At Magic Mill, privacy matters—especially when working with schools, students and staff. We understand the importance of protecting personal information and treating all data with care, discretion and respect.

Any information sent to us is kept strictly confidential and used only for the agreed project. We do not sell, share or pass personal data to external agencies, third parties or anyone outside Magic Mill, unless we are legally required to do so.

Once the work has been completed, approved and delivered, we securely delete personal information that is no longer required. This may include student names, photographs, contact details and any other information that could identify an individual. We retain only the files and records needed for legitimate administrative, legal or accounting purposes.

Magic Mill is committed to complying with UK GDPR and the Data Protection Act 2018. We also work in a way that supports school safeguarding procedures and take particular care when handling information relating to children and young people. Schools should only send information that is necessary for the agreed work and should ensure that they have the appropriate permissions and lawful basis to share it.