Updated: 12th June 2026
1.1 The website https://educato.co.uk (the Site) is operated by Educato Limited (“we”, “us”, “our”), a company incorporated in England and Wales under company number 16266179. Our registered office is Mentor House, Ainsworth Street, Blackburn, BB1 6AY.
1.2 Educato Limited is committed to protecting the privacy and security of personal information. This Privacy Policy explains how Educato Limited collects, uses, stores, shares and protects personal data in accordance with:
1.3 Educato Limited acts as a Data Controller when processing personal information relating to candidates, workers, clients, suppliers, website users and employees. This means that we are responsible for processing your personal data and deciding how to use it. This privacy policy explains the types of personal data we may collect about you when you interact with us, why we collect it, what we use it for and what rights you have over that data. Personal data is any information about an identifiable person. Processing is anything we do with your personal data, including using, storing, sharing and deleting it.
1.4 This policy was last updated on the date shown at the top. We may change this policy at any time by posting an updated version on the Site and will make reasonable efforts to bring any material changes to your attention. You may wish to check it before using the Site as any changes will be effective from the date that they are made.
2.1 This Privacy Policy applies to:
It applies to information collected through:
3.1 Depending on your relationship with Educato Limited, we may collect the following categories of personal data:
4.1 As part of our recruitment and safeguarding activities, Educato Limited may process special category data including:
We may also process criminal offence data including:
Such information is processed only where lawful and necessary, and under the appropriate Schedule 1 condition of the Data Protection Act 2018 where required.
5.1 We may collect information directly from candidates, employees, clients, schools, referees and website users.
We may also receive information from:
6.1 We process personal data for the following purposes:
Recruitment and placement: candidate registration, job matching, recruitment services and assignment management.
Compliance and safeguarding: DBS processing, Right to Work verification, safeguarding checks, suitability assessments and regulatory compliance.
Employment administration: payroll processing, HR administration and performance management.
Business operations: client relationship management, supplier management, financial administration and quality assurance.
Legal obligations: regulatory compliance, fraud prevention, safeguarding duties and legal claims management.
7.1 Educato Limited processes personal data under one or more of the following lawful bases:
Contract: processing necessary for candidate registration, employment contracts and recruitment services.
Legal obligation: processing required by law, including Right to Work checks, safeguarding obligations, tax obligations and employment law obligations.
Legitimate interests: including recruitment activities, business administration, service improvement and fraud prevention.
Consent: where required, we will obtain consent before processing personal data. Consent may be withdrawn at any time by contacting us using the details in section 16.
Substantial public interest: where safeguarding or employment screening activities require processing under Schedule 1 of the Data Protection Act 2018.
8.1 Educato Limited may share personal data with:
Educational settings: including schools, academies, colleges, nurseries and alternative provisions.
Compliance providers: including TrustID, CareCheck and DBS services.
Umbrella companies: where relevant and authorised.
Professional advisers: including accountants, solicitors and auditors.
Regulatory bodies: including the DBS, ICO, Teaching Regulation Agency, Education Workforce Council and local authorities.
Information is only shared where lawful and necessary. Where we share personal data with third parties, we ensure that appropriate data processing agreements or safeguards are in place.
9.1 Educato Limited does not routinely transfer personal data outside the United Kingdom. Where any international transfers are required, appropriate safeguards will be implemented in accordance with UK GDPR requirements before any transfer takes place.
10.1 Personal data will be retained in accordance with our Data Retention and Records Management Policy. Typical retention periods are as follows:
Records are not retained longer than necessary for the purpose for which they were collected.
11.1 We process personal data in accordance with the principles set out in Article 5 of the UK GDPR:
Lawfulness, fairness and transparency: We process personal data lawfully, fairly and in a transparent way.
Purpose limitation: We collect personal data for specified, explicit and legitimate purposes and do not process it in a way incompatible with those purposes.
Data minimisation: We only process personal data which is adequate, relevant and limited to what is necessary.
Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date where necessary.
Storage limitation: We do not retain personal data in an identifiable form for longer than necessary.
Integrity and confidentiality: we process personal data securely and protect it against unauthorised or unlawful processing, accidental loss, destruction or damage.
12.1 Educato Limited maintains appropriate technical and organisational measures to protect personal data, including:
Personal information is protected against unauthorised access, loss, misuse, alteration or destruction.
13.1 Any suspected data breach must be reported immediately to the Data Protection Lead. Educato Limited maintains procedures for investigation, risk assessment, ICO notification where required within 72 hours, and communication with affected individuals where necessary.
14.1 You may have the following rights in relation to your personal data:
Right of access: to request a copy of personal information we hold about you.
Right to rectification: to correct inaccurate or incomplete information.
Right to erasure: to request deletion of personal data in certain circumstances.
Right to restrict processing: to limit how we use your personal data in certain circumstances.
Right to data portability: to receive your personal data in a structured, machine-readable format where applicable.
Right to object: to certain processing activities, including direct marketing.
Rights relating to automated decision making: where applicable.
To exercise any of these rights, please contact us using the details in section 16.
15.1 We hope that we can satisfy any queries you may have about the way we process your personal data. However, if you have a concern about how your personal data has been handled, you can raise a data protection complaint directly with Educato Limited using the details below. This section covers complaints about our handling of personal data. For other complaints about our services, please see our Complaints Policy.
A complaint may relate to how personal data has been collected, used, stored, shared, secured, retained or otherwise handled. This includes concerns about privacy rights requests, the way personal data has been used, our security measures, the handling of a personal data breach, or the contents of this privacy policy.
A complaint can be made using the following contact details:
Email: info@educato.co.uk
Contact form: https://www.educato.co.uk/contact/
Telephone: 0161 804 8860
Educato Limited will acknowledge your complaint within 30 calendar days of receiving it and will investigate and respond without undue delay.
If our response is not satisfactory, or you have unresolved concerns, you also have the right to complain to the Information Commissioner’s Office (ICO). You can contact the ICO by calling 0303 123 1113 or by visiting https://ico.org.uk/make-a-complaint/
16.1 For any queries about this policy or how we handle your personal data, please contact us:
Email: info@educato.co.uk
Telephone: 0161 804 8860
Address: Mentor House, Ainsworth Street, Blackburn, BB1 6AY
17.1 Educato Limited uses cookies and similar technologies on its website. Full details of the cookies we use, their purpose, duration and how to manage your preferences are set out in our Cookie Policy, which is available at www.educato.co.uk/cookie-policy/. You may also manage your cookie preferences at any time through the cookie settings tool on the website.
18.1 Educato Limited may contact individuals regarding employment opportunities, recruitment services, industry updates and business communications. You may opt out of marketing communications at any time by contacting us using the details in section 16. Service-related communications will continue to be sent where necessary.
19.1 Our website contains links to third party websites over which we have no control. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies. Where we use third party services such as Google for remarketing purposes, further information about how those providers use your data is available in their own privacy notices. You can manage Google’s use of cookies through Google’s Ads Settings or opt out via the Network Advertising Initiative opt-out page at https://optout.networkadvertising.org/
20.1 Educato Limited maintains records relating to data processing activities, data sharing arrangements, Subject Access Requests, data breaches, consent records and compliance reviews.
21.1 Evidence demonstrating compliance may include privacy notices, processing records, Subject Access Request logs, data breach records, training records and internal audit reports. These records may be reviewed during internal audits, client audits, REC audits and ICO investigations.
22.1 This Privacy Policy will be reviewed annually and sooner where required due to legislative changes, ICO guidance updates, REC audit recommendations or organisational changes.
23.1 Educato Limited maintains a suite of internal policies that support this Privacy Policy, including policies covering data retention, information security, safeguarding and acceptable use of IT systems. These policies are available to staff and may be provided to clients, auditors or regulatory bodies on request. Our Cookie Policy is available on our website. Information about how to raise a complaint is set out in section 15 of this policy.
|
Category of personal data |
Purpose of processing |
Lawful bases for processing |
Retention Period |
|
Identity and contact information |
Candidate registration and recruitment |
Contract, Legitimate interests |
Up to 6 years after relationship ends |
|
Compliance and safeguarding information |
DBS checks, Right to Work verification and suitability assessments |
Legal obligation, Substantial public interest |
As required by safeguarding obligations or DBS Code of Practice |
|
Special category data |
Health, disability and equality monitoring |
Substantial public interest, Legal obligation, Explicit consent |
As required by law or safeguarding obligations |
|
Financial information |
Payroll processing and invoicing |
Contract, Legal obligation |
Minimum 6 years |
|
Technical and website usage data |
Site improvement, fraud protection and analytics |
Legitimate interests, Consent |
3 years from last access |
|
Communication records |
Complaint handling and recruitment activities |
Legitimate interests, Legal obligation |
Up to 6 years |
|
Employee records |
HR administration, performance management and payroll |
Contract, Legal obligation |
Up to 6 years after employment ends |
|
Client and school contact information |
Relationship management and service delivery |
Contract, Legitimate interests |
Up to 6 years |
