Last updated: June 2026
4Sight Education Ltd (trading as VESPA Academy) publishes the following policies for schools, colleges, trusts, DPOs and procurement teams. All documents are kept under review and updated when our services or legal requirements change.
How we collect, use, and protect personal data — lawful basis, rights, cookies, third parties
→Student-friendly version of the privacy policy
→UK GDPR compliance — controller/processor roles, DPIA, breach procedures, sub-processor list
→Per-data-type retention periods, deletion procedures, data export, lapsed account handling
→Standard UK GDPR Article 28 DPA — processor obligations, sub-processors, security measures
Cyber Essentials certified (IASME-CE-060416), MFA, EU hosting, incident response
→How AI is used (advisory only) — API sub-processors OpenAI & Anthropic; no training on school data; prompt data not sold or shared for unrelated purposes
→Business continuity and disaster recovery — RTO/RPO targets, scenario playbooks, succession and provider outage procedures
→KCSIE-aligned safeguarding and child data protection
→WCAG 2.2 commitment and accessibility feedback contact
Supply chain ethics and zero tolerance for modern slavery
→Service quality commitments, monitoring and continuous improvement
→Cloud-first operating model and environmental commitments
→Equality Act compliance — employer and service delivery commitments
→Remote working, DSE and safe working environment
© 2026 VESPA Academy — 4Sight Education Ltd. All rights reserved.