Security & privacy

You are trusting it with families

A school assistant handles children's names, parents' contact details and questions people would rather not ask a human. Here is exactly how Gatehouse treats all of it — written for a bursar or a data protection lead, not for a marketing page.

The safety model

Approval, not hope

The single most important thing to understand: Gatehouse does not browse the internet for answers about your school, and it does not improvise from general knowledge.

Approved facts only

Your knowledge base holds structured facts and longer answers. Each one is either draft or approved. Only approved content is visible to the assistant — a draft may as well not exist.

Edits go back to draft

Change a fee or a date and it returns to draft until a member of your staff approves it again. There is no way for unchecked wording to slip into a parent conversation.

It says when it doesn't know

Outside its approved facts it declines and offers a human — and records the enquiry so the human actually follows up. It is built to refuse rather than to guess.

Data

Whose data is whose

Your school's data is separate

Every conversation, lead and booking belongs to one school. A login can only see the school it was invited to. There is no shared pool of families across our customers.

We do not read your families' details

Elm Education staff running the platform see usage numbers — conversations, bookings, cost — not parents' names, messages or contact details. Seeing a school's people requires being given a login by that school.

Stored in Europe

Your school's data lives in a managed database hosted in Ireland (EU). We will confirm the full hosting arrangement, including our application host, in writing during procurement.

Locked at the database

The database refuses access to anything but our own server processes. Public access to school data is switched off at the database itself, not merely in the application.

Retention you choose

You set how long conversations are kept. A scheduled clean-up permanently deletes anything past that age — it is a real deletion, not a hidden flag.

Erasure on request

If a family asks to be forgotten, your staff can erase that family's conversation and details from the record in one action.

Access

Who can log in

Named accounts, not a shared password taped to the admissions desk.

  • Each colleague gets their own login, invited by your school
  • Roles decide what they can do — administer, work the enquiries, or read only
  • Remove someone and their access ends with them
  • Your knowledge base and settings are yours to edit; you do not raise a ticket with us to change a fee

What we ask of you

Two things keep this tidy at your end, and we will say so again at setup:

  • Give logins only to staff who need family details
  • Tell us when someone leaves, if they were your main contact

Compliance

Paperwork your DPO will ask for

We would rather answer these before you ask than after.

Data processing agreement

We act as a processor for the family data your school controls, and we will have a data processing agreement in place with you before you go live.

The AI provider

Conversations are processed by a commercial AI provider under a business agreement. We will name the provider and share the relevant terms — including their position on training — as part of procurement.

What the widget stores

A short-lived identifier in the visitor's own browser, so a conversation survives moving between pages. No advertising trackers, and we do not sell or share visitor data.

Children

Gatehouse is designed to be used by adults enquiring about a school. It does not discuss an individual child's application, and it will not hold a conversation about a named current pupil.

Your policies, not ours

Your privacy notice governs the family relationship. We will give you the wording you need about the assistant so you can add it to your own notice.

Straight answers

Where we do not yet hold a certification, we say so rather than implying one. Ask us anything on this page and you will get a written answer.

Send us your questions

Security questionnaires welcome — we would rather complete yours than send you a brochure.

Ask a question