Last Updated: 6th March, 2025
This Privacy Policy explains how Kompass Education ("we", "us", "our") collects, uses, shares and protects your personal information when you visit our website, use our services, or participate in our AI governance and literacy training programmes for schools and colleges.
1. Information We Collect
1.1 Personal Information
We may collect the following types of personal information:
Contact Information: Name, email address, telephone number, job title, and organisation name.
Account Information: Username, password, and account preferences.
Professional Information: Job role, department, professional interests, and qualifications.
Payment Information: Payment card details, billing address, and transaction history (note that payment processing is handled by secure third-party payment processors).
Course Participation Data: Training attendance records, course progress, assessment results, and completion certificates.
1.2 Automatically Collected Information
When you visit our website, we automatically collect certain information, including:
Device Information: IP address, browser type, operating system, and device identifiers.
Usage Data: Pages visited, time spent on pages, links clicked, and interaction with content.
Cookies and Similar Technologies: Information collected through cookies and similar tracking technologies as detailed in our Cookie Policy.
2. How We Use Your Information
We use your personal information for the following purposes:
To provide and manage our training services
To create and maintain your account
To process payments and manage billing
To communicate with you about our services, updates, and educational content
To personalise your experience and improve our services
To analyse usage patterns and improve our website and offerings
To issue certificates and verify course completion
To comply with legal obligations and protect our legal rights
3. Legal Basis for Processing
Under UK data protection law, we process your personal information based on the following legal grounds:
Performance of Contract: To fulfil our contractual obligations to you when you register for our services.
Legitimate Interests: To pursue our legitimate business interests, such as improving our services, marketing, and protecting against fraud, where these interests are not overridden by your data protection rights.
Consent: Where you have given explicit consent for specific processing activities.
Legal Obligation: To comply with legal requirements to which we are subject.
4. Data Sharing and Disclosure
We may share your personal information with:
4.1 Service Providers
Third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service. These providers have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
4.2 Educational Institutions
With your employer or sponsoring educational institution, if you are participating in our training as part of an institutional arrangement.
4.3 Legal Requirements
When required by law, in response to legal process, or to protect our rights, privacy, safety, or property, or that of our users or others.
5. International Data Transfers
We primarily store and process your data within the United Kingdom and European Economic Area (EEA). However, some of our service providers may be based outside these regions. Whenever we transfer your personal information outside the UK or EEA, we ensure appropriate safeguards are in place, including:
EU-UK adequacy decisions
Standard Contractual Clauses approved by the UK Information Commissioner's Office
Where applicable, derogations for specific situations under UK data protection law
6. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:
How long the information is needed to provide our services
Whether there are legal or contractual obligations that require us to keep the data
Whether retention is advisable in light of our legal position
7. Your Data Protection Rights
Under UK data protection law, you have the following rights:
Right to Access: Request a copy of the personal information we hold about you.
Right to Rectification: Request correction of any inaccurate or incomplete personal information.
Right to Erasure: Request deletion of your personal information in certain circumstances.
Right to Restriction of Processing: Request that we restrict processing of your personal information.
Right to Data Portability: Receive a copy of your personal information in a structured, machine-readable format.
Right to Object: Object to our processing of your personal information based on legitimate interests or for direct marketing.
Rights Related to Automated Decision-making: Not be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
To exercise these rights, please contact us using the details provided at the end of this policy.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or alteration. These measures include:
Encryption of personal data
Regular security assessments
Access controls and authentication procedures
Staff training on data protection
Data processing agreements with service providers
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
9. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to delete such information.
10. Cookies and Similar Technologies
Our website uses cookies and similar tracking technologies to enhance your experience, analyse usage, and assist in our marketing efforts. For detailed information about the types of cookies we use and how to control them, please see our Cookie Policy.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.
12. Data Controller and Contact Information
Kompass Education is the data controller responsible for your personal information.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Kompass Education
Email: [info@kompass.education]
Address: 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, W1T 6EB
Phone: +44 204 538 0240
13. Complaints
If you are concerned about a possible breach of data protection laws, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).
We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
14. Supplementary Information for Website Users
14.1 Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these websites. We encourage you to read the privacy policies of every website you visit.
14.2 Social Media Features
Our website includes social media features, such as share buttons. These features may collect your IP address and which page you are visiting on our website, and may set a cookie to enable the feature to function properly. Social media features are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy policy of the company providing them.
Thank you for trusting Kompass Education with your personal information.