Do you have a DPA or a safeguarding policy for schools?

Yes, both, and you can send either page to your head teacher, governors or data protection officer. The Data Processing Agreement is our agreement as your processor under Article 28 of the UK GDPR: it is clause 6 of our Terms, so it applies as soon as your school has an account and there is nothing to sign. The page sets out what we process for you, how we keep it secure, our sub-processors, breach notice within 48 hours and deletion at the end.

The Safeguarding Statement says what we do about tours that show children or vulnerable adults (anyone can report a tour, and a report about a child goes to our team at once and normally takes the tour offline until a person decides) and what your school must do before it publishes: photograph empty rooms where you can, have permission for anyone who can be recognised, blur names and faces, and choose who can open the tour. For anything else, write to moc.rmaronap@tcatnoc.