Data protection

Data protection summary for schools and DPOs

A practical index for school DPOs reviewing Schoolgle before a school sends live data.

Last updated: 14 May 2026

Controller and processor roles

The subscribing school or trust remains the data controller for school data. Schoolgle acts as processor when delivering the platform, support, security and agreed product workflows.

Company and registration details

Schoolgle Limited. Company number 16776489. ICO registration ZC103199. Registered office: 46 Hawthorn Drive, Yeadon, Leeds, England, LS19 7XB.

Before sending live data

Schools should review the relevant product schedule, Data Processing Agreement and DPIA/product annex before sending live pupil, staff, contractor or evidence data to Schoolgle.

Product-specific DPIA annexes are used where a module or app processes higher-risk data, such as children's data, SEND/characteristic data, safeguarding-adjacent information, contractor DBS status or uploaded evidence containing personal data.

Key review documents

Privacy policy

How Schoolgle explains roles, data categories, AI use, rights, children's data and contact routes. Read the privacy policy.

Data Processing Agreement

Summary of the controller/processor agreement structure and Article 28 duties. View the DPA page.

Sub-processors

Third-party providers used to deliver Schoolgle and the purposes they support. View sub-processors.

Security

Access control, organisation scoping, encryption, audit logging and incident support. View security overview.

Contact

For data-protection queries, email privacy@schoolgle.co.uk or dpo@schoolgle.co.uk.