Privacy Policy

Effective Date: 14th April 2026 Version: 2.0

Trellis Education Ltd, a company registered in England and Wales ("Trellis", "we", "us", or "our"), is committed to respecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy explains how we collect, use, share, and protect your personal information when you interact with us or use our services, including our website, products, and applications (collectively, the "Services").

1. Information We Collect

  • Identity and Contact Data: Name, email address, phone number, and any other information you provide when you contact us.
  • Recruitment Data: If you apply for a role with us, we collect your CV, professional history, and references.
  • Technical and Usage Data: IP address, browser type, device type, and information about how you interact with our Services.
  • Cookies: We use cookies to enhance your experience. You can manage these via your browser.

2. How We Use Your Information (and our Lawful Basis)

Under UK data protection law, we must have a "lawful basis" to use your data. We use your information for the following:

  • To provide our Services: Necessary to perform the contract we have with you.
  • To respond to enquiries: Based on our legitimate interests to provide high-quality customer support.
  • Recruitment: To assess your suitability for a role at Trellis, based on our legitimate interests to hire qualified personnel.
  • Security and Improvement: To monitor and improve our website and prevent fraud, based on our legitimate interests.
  • Legal Compliance: To comply with a legal obligation (e.g., tax or regulatory requirements).

3. Data Location and International Transfers

We prioritize the sovereignty and security of your data:

  • UK Storage: We store and process your personal data within the United Kingdom wherever possible.
  • Safeguards: We will only transfer information outside of the UK where we have a valid legal mechanism in place (such as Standard Contractual Clauses) to ensure your data is guaranteed the same level of protection it receives in the UK.

4. How We Keep Your Information Safe

We have implemented rigorous technical and organisational measures to prevent your personal data from being accidentally lost, used, or accessed unauthorisedly. These include:

  • Access controls and multi-factor authentication (MFA).
  • Internal IT and network security protocols.
  • Regular testing and review of our security measures.
  • Staff training on data protection and confidentiality.

5. Data Retention

We only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For example, we may keep contract-related data for up to seven years after our relationship ends to comply with UK tax law.

6. How We Share Your Information

We do not sell your personal information. We may share data with:

  • Service Providers: Third parties who perform services on our behalf (e.g., cloud hosting).
  • Professional Advisors: Our personnel and advisors who are bound by confidentiality.
  • Legal Authorities: If required by law or in response to a valid legal request.

7. Your Rights

Under UK data protection laws, you have the right to:

  • Access your data or request a copy.
  • Correct inaccurate or incomplete information.
  • Delete or restrict your information where there is no good reason for us to keep it.
  • Object to our use of your data.
  • Transfer (Portability) your data to another organisation.

8. Changes to This Privacy Policy

We may update this policy periodically. We will notify you of any changes by posting the new version on our website.

9. Contact Us & Complaints

To exercise your rights or ask a question, please contact our Data Privacy Officer:

Trellis Education Ltd

41 Dordrecht Rd London W3 7TF

Email: support@trellis.scot

If you are not satisfied with our response, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK regulator for data protection.