Privacy Policy
This Privacy Policy explains how Castle School collects, uses, discloses, and retains personal data in connection with its website and related services. It applies to visitors, enquiry submissions, and other interactions with the site.
Your Rights
Subject to legal limits, you may ask to access, correct, or update your personal data, and you may raise concerns about how it is handled. Where a request cannot be fully granted, we will explain the reason in general terms.
Privacy Requests
To make a privacy request, provide enough information for us to identify the relevant record and describe the issue clearly. We may ask for additional details before responding. Some requests may be declined or limited where required to protect legal obligations, security, or the rights of others.
Retention of Data
We retain personal data for the period needed to provide services, manage records, resolve enquiries, meet legal obligations, and support legitimate business needs. When data is no longer required, we will delete it, anonymise it, or otherwise handle it in a secure manner consistent with our retention practices.
Policy Changes
We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and change the effective date where appropriate. If a change materially affects how we handle personal data, we will take reasonable steps to draw attention to it.
Data We Collect
We may collect identifiers and contact details, account or registration information, course or enquiry details, payment-related records where applicable, device and browser information, usage data, and communications sent to us. We also process information that is needed to manage access, support learning activities, and maintain the security and operation of the site.
Sources of Data
We collect personal data directly from users when they submit forms, register interest, or communicate with us. We also receive data automatically through the site and related systems, including device data, log data, and cookie information. In some cases, we may receive limited information from service providers that help us operate the site or process transactions.
Types of Cookies
We may use essential cookies to support site operation, security, and session management. Functional cookies may remember preferences and improve usability. Analytics cookies may help us understand how the site is used so we can review performance and content. Cookie settings may vary depending on the browser or device used.
Cookie Controls
You may manage cookies through your browser settings and, where available, through on-site preference controls. If you disable certain cookies, some features may not function as intended. Essential cookies may still be used where they are needed to provide the site and maintain basic security.
How We Use Data
We use personal data to operate the website, respond to enquiries, manage registrations or course-related activity, provide requested information, process transactions where applicable, maintain records, improve site performance, detect and prevent misuse, and meet legal or compliance obligations. We may also use data to communicate administrative updates that are necessary for service delivery.
Service Providers
We may share personal data with vendors and other service providers that support hosting, analytics, communications, administration, payment processing, or technical maintenance. These parties are expected to use the data only for the services they provide to us and to apply appropriate safeguards. We do not authorise them to use the data for unrelated purposes.
Legal Disclosure
We may disclose personal data where necessary to comply with applicable law, respond to lawful requests, protect our rights, investigate suspected misuse, or support the safety and security of users and systems. We may also share information when needed to establish, exercise, or defend legal claims.