This Privacy Policy explains how inTEC Education Services Limited, trading as inTEC Education, collects and uses personal information through its public website and related education-business enquiries. The website provides information about our services and does not offer visitor accounts, pupil logins or a customer portal.
1. Who we are
inTEC Education Services Limited (company number 17331743) is registered in England and Wales. Registered office: Colony One, Silk Street, Ancoats, Manchester, M4 6LZ, United Kingdom. For the processing described in this notice, we act as a data controller, unless a different arrangement is expressly explained.
Website: https://inteceducation.com | Email: enquiries@inteceducation.com | Telephone: 0330 555 5550. Please mark privacy enquiries for the attention of the Compliance Department.
2. Whose information we use
This notice applies to visitors to our public website, people who send enquiries or subscribe to updates, and contacts at schools, academy trusts, colleges, suppliers and other professional organisations. It does not replace separate privacy information and data processing terms that apply where we act as a processor for a school under an IT services agreement.
3. Information we collect and where it comes from
- Contact and organisation details: name, job title, school or organisation, email address and telephone number.
- Enquiry details: contact-form choices, messages, meeting or assessment requests, emails and subsequent correspondence.
- Relationship and customer information: business requirements, discussions, quotations, proposals, contact history and service-related records.
- Newsletter information: email address, subscription choices, consent evidence where applicable, unsubscribe status and campaign interactions.
- Technical information: IP address, browser or device details, timestamps, security logs and, with relevant consent, website usage data collected by Google Analytics 4.
- Information from professional contacts, introductions, organisation websites or business directories where lawfully obtained.
Please do not send pupil records, safeguarding information, passwords, medical information or other sensitive information through a general website form. If sensitive information is necessary for a contracted service, we will establish an appropriate secure process.
4. How we use information and our lawful bases
| Purpose | Information used | UK GDPR lawful basis |
| Handle contact forms, discovery calls, DfE assessment requests and other enquiries | Contact details; enquiry content; messages | Legitimate interests in responding to requests; steps requested before a contract where appropriate |
| Prepare proposals and maintain relationships with schools and suppliers | Professional details; correspondence; proposals | Legitimate interests in operating and developing business relationships; contract where applicable to an individual |
| Operate, protect and maintain the website | Technical identifiers, security logs and form-related security data | Legitimate interests in website availability, security and abuse prevention; legal obligation where applicable |
| Measure website usage with Google Analytics 4 | Analytics identifiers and usage information | Consent for non-essential analytics tracking |
| Send optional email newsletters via Mailchimp | Email address; preferences; evidence of signup; campaign interactions | Consent for voluntary newsletter subscriptions |
| Communicate permissible business-to-business marketing | Business contact details; preferences | Legitimate interests where permitted under UK GDPR and PECR; consent where required |
| Keep necessary records and meet legal obligations | Business records and relevant correspondence | Legal obligation or legitimate interests in governance and defending claims |
Where we rely on legitimate interests, we consider the necessity of the processing and its effect on individuals. You may object as explained below.
5. Contact forms, shared inbox and Autotask
Website enquiries are delivered to a shared business email inbox accessed by authorised members of the inTEC Education team. Relevant enquiries, correspondence and prospective customer information may also be recorded in Autotask, our customer relationship and service management system, to enable follow-up and business administration. Access is restricted to staff who need the information for their role.
Submitting a contact form does not sign you up to marketing. A confirmation that you have read this Privacy Policy is separate from any optional marketing permission.
6. Newsletters and other marketing
Where you choose to subscribe, we use Mailchimp to administer newsletters, maintain subscription records and provide an unsubscribe facility in each marketing email. You can withdraw your consent or object to direct marketing at any time. We will not add website enquirers automatically to the newsletter list merely because they have contacted us.
For professional contacts we may send relevant business-to-business communications where permitted by applicable law. Marketing to sole traders or other individual subscribers is subject to additional PECR requirements. You can opt out at any time.
7. Analytics, cookies and form security
The website uses Google Analytics 4, via Google Site Kit, for usage statistics where visitors accept optional analytics cookies. CookieYes manages the relevant preferences and Basic Google Consent Mode; analytics tags are intended to load only when analytics consent has been given. CookieYes also stores the visitor’s preference choice.
Contact forms use Google reCAPTCHA through Gravity Forms to help detect automated abuse. This may involve technical identifiers and security-related storage or access technologies. Our separate Cookie Policy provides the cookie inventory, purposes and available choices.
8. Who receives information
Information may be accessible to authorised inTEC Education staff and, where necessary for an enquiry or service, relevant inTEC Group personnel. We use suppliers providing website hosting and development, email and productivity services, Autotask, Google Analytics and reCAPTCHA, CookieYes and Mailchimp. These providers receive only information relevant to their services, subject to their applicable roles and contractual arrangements.
We may also share information with legal or professional advisers, insurers, regulators and authorities where it is necessary or legally required. We do not sell personal information.
9. International processing and transfers
Some providers, particularly global cloud, analytics, security and email marketing services, may process information or permit access from outside the UK, including the United States. Where a restricted international transfer occurs, we use the applicable UK adequacy arrangements or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum, and assess transfers where required. Contact us if you would like more information about relevant safeguards.
10. How long we retain information
We keep information only for justified business or legal purposes. The following periods describe the retention arrangements adopted for the public website and associated relationships, subject to any necessary legal hold or documented exception:
| Information | Retention approach |
| Website enquiries that do not result in a business relationship | Normally up to 24 months after the last meaningful contact, followed by deletion or anonymisation from the shared inbox and Autotask. |
| Customer and supplier business correspondence | For the relationship and ordinarily up to six years after it ends, unless a longer or shorter period is justified. |
| Financial and tax records | In accordance with applicable statutory requirements, generally six years from the end of the relevant financial year. |
| Newsletter subscribers | Until unsubscribe or withdrawal; minimal suppression records may be retained to honour a request not to receive further marketing. |
| Website security logs | According to a documented operational schedule proportionate to security and incident needs; longer only where justified. |
| Cookies and similar storage | For the duration set out in the Cookie Policy or until deleted by the visitor, as applicable. |
11. Keeping information secure
We apply access restrictions, appropriate authentication, staff confidentiality arrangements and proportionate technical and organisational safeguards to protect information against unauthorised access, loss, alteration and disclosure. We review provider arrangements and access rights as appropriate.
12. Your rights
You may have rights to access, correct or erase your personal data, restrict or object to processing, and obtain portable copies in applicable circumstances. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. You have the right to object to direct marketing at any time.
Contact us using the details above. You do not need to use a particular form. We may check identity or authority where proportionate and will respond without undue delay, normally within one calendar month, subject to lawful extensions or exemptions. Most requests are free of charge.
13. Complaints
If you are concerned about our handling of personal information, contact the Compliance Department. We will acknowledge data protection complaints within 30 days, investigate without undue delay, keep you informed as appropriate and explain the outcome. You also have the right to complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/.
14. Children’s information and automated decisions
This website is intended for general information and professional business enquiries, not direct collection of pupil records. We do not provide pupil accounts or a pupil portal through this site. We do not use website personal data for solely automated decisions producing legal or similarly significant effects.
15. Changes to this policy
We will review this policy when our website, suppliers, collection methods or legal requirements change. The current notice will be made available on the website.