Legal & Policies
Policies & Certificates
Transparency in how we operate. All public-facing policies and certificates of insurance are published here.
Privacy Policy
How we collect, use, and protect personal data under UK GDPR. Applies to all users of the ProvisionIQ platform and this website.
Information Security Policy
Our approach to information security controls, standards, and responsibilities across ProvisionIQ systems and data.
Data Retention Policy
How long we retain different categories of data, and the criteria used to determine retention periods.
Data Processing Agreement
Our DPA for schools and organisations using ProvisionIQ as a data processor under UK GDPR Article 28.
GDPR Statement
Our commitment and approach to GDPR compliance, covering lawful bases, data subject rights, and organisational accountability.
SAR Process
How to make a Subject Access Request and how ProvisionIQ handles, verifies, and responds to such requests.
Breach Response Process
Our process for identifying, assessing, containing, and reporting personal data breaches under UK GDPR Article 33.
Incident Response Plan
How ProvisionIQ detects, responds to, and recovers from security incidents affecting systems or data.
Backup Policy
How ProvisionIQ backs up data and systems to ensure availability, integrity, and business continuity.
Cookie Policy
What cookies we use, why, and how to manage your preferences.
Acceptable Use Policy
Rules governing acceptable use of the ProvisionIQ platform and its services.
Safeguarding Policy
ProvisionIQ's commitment to safeguarding and child protection in the context of a platform serving schools.
If you have a question about any of our policies, or need a copy for a specific purpose (e.g. a DPA for your school's records), please contact us at hello@provisioniq.org.
Certificates of Insurance