Privacy Policy

1. Introduction

Independent Schools Futures Limited ("ISF", "we", "us", or "our") is committed to protecting your privacy and ensuring your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at isf.ltd and its subdomains, or when you use our tools and services.

2.1 Information You Provide Directly

When you contact us or request access to our tools, we may collect:

• Your name
• Email address
• Phone number (if provided)
• Organisation name and your role
• Details about your enquiry or the tools you're interested in

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on pages
• Referring website (how you found us)
• Date and time of your visit

We use the information we collect for the following purposes:

• To respond to your enquiries - Processing and responding to tool access requests and general enquiries
• To provide our services - Granting access to our analytical tools and resources
• To communicate with you - Sending relevant information about our services that you have requested
• To improve our website - Analysing how visitors use our site to enhance user experience
• To comply with legal obligations - Meeting our regulatory and legal requirements

Under UK GDPR, we process your personal data on the following legal bases:

• Consent - When you submit an enquiry or request access to our tools, you consent to us processing your data for that purpose
• Legitimate Interests - We have a legitimate interest in understanding how our website is used and improving our services
• Contractual Necessity - When processing is necessary to provide services you have requested
• Legal Obligation - When we are required to process data to comply with the law

We do not sell, trade, or rent your personal information to third parties. We may share your data with:

• Service Providers - Trusted third parties who assist us in operating our website and conducting our business (e.g., Firebase/Google Cloud for hosting and data storage)
• Professional Advisers - Lawyers, accountants, and other professional advisers as necessary
• Legal Requirements - When required by law, court order, or governmental authority

All third-party service providers are contractually bound to protect your data and use it only for the purposes we specify.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Enquiry data - Retained for up to 3 years after your last interaction with us, unless you request earlier deletion
• Tool access requests - Retained for the duration of your access plus 2 years
• Website analytics - Aggregated and anonymised data may be retained indefinitely

Our website is hosted on Google Cloud Platform (Firebase), which may process data in data centres located outside the UK. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO), to protect your personal data.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at dtl.fsi@seiriuqne. We will respond to your request within one month.

9. Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:

• HTTPS encryption for all data transmission
• Secure cloud infrastructure with Google Cloud/Firebase
• Access controls limiting data access to authorised personnel only
• Regular security reviews and updates

11. Children's Privacy

Our website and services are not directed at children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Complaints

If you have concerns about how we handle your personal data, please contact us first at dtl.fsi@seiriuqne. We will do our best to resolve your concerns.

You also have the right to lodge a complaint with the UK's supervisory authority:

If you have any questions about this Privacy Policy or our data practices, please contact us: