosting, encryption, access and breach handling, marked built or planned
- Retention schedule
How long each kind of data is kept
- DPIA template
A pre-filled data protection impact assessment for your school
- Terms of service
Prices, refunds, responsibilities and ending an account
For the people you ask
Privacy notices to send with a survey invitation.
- Privacy notice for staff
A template to give staff before a survey
- Privacy notice for parents
A template to give parents and carers
- Privacy notices for pupils
Child-friendly versions for Years 3 to 6 and 7 to 13
For your safeguarding lead
What happens when a comment suggests someone may be at risk.
- Safeguarding protocol
How alerts work and what your safeguarding lead does
How we work
Where AI is used, and how we handle the data of people with an account.
- How we use AI
What AI does and does not do, and what is sent
- Our privacy notice
How we handle account users’ data, as controller