Data Protection Assurance Statement

Last updated: null

Data Protection Assurance Statement

Education Companion Ltd is committed to protecting personal data and supporting schools and trusts to meet their data-protection obligations.

The Education Companion platform has been designed with data protection, confidentiality and security in mind. We process personal data only to support schools and trusts in managing complaints and related communications, and we do so in line with UK GDPR and the Data Protection Act 2018.

Education Companion acts as a Data Processor on behalf of schools and trusts, who remain the Data Controllers. We process data only on the documented instructions of the relevant school or trust and in accordance with our Licence Agreements and data-protection terms.

We apply appropriate technical and organisational measures to safeguard data, including role-based access controls, encryption, audit logging and secure hosting environments. Access to data is limited to authorised users, and any support access by Education Companion staff is restricted, logged and subject to confidentiality obligations.

Education Companion does not use personal data for marketing, profiling or automated decision-making. Any use of AI within the platform is assistive only and does not replace human judgement or decision-making by schools or trusts.

We regularly review our data-protection practices, documentation and controls, including through onboarding discussions with schools and in response to feedback from Trust DPOs or governance teams.

This statement should be read alongside our Privacy Notice, Platform Terms of Use and Data Protection Impact Assessment (DPIA).

For data-protection queries, schools and trusts should normally contact their own Data Protection Officer, who may contact Education Companion where required.


Companion-CP | V1.0 | 2026

×