Privacy Policy

Castiglione Consulting Ltd

Last updated: 18/02/26

1. Who We Are

Castiglione Consulting Ltd provides specialist educational consultancy, assessment services, training and professional development relating to examination access arrangements.

Castiglione Consulting Ltd is a registered data controller with the Information Commissioner’s Office (ICO).

If you have any questions about this policy or how your information is handled, please contact:

Email: lia@castiglione-consulting.com

Postal address: 5 Manor Court, Wymeswold, Loughborough, LE12 6SJ

2. What Information We Collect

The type of personal data we collect depends on the service being provided.

A. Assessment Services

When providing assessment services, we may process:

  • Student names and dates of birth

  • Educational history

  • Assessment data and test results

  • Form 8 documentation

  • Assessment reports and summaries

  • Relevant background information provided by the school or college

This information is provided by schools, colleges or other commissioning bodies for the purpose of conducting access arrangements assessments.

Where necessary, this may include special category data (for example, information relating to learning difficulties or medical needs).

B. Training and Professional Development

When delivering training, CPD events or online courses, we may collect:

  • Delegate names

  • Professional role and organisation

  • Email addresses

  • Location

  • Attendance records

  • Feedback and survey responses

  • Invoice and billing information

Where events are delivered via Zoom, sessions may be recorded and made available to registered participants.

C. Website and Marketing

When you use our website or sign up to receive updates, we may collect:

  • Name

  • Email address

  • Organisation

  • Information submitted via contact or invoice forms

Marketing communications are managed using Mailchimp.

Our website is hosted by Squarespace, which may use standard website cookies and analytics tools.

3. Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Performance of a contract (e.g. delivering assessment or training services)

  • Legitimate interests (e.g. managing bookings, maintaining professional records)

  • Legal obligation (where applicable)

  • Explicit consent (for marketing communications and testimonials where required)

Where special category data is processed in relation to assessment services, this is done for the purposes of providing educational support services and in accordance with applicable data protection law.

4. How We Use Your Information

We use personal data to:

  • Deliver assessment services

  • Produce reports and Form 8 documentation

  • Deliver training and CPD events

  • Process bookings and issue invoices

  • Provide access to online courses (via Thinkific)

  • Record attendance and issue CPD certificates

  • Respond to enquiries

  • Send professional updates (where consent has been provided)

We do not sell personal data to third parties.

5. Data Sharing and Processors

We use carefully selected third-party service providers to support our services. These may include:

  • Google Workspace (secure document storage and email)

  • Thinkific (online course delivery)

  • Stripe (payment processing)

  • Zoom (live training delivery and recording)

  • Mailchimp (email communications)

  • Squarespace (website hosting)

These providers process data on our behalf and are required to maintain appropriate security measures.

We do not share personal data with other third parties unless required by law or with the commissioning organisation where relevant to the service provided.

6. Data Storage and Security

Assessment reports and related documentation are stored securely within Google Workspace.

Reasonable technical and organisational measures are in place to protect personal data from unauthorised access, disclosure, alteration or destruction.

Access to personal data is limited to those who require it for legitimate business purposes.

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

Assessment documentation is retained in line with professional and regulatory requirements.

Training and booking records are retained for administrative and audit purposes.

Marketing data is retained until you unsubscribe or request removal.

8. Your Rights

Under UK data protection law, individuals have the right to:

  • Request access to their personal data

  • Request correction of inaccurate information

  • Request erasure in certain circumstances

  • Restrict or object to processing

  • Withdraw consent where processing is based on consent

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests should be made in writing to lia@castiglione-consulting.com.

9. Contact

If you have any questions about this policy or how your data is handled, please contact:

Castiglione Consulting Ltd
Email: lia@castiglione-consulting.com

You also have the right to lodge a complaint with the Information Commissioner’s Office at www.ico.org.uk.