Privacy Policy

1. Who we are

SF Education Group ("we", "us", "our") is the data controller responsible for your personal data. We are a UK-based venture studio and school improvement consultancy.

Registered office: [PLACEHOLDER — registered office address]
Company number: [PLACEHOLDER — Companies House number]
ICO registration number: [PLACEHOLDER]
Contact: Please use the contact form on our website

2. What data we collect

We may collect and process the following categories of personal data:

• Contact data — name, email address, organisation, role, and the content of messages you send us.
• Technical data — IP address, browser type and version, device information, time zone setting, operating system and platform.
• Usage data — pages visited, time spent, referring URLs and similar analytics information (only where you have given consent).
• Marketing data — your preferences for receiving marketing communications.

3. How we collect your data

We collect personal data when you:

• contact us by email or through the website,
• request information about our consultancy or ventures,
• subscribe to updates or marketing communications,
• visit our website (technical and usage data via cookies and similar technologies — see our Cookie Policy).

4. Lawful basis for processing

We rely on the following lawful bases under Article 6 of the UK GDPR:

• Consent — for non-essential cookies, analytics and marketing communications.
• Legitimate interests — to respond to your enquiries, run and improve our website, and protect our business and users (where these interests are not overridden by your rights).
• Contract — where we are taking steps to enter into or perform a contract with you or your organisation.
• Legal obligation — where we must process data to comply with the law.

5. How we use your data

• To respond to enquiries and provide the services you request.
• To manage our relationship with clients, partners and prospective ventures.
• To improve our website, services and communications.
• To send marketing communications where you have opted in.
• To comply with legal and regulatory obligations.

6. Who we share your data with

We do not sell your personal data. We may share it with:

• Trusted service providers (e.g. email, hosting, analytics) acting as our processors under written agreements.
• Professional advisers including lawyers, accountants and insurers.
• Public authorities where required by law.

Where data is transferred outside the UK, we rely on adequacy decisions, UK International Data Transfer Agreements or Standard Contractual Clauses with appropriate safeguards.

7. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this policy, to satisfy legal, accounting or reporting requirements, and to resolve disputes. Enquiry correspondence is typically retained for up to 24 months unless an ongoing relationship requires otherwise.

8. Your rights

Under UK GDPR you have the right to:

• access your personal data,
• request correction of inaccurate data,
• request erasure of your data,
• restrict or object to processing,
• data portability,
• withdraw consent at any time (without affecting prior lawful processing),
• lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us via the contact form on our website.

9. Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. No transmission over the internet can be guaranteed to be 100% secure.

10. Children

This website is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.