Privacy Policy
Last updated: 26 October 2026
This policy explains how Digital Solutions Lab Ltd (“we”, “us”) handles personal data. It covers this website and the services we build and run for clients, including Elevate Prism and its WhatsApp messaging features.
1. Who we are
Digital Solutions Lab Ltd is registered in England and Wales, company number 12635096. Registered office: 26 Parry Street, Leicester, England, LE5 3NL.
Contact for privacy questions: [email protected].
2. Our role
- This website and enquiries: we are the controller of personal data you send us, for example through our contact form or by email.
- Elevate Prism: each school using Elevate Prism is the controller of the data it puts into the platform. We act as a processor and handle that data only on the school’s instructions in order to provide the service. If you are a parent, pupil or member of staff, contact your school first about your data. We will help the school respond.
3. Data we handle
Website and enquiries: your name, email address, phone number, the content of your message, and basic technical data such as your IP address and browser type.
Elevate Prism, on behalf of schools:
- Staff details: name, work email, role, sign-in and security records
- Pupil details: name, class, attendance, behaviour, assessment and related school records
- Parent and guardian details: name, relationship to the pupil, email address, phone number and contact preferences
- Messages, announcements and documents exchanged between the school and families
4. WhatsApp messaging
Schools can connect their own WhatsApp Business account to Elevate Prism using the WhatsApp Business Platform provided by Meta Platforms. When a school uses this feature:
- We use the parent or guardian’s name and WhatsApp phone number, plus the content of the message, to send messages on the school’s behalf, such as attendance alerts, announcements and reminders.
- When a parent replies, we receive the reply, the sender’s phone number and WhatsApp profile name, and delivery and read status. We show these only to that school’s authorised staff in Elevate Prism.
- Messages are sent only to parents and guardians who have agreed to receive WhatsApp messages from their school. You can stop them at any time by replying STOP or by asking your school.
- Meta processes this data in order to deliver WhatsApp messages. See the WhatsApp Business Policy and WhatsApp Privacy Policy.
- We use WhatsApp data only to provide this messaging service to the school. We do not sell it, use it for advertising or marketing, share it with other schools, or use it to build profiles.
5. Why we use data (lawful basis)
- Enquiries: our legitimate interest in replying to you and running our business.
- Elevate Prism: the school decides the lawful basis, which is usually its public task or legitimate interests in running the school. We process the data under a contract with the school.
- Security and legal duties: keeping services secure, preventing misuse, and meeting our legal obligations.
6. Who we share data with
We share personal data only with:
- the school that owns it, and people that school authorises
- service providers we use to run our services: server hosting, email delivery and, where a school uses it, Meta for WhatsApp messaging
- authorities where the law requires it
We never sell personal data.
7. Security
Data is encrypted in transit (HTTPS) and backups are encrypted. Each school can see only its own data. Access is limited to authorised people, and administrator accounts require two-step verification.
8. How long we keep data
- Enquiries: up to 2 years after our last contact, unless we start working together.
- Elevate Prism: for as long as the school uses the service, or as the school instructs. When a school leaves, we delete or return its data within 90 days, unless the law requires us to keep it longer. Backups expire on a rolling schedule.
- WhatsApp messages are kept in the school’s Elevate Prism account under the same rules. Disconnecting WhatsApp stops all further messages.
9. Your rights and deleting your data
Under UK data protection law you can ask to see, correct or delete your personal data, or object to or restrict how it is used.
- Data held by a school in Elevate Prism, including WhatsApp messages: ask your school, which can correct or delete it. You can also email us at [email protected] and we will pass your request to the school and help it act.
- Any other data we hold about you: email [email protected] with the subject “Data deletion request”. We will confirm your identity and respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk).
10. Cookies
Elevate Prism uses only essential cookies, which keep you signed in and secure. It uses no advertising or tracking cookies. This website may use basic cookies needed for it to work.
11. Changes
We may update this policy. The date at the top shows the latest version.