Privacy policy

Last updated: 29 October 2026. Questions about this policy? Email membership@naace.org.uk.

Naace is the National Association for Education Technology, a registered charity in England & Wales (no. 1060683). We are the data controller for the personal information described in this policy.

What we collect

When you contact us — your name, email address, organisation and the content of your message.
When you join Naace — your name, contact details, school or organisation, role and membership type. Payments are handled by our payment provider; we do not store card details.
When you use the EdTech Review Framework — the information your school records in the ERF system, including staff accounts, evidence and progress notes.
When you register for an event or sign up for our newsletter — your name, email address and any details the registration form asks for.
When you visit this website — basic technical information such as your IP address, browser and the pages you request, which our hosting provider records to deliver and protect the site. We do not use analytics or advertising trackers.

How we use it, and why

Under UK data protection law we need a lawful basis for each use of your information:

Contract — to provide your membership, ERF access, NaaceMark assessment and the services you have signed up for.
Legitimate interests — to answer enquiries, run the association, keep the website secure, and tell members about relevant Naace activity.
Consent — to send our newsletter to non-members. You can withdraw consent at any time using the unsubscribe link in every email.
Legal obligation — to keep financial and governance records we are required to hold as a charity.

Who we share it with

We never sell your information. We share it only with organisations that help us run Naace, under contracts that require them to protect it — for example our website host, email and membership systems, and payment provider. If your school applies for NaaceMark, the relevant ERF information is shared with the assessor working with your school.

Some of these providers may process data outside the UK. Where they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses.

How long we keep it

We keep personal information only for as long as we need it for the purposes above. Membership records are kept for the life of the membership and a limited period afterwards; financial records are kept for the period the law requires.

Your rights

You have the right to ask for a copy of the information we hold about you, and to ask us to correct it, delete it, restrict how we use it, or transfer it to you or another organisation. You can also object to our use of your information where we rely on legitimate interests. To use any of these rights, email membership@naace.org.uk. We will respond within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Contact

Naace, Cliffe Hill House, 22–26 Nottingham Road, Stapleford, Nottingham, NG9 8AA
Email: membership@naace.org.uk