Privacy Policy
Dimensions Curriculum Ltd Last updated: April 2026
1) Introduction
This Privacy Policy explains how Dimensions Curriculum Ltd (“we”, “us”, “our”) collects, uses, stores and shares personal data.
When we say personal data, we mean information that relates to an identifiable individual (for example a teacher, school leader, governor, parent, or other contact person). This policy is primarily about individuals rather than organisations.
Our privacy pledge:
- We store personal information securely.
- We do not sell your personal data.
- We will not share your details with partner organisations for their own marketing without your permission.
- You can change your preferences or opt out of marketing at any time.
We may update this notice from time to time. If we make significant changes, we will highlight them on our website and/or contact you.
2) Who we are (data controller)
Dimensions Curriculum Ltd is the data controller for the personal data described in this policy.
Address: Sawley Suite, Halls Arms Business Centre, Clitheroe Road, Knowle Green, Preston, PR3 2YQ, UK Telephone: 01254 779142 Privacy contact: [email protected]
3) When we collect personal data
We collect personal data when you:
- Complete an enquiry form on our website
- Purchase/order products or services from us
- Subscribe to our newsletter or marketing updates
- Give us your details during a face-to-face conversation
- Sign up to receive information from us at an event
- Contact us by email, phone, social media, or contact forms
4) Personal data we collect
Depending on how you interact with us, we may collect:
- Name
- Job title and organisation/school details
- Email address
- Phone number
- Your enquiry and any information you request
- Products/services you have purchased or used
- Communications with us (emails, call notes, messages)
Payments: If you purchase online, payments are processed by third-party payment providers (currently PayPal and Stripe). We do not receive or store your full card details. The payment provider will process your payment details in line with their own privacy notices.
5) How we use your personal data (purposes)
We use personal data to:
- Respond to enquiries and provide information you request
- Provide products and services, including onboarding, training and support
- Manage our relationship with member schools/customers (including updates about resources, training and product developments)
- Send relevant marketing communications about our curriculum products and services (where permitted)
- Improve our website and services (including using Google Analytics)
- Maintain business records, accounting, and compliance
- Protect our business and users (fraud prevention, security, and troubleshooting)
6) Our lawful bases for processing
UK GDPR requires us to have a lawful basis for using personal data. Depending on the activity, we rely on:
- Contract: where processing is needed to provide products/services you have ordered.
- Legitimate interests: where we have a genuine business reason (for example, responding to enquiries, improving our services, and maintaining customer relationships). We will balance this against your rights.
- Consent: where required (for example, certain marketing communications and non-essential cookies/analytics, depending on your cookie choices).
- Legal obligation: where we must keep records for tax/accounting or other legal requirements.
7) Marketing preferences
We aim to keep communications relevant to curriculum, educational issues, resources, and training.
You can opt out of marketing at any time by:
- Using the unsubscribe link in an email, or
- Emailing [email protected]
If you opt out, we may keep a minimal record of your contact details on a suppression list so we can respect your preferences.
8) Cookies and Google Analytics
We use cookies and similar technologies on our website.
Google Analytics helps us understand how visitors use our website (for example, pages visited, time on site, and general device/browser information). This data may include online identifiers (such as cookie identifiers) and may be processed by Google on our behalf.
You can control cookies through our cookie settings/banner (where available) and through your browser settings. For more detail, please see our Cookie Policy (or contact us if you would like a copy).
9) Who we share personal data with
We only share personal data where necessary for our business operations, including with:
- Payment providers: PayPal and Stripe (to process payments)
- Analytics provider: Google (Google Analytics)
- IT and website service providers: hosting, security, and maintenance providers
- Professional advisers: accountants, insurers, and legal advisers where needed
We require service providers to protect personal data and only use it for agreed purposes.
We do not share personal data with partner organisations for their own marketing unless you have given permission.
10) International transfers
Some of our service providers (for example Google, PayPal and Stripe) may process personal data outside the UK.
Where personal data is transferred internationally, we take steps to ensure appropriate safeguards are in place (for example, contractual protections approved for UK use).
11) Security
We take security seriously and use appropriate technical and organisational measures to protect personal data.
No system is 100% secure, but we work to prevent unauthorised access, loss, misuse, alteration, or disclosure.
12) Credit/debit card security
If you pay by card via PayPal or Stripe, your payment details are processed securely by the payment provider.
We do not store your full card details.
13) How long we keep personal data (retention)
We keep personal data only for as long as necessary for the purposes described in this policy.
Retention depends on the type of data and why we hold it. For example:
- Enquiry records: kept for a reasonable period to manage follow-up and support.
- Customer records: kept while we provide services and for a period afterwards.
- Financial records: kept as required for accounting and tax purposes.
When we no longer need personal data, we will delete it or anonymise it.
14) Your rights
You have rights under UK GDPR, including the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your personal data (in certain circumstances)
- Restrict processing (in certain circumstances)
- Object to processing (including objecting to direct marketing at any time)
- Data portability (in certain circumstances)
To exercise your rights, email [email protected].
15) Complaints
If you have concerns, please contact us first and we will do our best to resolve the issue.
You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO): https://ico.org.uk/
16) Changes to this policy
This policy was last updated in April 2026.
We may amend this policy from time to time to reflect changes to our processes or changes in data protection law and guidance. If we make significant changes, we will show this clearly on our website and/or contact you directly.
Scoill Phurt Le Moirrey
Woodford Halse School
Beeston Primary School
Warton St. Paul’s CE School