Data Processing Agreement
This Data Processing Agreement sets out the Article 28 processing terms used where a school acts as controller and SchoolQuest acts as processor for the core school learning service.
Core processing terms
The agreement covers subject matter and duration, nature and purpose of processing, categories of personal data and data subjects, documented instructions, confidentiality, security, subprocessors, assistance with rights requests and DPIAs, breach support, deletion/return at termination, audit information and international-transfer arrangements where relevant.
Important boundary
Any processing SchoolQuest determines for its own independent commercial purposes must be separately assessed; contractual labels do not override the actual role performed.
Contact
For data protection, privacy, safeguarding or online-safety questions about SchoolQuest, contact data@schoolquest.co.uk. Schools may use this address for data-rights requests, security concerns and safeguarding enquiries relating to the service.
SchoolQuest keeps these documents under review and will update the version and review date when material changes are made.