Policy Date: 1 July 2026
Review Date: 1 July 2027
1. Purpose
This policy explains how Inspired Ed collects, stores, uses and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
It applies to all learners accessing Inspired Ed’s AQA distance-learning programmes, including:
- The AQA Registration and Assessment Service
- The Personalised Distance Learning Programme
- The Activity Box Programme
2. Personal Data Collected
Inspired Ed collects only the information necessary to deliver its learning programmes safely and effectively. This may include:
- Parent or carer contact details
- The learner’s name and age
- Information about the learner’s educational needs
- Relevant medical, special educational needs and disabilities (SEND), or safeguarding information shared by parents or carers
- Completed activities
- Evidence submitted for AQA units
- Feedback and assessment information
- Payment and invoicing information
Inspired Ed does not collect images, videos or direct communications from learners unless this has been specifically agreed with their parent or carer.
3. Lawful Bases for Processing
Inspired Ed processes personal data under the following lawful bases:
Contract
Personal data may be processed where necessary to deliver the agreed learning programme and AQA accreditation services.
Legitimate Interests
Personal data may be processed where necessary to:
- Support learner safety
- Personalise learning
- Maintain the effectiveness and quality of the programme
Legal Obligation
Personal data may be processed where necessary to meet safeguarding requirements and other legal obligations, including statutory reporting duties.
4. How Personal Data Is Used
Personal data may be used to:
- Prepare and send digital learning materials or activity boxes
- Tailor learning to the learner’s needs, interests and SEND profile
- Communicate with parents, carers or commissioning bodies
- Maintain safeguarding records
- Assess, moderate and submit evidence for AQA Unit Awards
- Manage invoicing, administration and financial compliance
Personal data is not used for marketing. It is not shared with third parties unless this is necessary to provide the programme, required by law, or otherwise explained in this policy.
5. Data Storage and Security
Inspired Ed takes appropriate steps to ensure that personal data is stored securely.
These measures include:
- Storing digital records on password-protected devices
- Storing paper records securely
- Shredding paper records when they are no longer required
- Storing safeguarding records separately from general learner information
- Limiting access to personal data to those who need it for an appropriate purpose
Personal data may be shared where:
- A safeguarding referral is required
- Statutory reporting is required
- A commissioning organisation, such as a local authority, requires information about educational progress
- Sharing is otherwise required by law
Inspired Ed does not sell personal data or transfer it to third parties for commercial purposes.
6. Data Retention
Different types of personal data are retained for different periods:
- General learning records: Retained for one year after the learner’s programme ends
- Safeguarding records: Retained in accordance with applicable statutory guidance, usually until the learner reaches the age of 25
- Financial records: Retained for six years for accounting and HM Revenue and Customs compliance
Once the applicable retention period has ended, personal data will be securely deleted or destroyed unless there is a lawful reason to retain it for longer.
7. Rights of Parents and Carers
Parents and carers may have the right to:
- Request access to their personal data
- Request the correction of inaccurate or incomplete personal data
- Request the deletion of personal data, unless it must be retained for safeguarding, contractual or legal reasons
- Request information about how their personal data is collected and used
- Object to certain types of processing
- Request that processing be restricted in certain circumstances
Requests will normally be responded to within one calendar month.
8. Data Breaches
Any suspected personal data breach will be:
- Investigated promptly
- Recorded securely
- Reported to the Information Commissioner’s Office where legally required
- Communicated to affected individuals where the breach is likely to result in a high risk to their rights and freedoms
Inspired Ed follows applicable Information Commissioner’s Office guidance on the management and reporting of personal data breaches.
Privacy Notice – InspiredEd
InspiredEd takes your privacy seriously. I only collect information that is needed to deliver learning safely and effectively. This may include basic learner details, educational needs, submitted work, and communication with parents/carers or commissioning bodies.
All data is stored securely and never used for marketing. Safeguarding overrides confidentiality, meaning information may be shared with Children’s Services, Police, or Local Authorities if needed to protect a child.
InspiredEd works entirely through distance learning, so all interaction is remote. Learner information is handled with care and never published or shared publicly.
You have the right to access, correct, or request deletion of your data. For any questions, please contact: sendinspired@gmail.com
A full version of the Privacy Statement is available on request.