Privacy Notice

What we collect

The categories of pupil information that we collect and hold include:

  • Personal information (such as name, unique pupil number)

  • Characteristics (such as ethnicity, language, nationality, SEN status etc.)

  • Attendance information (such as overall average attendance as a percentage )

  • Assessment information (such as KS1 and KS2 scores, internal/external examination results)

The lawful basis on which we collect and use this information

We collect and use personal information in order to meet our contractual requirements with schools and legitimate interests set out in the GDPR and UK law, including those in relation to the following:

  • Data Protection Act 1998

  • Article 6 and Article 9 of the GDPR

Why we collect and use this information

Personal data collected will not be used for any purposes by EVA Limited other than for producing reports on the examinations results and progress tracking.

Collecting this information

Personal information is provided by our contracted schools, we do not collect personal information directly from any data subject. It is the obligation of the contracted school to ensure this personal information is collected in compliance with the Data Protection Act 1998 and General Data Protection Regulation 2018.

Storing pupil data

Personal data relating to pupils is stored in line with our GDPR Data Security Policy. In accordance with the GDPR, the school does not store personal data indefinitely; data is only stored for as long as is necessary to complete the task for which it was originally collected.

Who we share pupil information with and why

We do not share any personal information with any other Data Processor or Sub-processor.

Your rights

As a Data Subject you have the right to:

  • Be informed about how we use your personal data.

  • Request access to the personal data that we hold on you.

  • Request that your personal data is amended if it is inaccurate or incomplete.

  • Request that your personal data is erased where there is no compelling reason for its continued processing.

  • Request that the processing of your data is restricted.

Contact and Concerns

If you would like to discuss anything in this privacy notice, please contact the Data Protection Officer at EVA Limited, by email at or by phone at 01943 968010.


Definitions and legal references

Personal information (or Data)

Any information regarding a natural person, a legal person, an institution or an association, which is, or can be, identified, even indirectly, by reference to any other information, including a personal identification number.

Data Subject

The legal or natural person to whom the Personal Data refers.

Data Processor

The natural person, legal person, public administration or any other body, association or organization authorized by the Data Controller to process the Personal Data in compliance with this privacy policy.

Data Controller

The natural person, legal person, public administration or any other body, association or organization with the right, also jointly with another Data Controller, to make decisions regarding the purposes, and the methods of processing of Personal Data and the means used, including the security measures concerning the operation and use of this Application

Privacy Notice