Privacy Policy

Last reviewed: 1 September 2025
Next review due: 1 September 2026

1. Introduction
This Privacy Policy explains how AC Group (Education) Ltd T/A The AC Group (“we”, “our”, “us”) collects, uses, stores, and protects personal information.
We are committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant legislation.
This policy explains your rights, how to contact us, and how we ensure your personal data is handled lawfully, fairly, and transparently.
By using our website www.theacgroup.co.uk or by providing personal information to us, you agree to the practices described in this policy.

2. Who We Are
Data Controller:
AC Group (Education) Ltd T/A The AC Group
Company number: [insert company number if you’d like it shown]
Registered address: 1–2 Basford House, Derby Road, Heanor, Derbyshire, DE75 7QL
info@theacgroup.co.uk
We provide alternative education services and personalised learning support for children and young people.

3. What Personal Data We Collect
We may collect and process the following information depending on how you interact with us:
Category Examples
Identification Data Name, contact details, organisation name, job title
Communication Data Emails, messages, feedback, or enquiries sent through our website or email
Learner Data Details necessary to provide education services (where applicable, shared lawfully with consent or under contract)
Technical Data IP address, browser type, device, and analytics data (via cookies)
Financial or Administrative Data Payment information or invoices where relevant

We only collect what is necessary to deliver our services or meet legal obligations.

4. How We Use Your Data
We use personal data for the following purposes:

• To respond to your enquiries and communicate with you.

• To provide and manage education or support services.

• To comply with contractual, safeguarding, and legal obligations.

• To manage our website and analyse its performance.

• To maintain accurate records for auditing, safeguarding, and quality assurance.

• To meet regulatory or local authority requirements (e.g. Nottinghamshire or Derbyshire County Council frameworks).

5. Lawful Bases for Processing
We process personal data under one or more of the following lawful bases:

• Consent — when you have given us clear permission.

• Contract — when processing is necessary to fulfil an agreement or provide a service.

• Legal obligation — where we are required by law (e.g., safeguarding or record-keeping).

• Legitimate interests — for our administrative or operational efficiency, provided your rights are not overridden.

6. Data Retention
We retain personal data only as long as necessary for the purposes collected, in line with our Records Retention Schedule.
Some information may be kept longer if required by law (e.g. safeguarding or financial records).

7. Data Sharing
We do not sell or rent personal information.
We may share data when necessary with:

• Local authorities or commissioning bodies (e.g. Nottinghamshire County Council, Derbyshire County Council).

• Partner professionals or educators working under contract.

• Our legal, regulatory, or financial advisers.

• Technology providers supporting our operations (e.g., secure email or data storage services).

All sharing is done securely and in accordance with data protection law.

8. Your Rights
Under UK GDPR, you have the right to:

• Access a copy of your personal data.

• Request correction of inaccurate data.

• Request erasure of your data (“right to be forgotten”).

• Restrict or object to certain processing.

• Request data portability.

• Withdraw consent at any time (if consent was the lawful basis).

Requests can be made in writing to:
📧 info@theacgroup.co.uk
We aim to respond within one month of receiving a valid request.

9. Data Security
We use appropriate technical and organisational measures to protect data, including encryption, restricted access, secure cloud storage, and staff training.
All staff and contractors are bound by confidentiality and data protection agreements.

10. Cookies and Analytics
Our website uses cookies to function properly and to analyse usage patterns.
You can read full details in our Cookie Policy and adjust your preferences through our cookie banner.

11. External Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites.

12. Contact and Complaints
If you have any questions, concerns, or complaints about our data practices, please contact us:
info@theacgroup.co.uk
AC Group (Education) Ltd T/A The AC Group
1–2 Basford House, Derby Road, Heanor, Derbyshire, DE75 7QL

If you remain dissatisfied, you have the right to contact the:
Information Commissioner’s Office (ICO)
📍 Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
🌐 www.ico.org.uk