{"id":1902,"date":"2026-02-18T10:57:51","date_gmt":"2026-02-18T10:57:51","guid":{"rendered":"https:\/\/crawlergroups.com\/spm\/?page_id=1902"},"modified":"2026-02-18T11:12:45","modified_gmt":"2026-02-18T11:12:45","slug":"privacy-and-data-protection-gdpr-policy","status":"publish","type":"page","link":"https:\/\/crawlergroups.com\/spm\/privacy-and-data-protection-gdpr-policy\/","title":{"rendered":"Privacy and Data Protection (GDPR) Policy"},"content":{"rendered":"\t\t

\n\t\t\t\t

\n\t\t

\n\t\t\t\t\t

\n\t\t\t\t

\n\t\t\t\t\t

Privacy and Data Protection (GDPR) Policy\n<\/h1>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t
SPM Development Services Limited\nAssessment Policy\nMay 2025<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
Reviewed and Updated: September 2025<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tNext Review: September 2026, or sooner if awarding body or JCQ guidance changes.\n\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
Introduction<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tYour privacy is important to us. This policy explains how SPM Development Services Ltd\nprotects and uses personal data in compliance with the Data Protection Act 2018 and the\nUK General Data Protection Regulation (UK GDPR). It sets out the rights of individuals, the\nresponsibilities of SPM, and how we keep data safe.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
Who We Are\n<\/h3>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
SPM Development Services Ltd is the data controller for the personal data we collect and
process. Director and Data Controller: Simon Piper-Masha
Address: 90 East India Way, Croydon, Surrey, CR0 6RZ
Website: http:\/\/spmdevelopmentservices.co.uk
What Information We Collect<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t
We collect personal data about students, their parents or carers, tutors, and staff. This may\ninclude:<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tNames, contact details and addresses<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tNames, contact details and addresses<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tTuition needs and support requirements<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tRight to work information and qualifications (for tutors\/staff)<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tEmployment records and references Purpose and Lawful Basis for Processing We process personal data for the following purposes:<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tTo provide education and tuition services<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tTo ensure safeguarding and welfare of children<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tTo manage safe recruitment and HR processes<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tTo meet contractual and legal obligations Our lawful bases for processing include:<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tContractual necessity<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tLegal obligations<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tLegitimate interests<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t Consent (where appropriate, e.g. use of images)<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
Safeguarding and Information Sharing\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tSafeguarding the welfare of children is our highest priority. Where safeguarding concerns\narise, information may be shared with other agencies without consent if necessary to\nprotect a child or young person. This is in line with Keeping Children Safe in Education\n(2025) and Working Together to Safeguard Children (2023). The Designated Safeguarding\nLead (DSL) is responsible for decisions about safeguarding information sharing.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
Security Measures\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tSPM uses technical and organisational measures to protect data against loss, damage or\nunauthorised access. These include secure storage, password protection, restricted access,\nencryption where appropriate, and regular staff training in data protection.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
Staff Responsibilities\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tAll staff, tutors and contractors must:\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tOnly collect and use data necessary for their role<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tKeep records factual, accurate and secure<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tReport any data breaches or concerns immediately to the Director<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tFollow SPM policies on safeguarding, online safety and record keeping Data Breach Notification If a data breach occurs, SPM will notify the Information Commissioner\u2019s Office (ICO) within 72 hours, where required. Individuals affected will also be informed without delay if the breach poses a high risk to their rights and freedoms.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
Retention of Information\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tWe keep personal data only as long as necessary for legal or operational purposes. Typical\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
retention periods are:\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tStudent records: until the student turns 26<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tTutor\/mentor records: 5 years after ceasing work with SPM<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tStaff records: 3 years after employment ends<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tClient records: 10 years Records may be kept longer where safeguarding or legal requirements apply. Your Data Protection Rights<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tUnder data protection law, individuals have the following rights:\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tRight of access \u2013 request copies of your personal data<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t Right to rectification \u2013 correct inaccurate or incomplete data<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tRight to erasure \u2013 request deletion of data in certain circumstances<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tRight to restrict processing \u2013 request limits on how data is used<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t Right to data portability \u2013 request transfer of data to another provider<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tRight to object \u2013 object to processing of personal data Requests will be responded to within one month and will be free of charge.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
Complaints\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tIf you have concerns about how SPM handles your personal data, please contact the\nDirector at the above address. If you are not satisfied, you can also complain to the\nInformation Commissioner\u2019s Office (ICO): www.ico.org.uk\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
Policy Review\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tThis policy will be reviewed annually, or sooner if legislation or statutory guidance changes.\n\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<\/body>","protected":false},"excerpt":{"rendered":"
Privacy and Data Protection (GDPR) Policy SPM Development Services Limited Assessment Policy May 2025 Reviewed and Updated: September 2025 Next Review: September 2026, or sooner if [\u2026]<\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"om_disable_all_campaigns":false,"footnotes":""},"class_list":["post-1902","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/crawlergroups.com\/spm\/wp-json\/wp\/v2\/pages\/1902","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crawlergroups.com\/spm\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/crawlergroups.com\/spm\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/crawlergroups.com\/spm\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crawlergroups.com\/spm\/wp-json\/wp\/v2\/comments?post=1902"}],"version-history":[{"count":4,"href":"https:\/\/crawlergroups.com\/spm\/wp-json\/wp\/v2\/pages\/1902\/revisions"}],"predecessor-version":[{"id":1975,"href":"https:\/\/crawlergroups.com\/spm\/wp-json\/wp\/v2\/pages\/1902\/revisions\/1975"}],"wp:attachment":[{"href":"https:\/\/crawlergroups.com\/spm\/wp-json\/wp\/v2\/media?parent=1902"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}