Privacy notice

Who is responsible for your information

Kompass Education (UK) Limited is the data controller for the personal information described in this notice. We are registered in England and Wales under company number 15455557. Our registered office is 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, W1T 6EB.

This notice was last updated on 7 October 2026. It applies when you use the Kompass website or learning portal, contact us, create an account, attend training, or buy learning from us. A separate contract, privacy notice or data processing agreement may apply where Kompass builds or operates a system for a school or client.

Information we collect

We collect information you give us, such as your name, email address, organisation, enquiry, account details, course activity, workshop participation and communications with us. If you buy something, Stripe handles your payment details; Kompass receives transaction and purchase records rather than your full card number.

We also receive technical information needed to operate and protect the service, such as device and browser information, IP address, sign-in and security events, consent choices, error reports and basic usage information. If you sign in with Google, we receive the account information Google shares with your permission, normally your name, email address and profile image.

Why we use it

We use personal information to respond to enquiries, provide accounts and learning, deliver workshops and consultancy, process purchases, keep the service secure, diagnose faults and meet our legal and financial obligations.

Our lawful bases are performance of a contract where we provide a purchased or requested service; legitimate interests where we answer enquiries, operate and improve the service, prevent misuse and manage our business; legal obligation where records must be kept; and consent for optional analytics or marketing. You can withdraw consent at any time without affecting earlier processing.

If you request a free resource such as the AI Policy Starter Kit, we may send occasional updates about AI policy and compliance. We send them to UK work email addresses on the basis of our legitimate interests, and to personal or non-UK addresses only if you tick the box to agree. Every update includes an unsubscribe link, and you can object to these updates at any time.

Who receives it

We use carefully selected providers to host the site and database, deliver email, authenticate accounts, process payments and monitor errors. These currently include Vercel, our database and storage providers, AWS Simple Email Service through our mailer, Google for optional sign-in, Stripe for payments and Sentry for error monitoring. They may process information only for the service they provide and under their own legal obligations.

We may also share information with professional advisers, regulators, courts or law enforcement where the law requires it, or with a client organisation where you use Kompass through that organisation and the applicable agreement permits this. We do not sell personal information.

International transfers and security

Some providers may process information outside the UK. Where this happens, we rely on a UK adequacy decision or approved contractual safeguards, such as the UK International Data Transfer Agreement or Addendum, as appropriate.

We use technical and organisational measures designed to protect personal information, including access controls, secure connections, account security and monitoring. No online service can guarantee absolute security, so please contact us promptly if you believe an account or message has been compromised.

How long we keep it

We keep information only for as long as it is needed for the purpose described above. We consider whether an account or client relationship is active, whether a record is needed to deliver learning or support, legal and tax record-keeping periods, security requirements, and the time allowed for possible legal claims. We delete or anonymise information when it is no longer needed, subject to limited backups and legal holds.

Your rights and how to contact us

Depending on the circumstances, you may ask for access to your personal information, correction, deletion, restriction, portability, or object to how it is used. You may also withdraw consent. To make a request or ask a privacy question, email darren@kompass.education. We may need to verify your identity before acting on a request.

You also have the right to complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first, but this does not affect your right to contact the ICO.

Make a data protection complaint to the ICO (opens in a new tab)