Global School Exchanges – GDPR Compliance Statement
Global School Exchanges Ltd (GSE) is committed to protecting the privacy, confidentiality, and security of the personal data of students, parents, employees, host families, partner schools, and all other stakeholders.
The organisation recognises its responsibilities under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant updates introduced through the Data (Use and Access) Act 2025. GSE is committed to ensuring that all personal data is collected, processed, stored, and shared lawfully, fairly, transparently, and securely.
As part of delivering a wide range of educational immersion programmes, senior leadership delegations and online exchange programmes, GSE processes a range of personal and sensitive information, including:
- contact and identification details;
- medical and dietary information;
- safeguarding and welfare information;
- travel and accommodation details,
- educational information relevant to programme participation.
GSE takes appropriate organisational and technical measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. Access to personal information is restricted to authorised personnel who require it for legitimate operational, safeguarding, or educational purposes.
The organisation is committed to:
- maintaining accurate and up-to-date records;
- ensuring staff receive appropriate GDPR and data protection training, annually;
- handling safeguarding and welfare information appropriately and confidentially;
- securely storing and disposing of data;
- responding appropriately to data breaches or complaints;
- regularly reviewing data protection policies and procedures.
All staff, contractors, and programme personnel are expected to comply with GSE’s data protection policies and procedures as part of their professional responsibilities.
Individual Rights Under GDPR
Under UK GDPR, individuals have important rights regarding how their personal data is used and managed. Global School Exchanges Ltd is committed to respecting and supporting these rights.
Individuals may have the right to:
- be informed about how their personal data is collected and used;
- access personal data held about them;
- request correction of inaccurate or incomplete information;
- request deletion of personal data where appropriate;
- request restriction of processing in certain circumstances;
- object to the processing of their personal data;
- request transfer of their data to another organisation where applicable;
- raise concerns or complaints regarding the handling of their information.
Requests relating to personal data will be handled appropriately and in accordance with legal requirements. Individuals also have the right to raise concerns with the Information Commissioner’s Office (ICO) if they are dissatisfied with how their data has been managed.
Any data protection concerns, requests, or complaints should be directed to the organisation’s senior management team or Designated Safeguarding Lead (DSL).
Global School Exchanges Ltd is committed to promoting a culture of confidentiality, safeguarding, accountability, and responsible information management across all areas of its operations.
International Data Transfers
As an organisation working with international partner schools, students, and representatives, Global School Exchanges Ltd may occasionally need to transfer or share personal data internationally, including outside the United Kingdom.
Where international data transfers are necessary, GSE will ensure that:
– transfers are lawful and carried out only where necessary for programme administration, safeguarding, educational delivery, or operational purposes;
– appropriate safeguards are in place to protect personal data;
– data is shared only with authorised partner organisations or individuals;
– secure communication and storage systems are used wherever possible;
– International transfers comply with UK GDPR requirements relating to international data processing.
GSE will take reasonable steps to ensure that overseas partners and service providers handle personal data securely and in accordance with applicable data protection standards.
Contact Us
If you have any questions about this GDPR Compliance Statement, please contact us at hello@school.exchange
