Privacy Policy

Effective date: 25 March 2026

Education Elephant Ltd. (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use and protect personal data when you use our website, purchase products or services, or otherwise interact with us.

  1. Who we are

Education Elephant Ltd.
Registered address:

16 Greenmount House
Greenmount Office Park
Harold’s Cross Road
Dublin D6W V659, Ireland
Email: info@educationelephant.ie
Phone: +353 (0)1 6674174

For the purposes of data protection law, Education Elephant Ltd. is the data controller for the personal data described in this policy, except where explicitly stated otherwise.

  1. The types of personal data we collect

We may collect and process the following categories of personal data:

a) Contact and account information

  • Name
  • Email address
  • Telephone number
  • Postal address
  • Organisation name and contact details

b) Professional information

  • Job title
  • Qualifications (where required to access certain products)

c) Account and purchase information

  • Order history
  • Account login details
  • Course enrolment data
  • Purchase records

d) Technical and usage data

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and interaction data

e) Marketing and communications data

  • Email preferences
  • Subscription status
  • Engagement with emails (e.g. opens, clicks)
  1. How we collect personal data

We collect personal data when you:

  • Visit and use our website
  • Create an account on our website
  • Purchase products or services
  • Enrol in online courses
  • Subscribe to our newsletter
  • Contact us by email, phone or form
  • Interact with our marketing communications

We also collect certain data automatically through cookies and analytics tools (see Section 10).

  1. How we use your personal data

We use your personal data for the following purposes:

a) To provide our products and services

  • Process orders and payments
  • Create and manage user accounts
  • Deliver online courses
  • Provide access to purchased products

b) To manage customer relationships

  • Respond to enquiries
  • Provide customer support
  • Manage renewals and additional purchases

c) To verify eligibility

  • Confirm qualifications where required for specific products

d) To improve our services

  • Analyse website usage
  • Improve user experience
  • Develop new products and services

e) For marketing communications

  • Send newsletters and updates (where permitted)
  • Inform customers about relevant products or services
  1. Lawful basis for processing

We rely on the following legal bases:

  • Contract (Article 6(1)(b))
    Where processing is necessary to provide products or services or take steps before entering into a contract.
  • Legal obligation (Article 6(1)(c))
    For compliance with tax, accounting and regulatory requirements.
  • Legitimate interests (Article 6(1)(f))
    For running and improving our business, managing customer relationships and maintaining records.
  • Consent (Article 6(1)(a))
    For marketing communications where required. You can withdraw consent at any time.
  1. Sharing your personal data

We may share personal data with trusted third parties where necessary to operate our business:

a) Service providers (processors)

These act on our behalf and under contract, including:

  • HubSpot – CRM and email marketing
  • Stripe – payment processing
  • Teachable – course delivery platform
  • Prometric – hosting and delivery of the SWIFT assessment platform
  • Website hosting and IT service providers

These providers are only permitted to process data in accordance with our instructions.

b) Independent controllers

In some cases, third parties may act as separate controllers, for example:

  • where required by law;
  • or where they process data for their own independent purposes.
  1. SWIFT platform

Where schools or organisations use the SWIFT platform:

  • The customer (e.g. school) is the data controller for student data
  • Education Elephant acts as a data processor only where we provide support services
  • Prometric acts as a sub-processor hosting the platform

Education Elephant does not access student data unless required for support purposes, and only under appropriate contractual arrangements (including a Data Processing Agreement).

  1. International transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:

  • EU–US Data Privacy Framework (where applicable), or
  • Standard Contractual Clauses approved by the European Commission
  1. Data retention

We retain personal data only for as long as necessary, including for:

  • providing services and managing accounts
  • complying with legal obligations (e.g. tax and accounting)
  • resolving disputes and enforcing agreements

When data is no longer required, it is securely deleted or anonymised.

  1. Cookies and analytics

We use cookies and similar technologies to:

  • ensure the website functions correctly
  • analyse website usage (e.g. Google Analytics)
  • support marketing activities

You can control cookie preferences through your browser settings or our cookie banner.

  1. Marketing communications

We may send you marketing communications:

  • where you have opted in, or
  • where you are an existing customer and we are permitted to do so

You can unsubscribe at any time using the link in our emails or by contacting us.

  1. Your rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Request data portability (where applicable)
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority

In Ireland, this is the Data Protection Commission (DPC).

  1. Data Protection Officer

We have appointed a Data Protection Officer (DPO).

If you have any questions about this policy or your data, please contact:

info@educationelephant.ie

  1. Changes to this policy

We may update this Privacy Policy from time to time.
The latest version will always be available on our website.

Additional Privacy Information – Woodcock Johnson Products

Effective date: 26 March 2026

This section applies to customers who purchase Woodcock Johnson products, licences, credits or related services from Education Elephant Ltd.

  1. Role of Education Elephant

For the purposes described in this section, Education Elephant Ltd. acts as a data controller in relation to personal data collected from customers and prospective customers in connection with:

  • assessing eligibility to purchase Woodcock Johnson products;
  • processing orders and payments;
  • arranging and administering customer access to relevant platforms or services;
  • managing customer accounts, including future purchases of credits or licences;
  • communicating with customers about orders, accounts and support queries.
  1. Personal data we collect

We may collect and process the following categories of personal data:

  • Name
  • Email address
  • Telephone number
  • Postal address
  • Organisation name and organisation contact details
  • Professional title and qualifications (where required to verify eligibility)

This data is collected directly from you when you create an account, place an order, or interact with us.

  1. Purpose of processing

We use this personal data to:

  • verify eligibility to purchase restricted assessment products;
  • process and administer orders;
  • arrange access to Woodcock Johnson platforms and services;
  • manage customer accounts and future purchases;
  • provide customer support and respond to queries;
  • maintain appropriate business and financial records.
  1. Sharing data with Riverside Insights

Where necessary to fulfil your order or enable access to Woodcock Johnson products, Education Elephant will share limited customer account and contact data with Riverside Insights LLC, United States.

This may include:

  • Name
  • Email address
  • Telephone number
  • Postal address
  • Organisation details
  • Professional information relevant to account setup

This sharing is necessary to:

  • create or enable your platform account;
  • administer access to Woodcock Johnson products;
  • support order fulfilment and account management.
  1. International data transfers

Riverside Insights is based in the United States. As a result, personal data may be transferred outside the European Economic Area (EEA).

Where such transfers occur, Education Elephant ensures that appropriate safeguards are in place, such as:

  • reliance on an approved adequacy mechanism (where applicable); or
  • use of Standard Contractual Clauses approved by the European Commission.

You may contact us for further details about these safeguards.

  1. Use of the Riverside platform (examinee data)

Where customers use the Riverside platform to input, upload or process examinee personal data, the following roles apply:

  • The customer (e.g. school, college or practitioner) is the data controller for examinee personal data
  • Riverside Insights LLC acts as a data processor on behalf of the customer under the applicable contract and Data Processing Agreement

Education Elephant does not:

  • access examinee data within the Riverside platform;
  • determine the purposes or means of processing that data;
  • control or manage how examinee data is used within the platform.

Accordingly, Education Elephant is not a controller or processor in relation to student data processed within the Riverside platform, unless explicitly agreed as part of a separate service.

  1. Responsibility for platform data

Customers are responsible for ensuring that:

  • they have a lawful basis for processing examinee personal data;
  • they comply with applicable data protection laws;
  • they enter and manage data within the Riverside platform appropriately.

Riverside processes that data in accordance with its agreement with the customer.

  1. Lawful basis for processing

Education Elephant processes customer personal data under the following legal bases:

  • Contract – where processing is necessary to fulfil orders and provide services;
  • Legal obligation – for compliance with accounting and regulatory requirements;
  • Legitimate interests – for managing customer relationships and business operations.
  1. Data retention

We retain customer personal data only for as long as necessary for:

  • managing customer accounts and ongoing purchases;
  • maintaining transaction records;
  • complying with legal and regulatory obligations;
  • resolving disputes and enforcing agreements.
  1. Contact

If you have any questions about this section or how your data is used in connection with Woodcock Johnson products, please contact us at info@educationelephant.ie

 

Shopping Basket
0
    0
    Your Cart
    Your cart is emptyReturn to Shop