Privacy Policy

Castiglione Consulting Ltd

Last updated: 24/09/26

1. Who We Are

Castiglione Consulting Ltd provides specialist educational consultancy, assessment services, training, professional development, online learning and professional membership services relating primarily to examination access arrangements and associated professional practice.

Castiglione Consulting Ltd is registered with the Information Commissioner’s Office (ICO) as a data controller.

If you have any questions about this policy or how your personal information is handled, please contact:

Email: lia@castiglione-consulting.com

Postal address:
5 Manor Court
Wymeswold
Loughborough
LE12 6SJ

2. What Information We Collect

The type of personal information we collect depends on the service being provided.

A. Assessment Services

When providing assessment services, we may process:

  • Student names and dates of birth

  • Educational history and relevant background information

  • Assessment data and test results

  • Form 8 and other relevant access arrangements documentation

  • Assessment reports and summaries

  • Information provided by schools, colleges or other commissioning organisations that is relevant to the assessment

This information is normally provided by the school, college or other commissioning organisation for the purpose of conducting access arrangements assessments.

Where necessary, this may include special category personal data, particularly information relating to health, disability or learning difficulties.

B. Training, Professional Development and Consultancy

When providing training, CPD events, online courses or consultancy, we may collect:

  • Names

  • Professional roles and organisations

  • Email addresses

  • Contact details

  • Attendance records

  • Feedback and survey responses

  • Information provided as part of a consultancy enquiry or booking

  • Invoice and billing information

Where consultancy relates to a particular centre or professional situation, information supplied to us may include details necessary to understand and respond to the enquiry.

Clients should avoid providing identifiable information about individual students unless this is necessary for the consultancy service being requested.

Where live events are delivered via Zoom, sessions may be recorded where participants have been informed that recording will take place.

C. Castiglione Consulting Community and Academy

When you create an Academy account, purchase an online course or join the Castiglione Consulting Community, we may collect:

  • Name

  • Email address

  • Professional role and organisation

  • Account and enrolment information

  • Course participation and completion records

  • Community posts, comments and other information you choose to contribute

  • Purchase and transaction information

These services are provided through Thinkific.

D. Website and Marketing

When you use our website, contact us or sign up to receive updates, we may collect:

  • Name

  • Email address

  • Organisation

  • Information submitted through contact, booking or invoice forms

  • Marketing preferences

Marketing communications are managed using Mailchimp.

Our website is hosted by Squarespace, which may use cookies and analytics technologies. Further information is available in our Cookie Policy where applicable.

3. Lawful Basis for Processing

We process personal information only where we have an appropriate lawful basis under UK data protection law.

Depending on the purpose, this may include:

  • Performance of a contract, where processing is necessary to provide assessment, training, consultancy, membership, online course or other services that have been requested

  • Legitimate interests, including managing our services, responding to enquiries, maintaining appropriate professional and administrative records, communicating with existing clients and improving our services, provided these interests are not overridden by the rights and interests of the individual

  • Legal obligation, where we are required to process or retain information by law

  • Consent, including where appropriate for marketing communications, testimonials or other activities for which consent is required

Where special category personal data is processed, we also identify and document an appropriate condition for processing that information under Article 9 of the UK GDPR and, where applicable, the Data Protection Act 2018.

4. How We Use Your Information

We may use personal information to:

  • Deliver assessment services

  • Carry out assessments and produce reports and relevant access arrangements documentation

  • Deliver training and CPD events

  • Provide consultancy services

  • Process bookings, purchases and payments

  • Provide access to online courses and Academy content

  • Administer Community membership and participation

  • Record attendance, course completion and CPD activity

  • Issue certificates

  • Respond to enquiries and provide customer support

  • Maintain appropriate administrative and professional records

  • Improve our services

  • Send professional updates and marketing communications where permitted

We do not sell personal information to third parties.

5. Data Sharing and Service Providers

We use selected third-party service providers to support the delivery and administration of our services.

These may include:

  • Google Workspace, for email, document storage and administration

  • Thinkific, for online course delivery, Academy accounts and Community membership

  • Stripe, for payment processing

  • Zoom, for live online training, meetings and recordings

  • Mailchimp, for email communications and marketing

  • Squarespace, for website hosting and website services

These organisations may process personal information on our behalf or, in some circumstances, as independent data controllers.

We may also share information with professional advisers, service providers or public authorities where this is necessary and lawful.

We do not otherwise disclose personal information to third parties unless:

  • this is necessary to provide the service requested;

  • we have been authorised to do so;

  • we are required to do so by law; or

  • there is another lawful basis for the disclosure.

Some service providers may process information outside the United Kingdom. Where this occurs, appropriate safeguards are used in accordance with applicable data protection law.

6. Data Storage and Security

Personal information is stored using appropriate systems and services, including Google Workspace and other providers identified in this policy.

Assessment reports and related documentation are stored securely within Google Workspace.

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, disclosure, alteration or destruction.

Access to personal information is limited to those who require it for legitimate business or professional purposes.

7. Data Retention

We retain personal information only for as long as it is reasonably necessary for the purposes for which it was collected, including any legal, regulatory, professional or administrative requirements.

Assessment documentation is retained in accordance with applicable professional, contractual and regulatory requirements.

Training, consultancy, membership, purchase and booking records may be retained for administrative, financial, professional and audit purposes.

Marketing information is retained until you unsubscribe, withdraw consent where applicable, or otherwise request removal, subject to any information we need to retain to record that request.

8. Your Rights

Under UK data protection law, you may have the right to:

  • Request access to your personal information

  • Request correction of inaccurate or incomplete information

  • Request erasure of your personal information in certain circumstances

  • Request restriction of processing in certain circumstances

  • Object to certain types of processing

  • Request transfer of your information where the right to data portability applies

  • Withdraw consent at any time where processing is based on consent

  • Lodge a complaint with the Information Commissioner’s Office

Not all rights apply in every circumstance.

Requests relating to your personal information should be made to:

lia@castiglione-consulting.com

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our services, systems or legal obligations.

The date at the top of this policy will show when it was last updated.

10. Contact

If you have any questions about this Privacy Policy or how your information is handled, please contact:

Castiglione Consulting Ltd
Email: lia@castiglione-consulting.com
Postal address:
5 Manor Court
Wymeswold
Loughborough
LE12 6SJ

You also have the right to make a complaint to the Information Commissioner’s Office.