Reporting Service - Privacy policy & cookies

At GL Education Group Limited (“we”, “us”) we value the privacy of all our customers. We recognise that when you choose to provide us with information, you trust us to act in a responsible manner. We believe this information should only be used to help us provide you with a better service. We will only collect and use Personal Data in ways that are described in this privacy notice (“Notice”), and always in compliance with our obligations and your rights under the law.

This Notice applies to your use of our website and the services available at (Reporting Service) Our website may provide links to third-party sites. Since we do not control those third-party sites and have no control over how your data is collected, stored and used by them, we advise you to review the privacy notices of such sites before providing your data to them.  


About us

GL Education Group Limited is a Limited Company registered in England and Wales under company number 02603456.

Registered address: 1st Floor, Vantage London, Great West Road, Brentford, TW8 9AG

Telephone number: +44 (0)20 8996 3369

Data Protection officer: Karl Oertel

Email address:

In this Notice, reference to Data Protection Legislation means the Data Protection Act 2018, the General Data Protection Regulation (“the GDPR”), and the Privacy and Electronic Communications Regulations 2003.


We operate this website and its services for the benefit of schools, Local Education Authorities (LEAs) or similar organisations (“Other party”).

This Notice (together with our Terms of Use and any other documents referred to in it) sets out the basis on which any Personal Data we collect will be processed by us.

We have broken down the Notice below to cover the following different types of individuals whose Personal Data we collect and process under this service.

Administrative User (“you”, “your”) - someone who uses this service for or on behalf of a school or Other Party e.g. a member of staff of the school.

Student – a student who takes a paper-based test, the results of which can be accessed by Administrative Users on this service.


What is Personal Data?

‘Personal Data’ is defined by the GDPR as: “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.

In simpler terms, Personal Data is any information about you that enables you to be identified. For example, this could be your name or contact details.


Data Controller/Data Processor

We use Personal Data relating to Administrative Users as detailed below. For the purpose of Data Protection Legislation, the data controller is GL Education Group Limited in relation to the Personal Data of Administrative Users. 

We process Personal Data relating to Students as detailed below and we do this on behalf of the school or Other Party. For the purpose of Data Protection Legislation, the school or Other Party is the data controller and GL Education Group Limited is the data processor in relation to the Personal Data of the Student.


What is our lawful basis for using your Personal Data?


What Personal Data do we collect and how?

The following information may be collected automatically when you visit this server:


How do we use this Personal Data?

We use information held about Users in the following ways:



The Personal Data of a Student is information entered into the the reporting service by a User. We may receive Personal Data of a Student in a completed paper assessment which we receive from a school. Personal Data relating to a Student includes (but is not limited to), name, date of birth, age, unique pupil number, assessment results, gender, ethnicity, socio-economic information (for example, whether or not qualifying for free school meals) school and year group.


How do we use this Personal Data?

The Personal Data of Students is processed by us on behalf of the school or Other party and always as directed by them in order to:


Personal Data we receive from other sources

We may receive your Personal Data via other websites or services operated by us or the GL Education Group Limited. In this case we will have informed you when we collected that data that it may be shared internally and combined with data collected on this site.



We use cookies to distinguish individual Users of the reporting service. This helps us to provide you with a good experience. A cookie is a small file of letters and numbers that we store on your browser, computer, or device.

The cookies currently used by the TRS site are listed below:

Cookie name



Used by the website to ensure your login is retained whilst connected to the site.


Do we share Personal Data?

We may share usage Data with any member of our group, which means our subsidiaries, our ultimate holding company (GL Education Group) and its subsidiaries, only where necessary (pursuant to a contract, for the legitimate interest of our business such as providing a better service to our customers, or for legal reason) or where authorised by you.


We may share User Personal Data with selected third parties including IT support professionals. We ensure that they can only access the data that is necessary for them to provide the support service required by us.


We may share results of assessment with the LEA, or other similar organisation on whose behalf or under whose direction Users access and use TRS, where we are authorised to do so. We will always obtain the necessary consent before sharing Personal Data in this way.


If we sell, transfer, or merge parts of our business or assets, Personal Data may be transferred to a third party. Any new owner of our business may continue to use this Personal Data in the same way that we have used it, as specified in this Notice.


In some limited circumstances we may be required to share certain Personal Data in order to comply with a legal obligation, in legal proceedings or in order to enforce or apply our terms of use and other agreements, or to protect the rights, property, or safety of GL Education Group Limited, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.


Anonymised data

We may use information relating to Students and schools in anonymised format to produce reports that we produce and share with third parties. These reports would, for example, be comparable reports about the type of organisation (for example, type of school, % of students with different languages) and their performance. No Student or school would be identifiable in such reports.


Where do we store User Personal Data?

Personal Data that we collect from Users will not be stored at a destination outside the United Kingdom or the European Economic Area.


How to help us keep Personal Data secure

Where we have given you (or where you have chosen) a password which enables access to certain parts of the reporting service, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.


How long do we keep Personal Data?

We keep Personal Data for as long as we need to for the purposes for which it was collected or (if longer) for any period for which we are required to keep Personal Data to comply with our legal and regulatory requirements.


What are your rights?

Under the Data Protection Legislation, you have the following rights:


Changes to this Notice

We may change this Notice from time to time. This may be necessary, for example, if the law changes or if we change our business practices in a way that affects how we collect or use your Personal Data.

Any changes will be made available on our website.


Contact details

Questions, comments and requests regarding this Notice are welcomed and should be addressed to