Corestone Education
Privacy Notice
This notice explains how Corestone Education Ltd (“we,” “us,” “our”) collects, uses, and protects your personal data.
Contact
Email: contact@corestone.education
Information We Collect and Use
For Student Education & Welfare:
- Student and carer names, contacts
- Gender, pronouns, date of birth
- Payment details
- SEND/additional support info
- Criminal convictions
- Photographs
- Attendance and absence reasons
- Account access info
- Exam results, qualifications, progress reports
- Compliments, complaints, behaviour data
For Queries, Complaints & Claims:
- Names, contacts, addresses
- Payment and account info
- Call and video recordings
- Witness statements, investigation records
- Financial, health & safety info
- Correspondence
For Marketing & Updates:
- Names, contacts, addresses
- Marketing preferences
- Photographs
- Website/app usage data, IP addresses
- Consent records
For Recruitment:
- Contact details, date of birth, National Insurance number
- ID documents (passport/photo ID)
- Employment and education history
- Right to work and criminal conviction details
- Security clearances
For Legal Compliance:
- ID documents, health & safety info
- Criminal offence data (DBS/Access NI/Disclosure Scotland)
Lawful Bases & Your Rights
We process your data based on:
- Contractual necessity (student services)
- Legitimate interests (queries, complaints)
- Consent (marketing)
- Legal obligation (recruitment, compliance)
Your rights include:
- Access your data
- Correct inaccuracies
- Request deletion or restriction
- Object to processing
- Data portability
- Withdraw consent anytime
Requests are responded to within one month. Contact us at contact@corestone.education to exercise your rights.
Sources of Data
We collect data from:
- You directly
- Parents/carers
- Other educational bodies
- Public sources
- Former employers
- Suppliers and service providers
- Third-party anonymised marketing data processors
Data Retention Periods
Data Type | Retention Period | Reason |
|---|---|---|
Internal Communications (Slack) | 2 years | Operational needs |
Customer Support Tickets | 2 years post-resolution | Service quality/disputes |
Scheduling & Attendance Records | 3 years | Contractual obligations |
Customer Relationship Data | 5 years after last contact | Relationship management |
Student & Tutor Personal Details | 5 years after last activity | Potential re-engagement |
Employee Records | 6 years after employment | Legal obligations |
Payment & Invoicing Information | 7 years | Financial regulations |
Project Documentation | 5 years or as needed | Business knowledge retention |
Information Sharing
We use data processors such as Google Cloud for storage and analytics. We may share information with:
- Parents and carers
- Regulatory authorities
- Legally entitled organisations
- Public channels (website/social media) for marketing/info
- Professional consultants
International Data Transfers
Where applicable, data may be transferred internationally under appropriate safeguards.
Updated May 2025
For full details or privacy inquiries, please contact us at contact@corestone.education.