NEWElemental has been shortlisted for two awards at the international GESS Education Awards Read the news

Elemental Trust Centre

Learn how Elemental protects your data in compliance with UK GDPR

Company Background

Company Registration: Seasoft Limited (11321788)
UK Information Commissioner's Office (ICO): Registered under reference ZB026359

Accreditations and Certifications

Cyber Essentials: Certified
Google: Google for Education Partner. Certified Google Workspace for Education Solution.
Microsoft: Microsoft Education Partner. Approved Microsoft Marketplace application.

At a Glance

Data Residency: UK and EU Only
Breach Notification: Within 48 Hours
Deletion on Request: Within 14 Days
Data Subject Requests: Within 5 Business Days

Elemental acts as a Data Processor or a Data Controller depending on your account type and the data being processed, and which role applies determines which document governs our handling of the data.

Processor — Under a Data Processing Agreement

Where a school enters into a Data Processing Agreement (DPA) with us, the school is the Data Controller for its Student Data and Elemental is the Data Processor under UK GDPR Article 28. This applies to all schools using our Google and Microsoft integrations, but can be opted in to by schools using Elemental email and password accounts.

Governed by the Data Processing Agreement

Controller — Direct Sign-Ups and Billing

Where individuals sign up directly, such as parents, tutors and instrumental teachers, and for the account, billing and support-related data of whoever sets up an account, Elemental is the Data Controller under UK GDPR Article 24. This also applies to schools using Elemental email and password accounts without opting in to the Data Processing Agreement (DPA).

Governed by the Privacy Policy

If you are not sure which applies to your account, please contact privacy@elementalmusic.app.