Privacy Notice
Last updated November 2025.
This Privacy Notice will be reviewed on a regular basis or when a change in legislation and/or practices dictates and any changes will be notified to you by posting an updated version on our websites and/or by contacting you via email.
We recommend that you regularly check for changes and review this policy when visiting our website(s).
1. Introduction
This Privacy Notice aims to explain the types of personal data we may collect about you when you interact with us and use our website, Kent Teach, including any data you may provide when you purchase products, goods and services or sign up to our newsletters.
It also explains how we will store and handle your data and keep it safe.
When you are using the Kent Teach website, Commercial Services Kent Ltd (company registration No: 05858177 (England and Wales)) is the data controller.
We understand that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of all our customers and their employees and other people with whom we interact in the course of undertaking our services. This Privacy Notice offers both our customers and their employees with meaningful and accessible guidance on our approach to handling personal data.
2. Who are we?
Kent Teach is a trading style of Commercial Services Kent Ltd, company registration No: 05858177 (registered in England and Wales), and part of Commercial Services Group (CSG).
CSG is the umbrella for all its trading brands, with its ultimate parent organisation being Kent County Council. It provides the support, dependability, and security to allow all brands to thrive independently. CSG are committed to providing an excellent customer and user experience underpinned by social value and a committed and empowered workforce
Kent Teach collects, uses and processes personal information about you. When we do we are regulated under the UK Data Protection Act 2018 (DPA 2018), the UK General Data Protection Regulation (UK GDPR) and the Data (Use and Access) Act 2025.
If you have any questions, suggestions or complaints about the processing of your personal information please contact our Data Protection Officer (DPO) via email at DPO@csltd.org.uk, or in writing by using the address below;
Data Protection Officer Commercial Services Group 1 Abbey Wood Road Kings Hill West Malling ME19 4YT.
3. Our services
We offer a number of services including:
Non-Teaching recruitment
Teacher recruitment
Headteacher recruitment
In providing these goods and services to our customers, it will be necessary for Kent Teach to gather, obtain, record and hold your personal information.
4. About the information we collect, use, and retain
The section below summarises the information we collect, use, and retain for our services, how and why we do so, how we use it and with whom it may be shared.
We seek to ensure that our information collection and processing is always proportionate. We will notify you of any changes to information we collect or to the purposes for which we collect and process it.
5. The personal information we collect and use
The table below summarises the information we collect, use and retain for our services, how and why we do so, how we use it and with whom it may be shared.
The information collected
How the informationis collected
Why the information is collected
How the information is use and maybe shared
Contact and Identity information such as name of Headteacher/Executive Head, Chief Executive, email addresses, names of authorisers and position held, recruitment/advertising contact name and email address.
Fromyou.
To enter into/performance of a contract.
For the performance of a contract to fulfilschool vacancies,used on our website.
For Trusts/Federations we require:
Contact and Identity Information, Name ofAuthoriserand alsothe following details ofall ofthe Trust schools that you wish to be registered on Kent-Teach: Names of Headteachers, School Contact Numbers, School Addresses and Email Addresses.
From you
For the performance of a contract to fulfil school vacancies, used on our website.
Education Establishments:
OrganisationName, Invoice Contact Name, Recruitment Contact Name, Email Address, Name ofAuthoriser, Position Held Within School.
For Governors:Name and email addresses (this information is used to create a Governor Account for the purpose of Headteacher recruitment)
Video and Photographic Images:
We may use your image in photographs and video to enhance live vacancies, upon schools sharing this data with us. Please note, this is optional and conditional to you having provided the school with permission to do so.
To enhance live vacancies advertised on your behalf.
We may obtain other personal data from third parties with whom we liaise in providing a service to our Customers (e.g. HMRC / LGPS / Teachers’ Pension Scheme / Disclosure and Barring Service / Legal Advisers / Parents/Guardians /Service Users), or by a representative acting on your behalf (trade union representative / solicitor).
We may also obtain sensitive personal data from third parties, with your consent and in compliance with legislation and professional guidelines, with whom we liaise in providing a service to your Employer e.g. your GP, Medical specialist, or by a representative acting on your behalf e.g. appointed advocate / solicitor.
Further details on how we handle personal information are set out in our Data Protection Policy and Policy statement on the secure storage, handling, use, retention and disposal of disclosure information.
Other than stated above, we may share personal information with law enforcement, our regulators or other authorities if required by applicable law.
As there is a statutory and contractual basis for collecting your personal data if you do not provide some or all of the details specified in the ‘The personal information we collect and use’ section, we may be unable to enter into a contract with your organisation.
6. How long your personal data will be retained
We will not keep your information for longer than is necessary, for either:
• the purpose of administering your individual record; • or as is necessary in providing a service to our customer; • or as required by law.
Upon expiry, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
For certain data sets, we have the following specific retention periods:
School Advertising Accounts – we will hold your contact information until the end of your contract period.
Governor Accounts – your information will be deleted after one month from the closing date of your assigned vacancy.
Video and Photographic Images – we will store images related to a leadership recruitment exercise for six months following the closing date of the associated vacancy.
7. Who we share your personal information with
We may share your personal data with the following organisations:
Representatives of recognised trade unions and professional associations or workplace colleagues identified by you to support in employment matters.
HM Revenue and Customs, Department for Work and Pensions, Local Government Pension Scheme and Teachers Pension Scheme.
Cabinet Office –National Fraud Initiative, for the purposes of assisting the prevention and detection of fraud under a legal obligation.
Third parties engaged by the customer for the provision of identified services – i.e. Occupational Health Providers / Legal Advisors.
Third Party organisations - where you have instructed us to make payments / contributions from your salary or where we are advised directly to make deductions from your salary.
Local Authority Safeguarding Team/Local Authority Designated Officer (LADO) for the purposes of safeguarding children and young people.
Professional regulatory authorities such as the Teaching Regulation Agency.
Law enforcement, our regulators or other authorities if required by applicable law.
We may also share your personal information with trusted third parties that are under contract with us and where it is necessary to administer our working relationship with you or where we have another legitimate interest in doing so (providing this is not overridden by your interests).
Our trusted third parties may include service providers who supply us with processing services or functions, including our contracted IT suppliers, access to data and systems is only granted where authorised and specifically required in line with our contracts with them.
Management information may be shared within Commercial Services Group, under a Data Sharing Agreement held by its operating company Global Commercial Services Group Ltd, a company registered in England and Wales (Reg No. 11735631). This Agreement reflects the requirements of the UK GDPR, DPA2018 and DUAA2025.
We may also need to share some of the categories of personal information with other parties where a transfer of the business takes place. Usually, information will be anonymised or pseudonymised, but this may not always be possible. The recipient of the information will be bound by confidentiality obligations and legally binding data sharing agreements.
8. Where information may be retained
Information may be retained at our offices and those of our service providers, representatives and agents as described above.
Some of the personal information you provide to us may be transferred to countries outside of the UK, or the EU/EEA. Where this occurs, we will make restricted transfer under UK “adequacy regulations” to protect individuals rights and freedoms for their personal data.
Where the UK has no “adequacy regulations” then the restricted transfer will be subject to appropriate safeguards whereby standard contractual clauses have been entered into with the organisation receiving the data.
9. Your rights
Under the UK GDPR you have a number of rights which allow you to:
Your right of access - You have the right to ask us for copies of your personal data, however there are some exemptions which means you may not receive all the information you ask for.
Your right to rectification - You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal data in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent.
If you make a request, we have one calendar month to respond to you. If a request is deemed to be complex or a number of requests have been received from an individual, the response time may be extended by up to 2 months.
We will always seek to comply with your request however we may be required to hold or use your information to comply with legal duties.
You can also withdraw your consent and opt-out from direct marketing by using the unsubscribe link at the bottom of our marketing emails.
Suppression lists will be maintained to screen against direct marketing information being sent to people who have already exercised their right to object to direct marketing. These lists will be held for compliance purposes only, and this does not affect your rights to be erased.
Please note: your request may delay or prevent us delivering a service to you.
For further information about your rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioners Office (ICO) on individuals’ rights under the UK General Data Protection Regulation https://ico.org.uk/
If you would like to exercise a right or make a complaint about how your personal data is handled by Kent Teach, please contact our DPO via email at dpo@csltd.org.uk or write to Data Protection Officer, Commercial Services Group, 1 Abbey Wood Road, Kings Hill, West Malling, ME19 4YT.
11. Keeping your personal information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost, used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and the ICO as regulator of any suspected data security breach where we are legally required to do so.
12. Who to contact
If you have any questions, suggestions or complaints about the processing of your personal information, or you wish to exercise any of your rights please contact our Data Protection Officer (DPO) via email at DPO@csltd.org.uk or in writing by using the address below;
The UK General Data Protection Regulation also gives you right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk or telephone 0303 123 1113.
We reserve the right to update this Privacy Notice at any time, and we will provide you with a new Privacy Notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.