GDPR Compliance


The data that Keystone Education (Northampton) Ltd (“we”, “us”, “our”) collect about individuals is detailed in our privacy policy. We never use an individual’s personal data for marketing purposes. It is solely held to provide updates on products that the individual has already purchased. Data is only held for the length of time that the purchased products are for sale. Once a product is obsolete, and removed from sale, previous purchasers of this product will have the need for their data to be held reassessed, and should its retention be unnecessary (i.e. they did not purchase other products that remain on sale) their data will be destroyed. 

The Data Controller for Keystone Education (Northampton) Ltd is Matthew Green. Please email him at if you have any concerns regarding:

Your right to be informed

Your right of access

Your right to rectification

Your right to erasure

Your right to restrict processing

Your right to data portability

Your right to object

Data that is held by us will be assessed each month by the Data Controller to ensure that it needs to be retained. 

Consent to have the data detailed above collected is agreed by the purchaser at the time of purchase. 


We conform to the guidance from the Information Commissioner’s Office, namely: “You can email or text any corporate body (a company, Scottish partnership, limited liability partnership or government body). However, it is good practice – and good business sense – to keep a ‘do not email or text’ list of any businesses that object or opt out, and screen any new marketing lists against that.” Full details can be found by following this link:

We collect data regarding educational organisations (for example schools and academies). This is obtained from publicly available sources, such as OfSTED or the DFE. We use this data purely for our own purposes and do not buy or sell the data. We use this information for the purposes of marketing our products. We do everything reasonable to ensure our marketing is aimed appropriately, such as ensuring secondary schools are not sent information on products aimed at infant children. All of the emails that we send have an unsubscribe link which allows organisations to be removed from our mailing lists. Details of organisations that have opted out of direct marketing are retained by the data controller.