School Atlas is operated by Stephen Spence trading as School Atlas from 182 Heythorp Street, London SW18 5BU, United Kingdom. This page indexes every legal and compliance document published on the service, grouped by purpose. For data-protection queries write to privacy@schoolatlas.co.uk; for terms and contract queries, legal@schoolatlas.co.uk.
Core user policies
- Privacy Policy
What personal data we collect, why, who we share it with, retention periods, your UK GDPR rights, and how to contact us.
- Terms of Service
The contract between you and School Atlas, including acceptable use, intellectual property, liability, and governing law.
- Refund Policy
Subscription refund terms including the statutory 14-day cancellation right under the Consumer Contracts Regulations 2013.
- Moderation Policy
How user-submitted reviews are moderated, and how to report content under the Online Safety Act and Defamation Act 2013.
- Accessibility Statement
How we align with WCAG 2.2 Level AA and how to report accessibility issues.
- Data Sources & Attribution
The public-sector and commercial data sources we use, their licences, and their refresh cadence.
Data-protection records (UK GDPR)
- Records of Processing (Article 30)
The controller-side record of each processing activity, including purposes, categories, recipients, retention and safeguards.
- International Data Transfers
Sub-processors based outside the UK / EEA (Stripe, Anthropic, Resend, Sentry, Google Analytics) — and the UK Addendum / Data Bridge basis on which each transfer relies.
- DPIA Summaries (Article 35)
Published summaries of our Data Protection Impact Assessments for child profiles, parent reviews, and the AI advisor.
- Breach Response Procedure
How we detect, triage, log, and report personal data breaches under Articles 33 and 34.
- Institution Data Processing Addendum
The Article 28 processor terms that apply when a school or multi-academy trust uses our institution portal.
- School Staff: Article 14 Assessment
Disproportionate-effort assessment under Art. 14(5)(b) UK GDPR for head-teacher and staff data ingested from public sources, with the rights and contact route for any named individual.
Children and online safety
- Safeguarding
How to raise a safeguarding concern about a child, our content, or something you saw on the platform.
- Children's Access Assessment (OSA 2023)
Our assessment of whether the service is likely to be accessed by children and the steps we take in response.
- Illegal Content Risk Assessment (OSA 2023)
Our priority-offence assessment and mitigations under Part 3 of the Online Safety Act 2023.
Content provenance
- Image Sources
Where the imagery on the site comes from — public domain, school-supplied, Wikimedia, stock libraries — and the licensing basis for each.
Regulatory complaints: you may complain to the Information Commissioner's Office about data-protection matters at ico.org.uk/make-a-complaint, and to Ofcom about online-safety matters at ofcom.org.uk.