Compliance

Everything we publish about how AgentChamp handles data, in one place. If you are assessing AgentChamp for a school, the schools' pack below is written for you — including a DPIA support pack you can lift from directly, and an honest list of the assurances we do not yet hold.

For everyone

• Privacy PolicyWhat we collect, why, who sees it, and how long we keep it.
• Your Information, ExplainedThe same thing, written for the children who read here.
• Terms of ServiceThe agreement between you and AgentChamp.
• Cookies and StorageEvery cookie and stored value, named. There are two cookies and no trackers.
• Accessibility StatementWhere we conform to WCAG 2.1 AA, and where we do not yet.

For schools

• Data Processing AgreementThe processor terms a school accepts at registration.
• Sub-Processor InventoryEvery third party that touches data, what each receives, and where it sits.
• DPIA Support PackThe supplier half of your Data Protection Impact Assessment — data flows, risks, mitigations.
• Security MeasuresOur technical and organisational measures in full, including what we do not have.
• Safeguarding and Online SafetyThe four Cs, for a designated safeguarding lead.
• AI and Children's DataWhere AI is used, and why no child’s data ever reaches a model.
• Record of Processing ActivitiesOur Article 30 record, both as controller and as processor.

Asking us something

If your school has a supplier assessment form, a DPO questionnaire, or a question none of these answer, send it to privacy@agentchamp.co.uk. Several of the controls described in these documents exist because a school asked for them.

AgentChamp Ltd is registered in England and Wales, company number 17176256, and registered with the Information Commissioner's Office under reference ZC230270.