Question 1

Do you process special category data?

Accepted Answer

No. Elemental does not ask for or require special category data as defined by Article 9 of the UK GDPR.

Question 2

Where is our data stored? Does any of it leave the UK or EU?

Accepted Answer

No. Student Data stays in the UK and EU.

Question 3

Who are your sub-processors?

Accepted Answer

Every provider we use is published on our register with its purpose and location. Those that process Student Data are our sub-processors, and they are the list which appears in Section 5 of the Data Processing Agreement. The rest never receive Student Data and are governed by our Privacy Policy. We will provide notice before adding new sub-processors, and you will have a reasonable opportunity to object on reasonable data protection grounds.

Question 4

What technical and organisational security measures are in place?

Accepted Answer

Data is encrypted in transit and at rest, access is restricted to authorised employees and contractors bound by confidentiality obligations, and we apply regular security updates and monitoring.

Question 5

What security certifications do you hold?

Accepted Answer

Elemental holds a current Cyber Essentials certification and is registered with the ICO under reference ZB026359.

Question 6

What happens if there is a data breach?

Accepted Answer

If we become aware of a Personal Data Breach affecting your Student Data, we will notify you without undue delay and in any event within 48 hours of becoming aware, and tell you what happened and what we are doing about it.

Question 7

How long do you keep our data, and how do we get it deleted?

Accepted Answer

When your subscription ends, or whenever you ask us to, you can choose for us to delete your school's Student Data, return it to you, or both, within 14 days, except for any data we are required by law to keep. Data held in backups is deleted within 90 days, and we will confirm once deletion is complete.

Question 8

How do you help us respond to data subject rights requests?

Accepted Answer

Contact us at privacy@elementalmusic.app and we will help you respond within 5 business days.

Question 9

Is any of the music in Elemental AI-generated?

Accepted Answer

No, and it never will be. Every musical example is either out-of-copyright repertoire or new music written by composers and songwriters working in a broad range of styles.

Question 10

Is Student Data used for advertising, profiling or sold to anyone?

Accepted Answer

No. Elemental carries no advertising and we do not sell personal data.

Question 11

Can students communicate with each other or with people outside the school?

Accepted Answer

No. Elemental is a closed platform for teaching and learning, with no messaging, chat or commenting between students, no way to contact anyone outside the school, and no public profiles.

Question 12

Do you have a Data Processing Agreement we can review and sign?

Accepted Answer

Yes. Our Data Processing Agreement covers the Student Data we process on your behalf, where Elemental is the Data Processor. All three variants are published in full and can be read online or downloaded as a PDF: one for Google, one for Microsoft, and one for schools using Elemental email and password accounts.

Question 13

Are you compliant with the UK GDPR?

Accepted Answer

Yes. Our Data Processing Agreement sets out our obligations as a Data Processor under UK GDPR Article 28, we are registered with the Information Commissioner's Office under reference ZB026359, and the commitments behind that agreement are published throughout this Trust Centre.

Question 14

Where can I find your Privacy Policy?

Accepted Answer

Our Privacy Policy covers the personal data for which Elemental is the Data Controller, such as account and billing data. It is published in full, and can be read online or downloaded as a PDF.

Question 15

Can we audit you?

Accepted Answer

Yes. You can ask us at any time to demonstrate that we are keeping data secure and following the agreement.

Question 16

Will you help with our Data Protection Impact Assessment?

Accepted Answer

Yes, we are happy to help however we can. Our DPIA information pack covers the supplier-side facts your assessment needs, following the UK ICO's own template.

Question 17

Who operates Elemental?

Accepted Answer

Elemental is a trading name of Seasoft Limited, a company registered in England and Wales under company number 11321788. Our company and UK ICO registrations are both linked from the Trust Centre overview.

Question 18

Are you registered with the Information Commissioner's Office?

Accepted Answer

Yes. Seasoft Limited is registered with the Information Commissioner's Office under reference ZB026359.

Question 19

What is Elemental's registered address?

Accepted Answer

Seasoft Limited is registered at Unit 36 Silk Mill Industrial Estate, Brook Street, Tring, HP23 5EF, United Kingdom.

Question 20

Is Elemental a registered trademark?

Accepted Answer

Yes. Elemental is a registered trademark in the United Kingdom, registered to Seasoft Limited.

Elemental Trust Centre

Frequently Asked Questions (FAQs)

Roles and Data

Data Residency

Sub-Processors

Security Measures

Breach Notification

Retention and Deletion

AI Transparency

Safeguarding

Contracts and Assurance

Company Information

Ready to get started?