Privacy Policy

Privacy and Cookies Statement

Education Mutual are required by law to provide information about the way in which we use, store or share personal information of person's visiting our website. This Privacy and Cookies Statement sets out how, when and why we collect your personal information; under what circumstances we may disclose your personal information within the Mutual and to third-party service providers; how we keep it secure; and how long we keep any information that you provide when you use this website.

We may change this statement from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This statement is effective from 15th April 2019 and will be reviewed on a minimum of an annual basis and changed where necessary.

Education Mutual is the Data Controller and decides how your personal data is processed and for what purpose. We use a professional services company, MC MM Services Ltd (MC MM), to provide all services to Education Mutual; all data received by us will be shared with MCMM which act as Data Processor.

1. How we use your information

In order to understand whether the Education Mutual is appropriate for you and to enable us to form a contract, we will require information from you relating to the name, date of birth, gender, role and total number of staff members and the contact details of an appropriate person with whom we can correspond.

If membership of the mutual is accepted this information will be used to support the contract in place. As a Data Controller in your own right, you will be required to notify your staff members that this information will be shared with us.

Members of the Mutual will be able to notify us of claims via the website portal. Further information will be requested to support the claim as part of the contract in place. If the information is sensitive in nature, consent will be expressly requested.

We may share with you, information relating to the specific market within which you operate and have legitimate interest in sharing this information with you.

We will not share any of the information you provide to us with any third parties for marketing purposes.

2. How we process your data

We comply with our obligations under Data Protection law by keeping your personal data up to date; storing and destroying it securely; we will not collect or retain data which we do not need for the above-mentioned purposes.

We also protect your personal data from loss, misuse, unauthorised access and disclosure by ensuring that appropriate technical measures are embedded within our IT systems.

3. Why we collect this information

We collect and maintain the personal information we need to understand the suitability for membership of the Mutual and to manage the contract formed. We also collect personal data to fulfil our statutory and regulatory obligations.

4. What we do with your information

All personal data collected through the process of considering a claim will be treated as confidential and will only be shared as necessary.

Each party with which we share your data, which does not work on our behalf acts as a controller in their own right; and will determine how the data is processed when in their control.

The data collected from you will only be transferred outside the UK if:

  • the recipient country is accepted by UK authorities as providing adequate levels of data protection; or
  • where approved safeguards such as standard contractual clauses or binding corporate rules have been implemented.

5. How long we keep your information

We keep data collected for Proposal / Adjustment / Claims purposes for a period of 6 years. In the event of any claim, relevant data is held for 6 years after the claim has been closed.

Where data is collected to determine the suitability of membership and the application does not proceed, your information will be retained for 12 months.

All the information you provide will be held securely, whether the information is in electronic or physical format.

6. Visitors to our website

When someone visits we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is processed in a way which does not identify anyone.

We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be up front about this and gain appropriate consent in order to do so. We will make it clear why we collect it and what we intend to do with it.

Use of cookies

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work more efficiently as well as to provide information to the owners of the site. Education Mutual use cookies to provide information to the Google analytics tool.

To opt out of being tracked by Google Analytics across all websites visit:

Google Analytics

Google Analytics uses HTTP Cookies to 'remember' what a user has done on previous pages / interactions with the website. Google Analytics supports three JavaScript libraries (tags) for measuring website usage: gtag.js, analytics.js, and ga.js.

People who email us

We monitor any emails sent to us, including file attachments, for viruses or malicious content. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.

Job applicants

MC MM is the employment company and is the data controller of all the information you provide when applying for a job. All information you provide will only be used for the purpose of progressing your application, or to fulfil legal or regulatory requirements if necessary.

We will use the contact details you provide to us to contact you to progress your application. We will use the other information you provide to assess your suitability for the role for which you have applied.

We do not collect or hold more information than we need. If your application is unsuccessful, your information will be retained for 12 months.

We will not share any of the information you provide with any third parties for marketing purposes or store any of your information outside of the European Economic Area unless:

  • the recipient country is certified by EU authorities as providing adequate levels of data protection; or
  • where approved safeguards such as standard contractual clauses or binding corporate rules have been implemented.

7. Education Mutual Contact

By law, all EU & UK residents have the right to ask us what information we hold about you. You can request a copy of this information (subject access request) and/or ask us to correct any inaccuracies.

If you would like to discuss anything relating to this policy, get more information on how your personal data is handled, or to make a subject access request, please contact our Data Protection Officer:

By Post:

Data Protection Officer (DPO)

4th Floor

20 Gracechurch Street



By Email: