For Schools · UK
DPIA template available · UK GDPR informed

Give your DPO
everything to decide.

A DPIA template, sub-processor list, MDM profiles, breach SLA and a one-click email of the entire pack — ready for your Data Protection Officer, SENCO and IT lead to review on their own schedule. NeuroKids Space does not claim UK GDPR certification, ICO approval, or that any school will be able to complete its own data-protection review in a single meeting.

Step 1

Send these to your DPO

Privacy Policy + Terms of Service, ready to forward.

Step 2

Download the compliance pack

Templates pre-filled for NeuroKids — your DPO completes school-specific fields and signs.

DPIA template

Full UK ICO format with SEN/SEND risk-mitigation matrix (10 risks scored & mitigated).

Download .docxMarkdown

Information Sharing Agreement

Ready-to-sign template covering data shared, sub-processors, breach SLA, termination.

Download .docxMarkdown

Sub-processors list (Art. 30)

Records of Processing — every processor we engage, region, and DPA link.

Download

Step 3

Deploy via your MDM

Pre-baked profiles for every device platform UK schools use.

Apple Configurator / Jamf / Mosyle

iPad, iPhone, iPod touch

Signed .mobileconfig profile that installs NeuroKids as a managed Web Clip on school iPads.

Download profile

Microsoft Intune

Windows 10/11 tablets, Surface

JSON template for Windows tablets + a managed-bookmark deployment block.

Download profile

Google Workspace for Education

Chromebooks, ChromeOS Flex

Same JSON template — use Chrome > Apps & extensions > Managed bookmarks.

Download profile

At a glance

Compliance summary

Hand this to your DPO — no jargon, no surprises.

Data residency
UK / EU (MongoDB Atlas EU-West, Ireland).
Encryption
TLS 1.3 in transit, AES-256 at rest, bcrypt password hashing.
Retention
Pupil profiles deleted within 30 days of removal; 7-year DfE aggregate.
Lawful basis
Public task (state schools) / legitimate interest (academies) + parental consent for special-category data.
Special-category
SEN diagnosis & behaviour data — encrypted, never used for training AI models.
AI providers
Prompts are pseudonymised (child names replaced with a server-side pseudonym) before transmission. Providers are DPF-certified (US) or EU-resident.
Breach SLA
24h to school DPO (we tighten ICO’s 72h to ourselves).
Sub-processors
6 — full list available; 30 days’ notice of any change.

ICO registration number: pending — will be displayed here once issued. Privacy enquiries: neurokidsspace@gmail.com.

Step 4

Email the pack to your DPO

One click and your DPO has every artefact in their inbox.

We store your name, email, and school details solely to deliver the pack and follow up about deployment. We do not add you to any marketing list.