Privacy
What this service holds about you, why, for how long, and what you can ask us to do about it.
Who controls this data
City Council is the data controller for the personal data held here.
What we hold
- Your name, work email address, job title and telephone number, so colleagues and service teams know who they are dealing with.
- What you are allowed to do, and who granted it, so permissions can be explained and reviewed.
- What your school has bought, booked and been invoiced for.
- Your training attendance and any certificates issued to you.
- A record of sign-ins, and of every action that changes money, permissions or contracts.
Why we hold it
To run the arrangement between your school and the council, to keep an auditable financial record, and to meet the obligations the council carries by law. Passwords are stored only as an Argon2id hash and are never recoverable, by us or by anyone else.
Where it is held
All data is held in the United Kingdom, encrypted in transit, with access limited to the people whose role requires it.
How long we keep it
Personal data is kept for 3 years after an account is closed. Financial records and the audit trail are kept for 7 years, which is what the retention schedule requires.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to erase it. Where erasure is requested we remove the personal data and leave the financial record intact but anonymous, because the council is obliged to keep an accurate account of what was bought and by which organisation.
To make a request, contact services.to.schools@example.invalid. You also have the right to complain to the Information Commissioner.
Cookies
This service sets two cookies and no others. One identifies your sign-in session; the other carries a confirmation message across a redirect and expires after two minutes. Neither is used for advertising or analytics, and there is no third-party tracking on any page.