Privacy Policy

Registered in England No. 06594953

UKLRP Registration Number 10033485

We are committed to protecting your privacy. If you have any questions or comments regarding our Privacy Policy please write to the address at the bottom of this page or email enquiries@queensonlineschool.com.

Privacy Notice

Last updated: 19 August 2026

Queen’s Online School is operated by Cambridge Online Education Ltd (company number 06594953). Cambridge Online Education Ltd is the data controller for the personal information described in this notice.

This notice explains how we collect and use personal information in connection with Queen’s Online School.

1. Information we process

Depending on your relationship with us, we may process personal information including:

identification and contact information;
student, parent and guardian information;
admissions and enrolment information;
educational, academic, attendance and assessment information;
communications and correspondence;
safeguarding, welfare and support information;
financial and payment information;
information relating to employees, applicants, self-employed tutors and other service providers;
professional, qualification and compliance information; and
information relating to the use of our IT, learning and communications systems.

Some information may receive additional protection under data-protection law because of its nature.

2. Why we use personal information

We use personal information where necessary to operate and administer the School and its educational services, including for:

admissions and enrolment;
teaching, assessment and academic administration;
communications with students, parents and others;
safeguarding, welfare and student support;
School administration and IT services;
managing staff, tutors and other service providers;
financial administration;
meeting educational, legal and regulatory requirements;
handling enquiries, complaints and legal matters; and
maintaining the security and effective operation of our services.

3. Lawful basis

Depending on the circumstances, we process personal information where:

it is necessary to perform a contract or take steps before entering into one;
processing is necessary to comply with a legal obligation;
processing is necessary for our legitimate interests or those of another person, where those interests are not overridden by the individual’s rights;
consent is the appropriate lawful basis and has been given; or
another basis permitted by applicable data-protection legislation applies.

Where additional legal conditions are required for particular categories of information, we process that information only where an appropriate condition applies.

4. Where information comes from

We obtain personal information principally from the individual concerned or, where appropriate, their parent or guardian.

Information may also be generated or obtained in the course of operating the School, or received from relevant individuals, organisations, service providers or public bodies where there is a lawful reason for doing so.

5. Sharing information

Where necessary and lawful, we may share personal information with appropriate categories of recipients, including:

people and organisations involved in providing and administering our educational services;
IT and other service providers;
awarding, examination and educational organisations;
professional advisers;
safeguarding and public authorities; and
regulators, courts or other bodies where disclosure is required or permitted by law.

We only share personal information where there is an appropriate reason for doing so.

6. International transfers

Where personal information is transferred outside the United Kingdom, we ensure that the transfer is made in accordance with applicable data-protection law and that appropriate safeguards are used where required.

7. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes for which it is held.

Retention periods vary according to the nature and purpose of the information. In determining the appropriate period, we take account of applicable legal, regulatory, safeguarding, educational, financial and contractual requirements, the nature of the information and whether continued retention remains necessary.

Information may be retained for longer where this is lawfully necessary, including in connection with safeguarding, regulatory matters or the establishment, exercise or defence of legal claims.

The ICO expressly permits organisations to provide the criteria used to determine retention where a single specific retention period cannot be given.

8. Your rights

Depending on the circumstances, data-protection law provides individuals with rights which may include:

access to personal information;
correction of inaccurate information;
erasure in circumstances where the right applies;
restriction of processing;
objection to certain processing; and
data portability where applicable.

Where processing is based on consent, consent may be withdrawn.

These rights are not all absolute and their application depends on the circumstances and applicable law.

You have the right to object to processing based on legitimate interests and to processing for direct-marketing purposes where applicable.

The ICO specifically requires the right to object to be brought to people’s attention clearly and separately.

9. Automated decision-making

Where applicable, we will provide the information required by data-protection law concerning solely automated decisions that produce legal or similarly significant effects.

10. Security

We use appropriate technical and organisational measures to protect personal information, having regard to the nature of the information and the risks associated with its processing.