Privacy Policy

JP School Consultants LLP

Last updated: June 2026

1. Who we are

JP School Consultants LLP ("we", "us", "our") is an education consultancy based in the UK. We are the data controller for the personal information described in this policy.

Contact: Katharine James or Hetty Palmer, info@jpschoolconsultants.com

ICO registration number: ZB909455

2. What information we collect

We do not collect personal data automatically through our website - there are no forms, trackers, or sign-up boxes on our site, only a link to email us directly.

When you contact us by email, and if you go on to become a client, we may collect and hold:

• Your contact details: name, email address, phone number, postal address.

• Information about your child, which you provide to us (directly or via a Word document questionnaire we ask you to complete), which may include: name, date of birth, school(s) attended, educational history, and needs relevant to our consultancy work.

• Reports and documents you choose to share with us relating to your child, which may include educational, psychological, or medical reports, assessments, or references. These may contain special category data (e.g. health information) under UK GDPR.

• Records of our correspondence and any notes from our work together.

We only collect what we need to provide our consultancy services to you.

3. Why we use your information and our legal basis

What we use it for and Legal basis:

Communicating with you and delivering our consultancy services - Performance of a contract (Article 6(1)(b) UK GDPR)

Understanding your child's needs so we can advise you appropriately - Performance of a contract; and explicit consent where the information is a special category (Article 9(2)(a))

Keeping records for professional and legal purposes - Legitimate interests (Article 6(1)(f)) / legal obligation

Where we rely on your consent to hold sensitive information about your child, you can withdraw that consent at any time by contacting us — this won't affect anything we've already done, but may affect our ability to continue advising you.

4. Sharing your information

We do not share your information, or your child's information, with any third party without your explicit consent, except where we are required to by law (for example, a legal obligation to report a safeguarding concern, or a lawful request from a regulator or court).

Our IT provider (Google Workspace) processes data on our behalf as a data processor, strictly to provide secure storage — they do not use your data for their own purposes.

5. How we store and protect your information

Your information is stored on a password-protected, access-controlled Google Drive, accessible only to staff who need it to deliver our services to you.

6. How long we keep your information

We keep your and your child's information for as long as we are actively working with you, and for up to 24 months after our engagement ends, to meet our professional and legal obligations. After that, we securely delete it.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you or your child

• Ask us to correct inaccurate information

• Ask us to delete your information (in some circumstances)

• Restrict or object to our processing

• Request a copy of your data in a portable format

• Withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact us at info@jpschoolconsutlants.com. We will respond within one month.

8. Complaints

If you're unhappy with how we've handled your information, please contact us first at info@jpschoolconsultants.com so we can try to put things right — we aim to acknowledge any complaint within 30 days.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO) Website: ico.org.uk Helpline: 0303 123 1113

9. Changes to this policy

We may update this policy from time to time. The latest version will always be available on our website.