Privacy Policy
Olive for Education website and online shop
Effective from: 10 August 2026
Version: 1.0
Applies to: oliveforeducation.ie, the Olive for Education online shop, and any Olive for Education page, form or portal that links to this policy.
1. Who we are
Olive for Education is a trading name of Upskill Online Limited, a company registered in Ireland under company number 470792, with its registered office at Suite D2, The Cubes Offices, Beacon South Quarter, Sandyford, Dublin 18, D18 HK83.
We supply one-to-one device programmes to schools across Ireland. That covers the supply of laptops and tablets, software and accessories, warranty and protection cover, device configuration, delivery into schools, training and ongoing support.
For most of the information described in this policy we are the data controller, which means we decide why and how it is used. For some information, in particular student information supplied to us by a school, we act as a data processor on the school's instructions. Section 6 explains that in more detail.
If you have any question about this policy or about how we handle your information, contact us at dataprotection@olivegroup.io.
2. What this policy covers
This policy explains what personal information we collect through our website and online shop, why we collect it, who we share it with, how long we keep it and what rights you have. It applies to:
- Visitors to our website.
- Parents, guardians and other purchasers who buy a device, accessories, cover or a payment plan through our online shop.
- School staff, including principals, deputy principals, IT coordinators and administrators, who deal with us about a programme.
- People who contact us through a form, by email, by phone or through our helpdesk.
- People who apply for a job with us through the website.
It does not cover other websites we link to. Those sites have their own privacy policies and we are not responsible for them.
3. The information we collect
We only collect what we need to run a programme, fulfil an order and support a device. The table below sets out what we collect and where it comes from.
| Category | What this includes | Where we get it |
|---|---|---|
| Identity and contact details | Name, email address, phone number, delivery and billing address, and the school and year group a student is enrolled in. | Directly from you when you order, register, enquire or contact us. |
| Order and account information | Items ordered, bundle selected, order reference, order history, delivery and collection details, and any account you create on the shop. | Generated when you place an order or create an account. |
| Payment information | Payment method type, card type, last four digits, transaction reference, amount and payment status. We do not receive or store full card numbers. | From you and from our payment provider. |
| Payment plan information | Instalment schedule, amounts paid and outstanding, direct debit or mandate reference, arrears status and any related correspondence. Where a plan is provided by a separate finance provider, that provider carries out its own checks under its own privacy notice. | From you, from our finance or payment plan provider, and generated by us. |
| Device information | Device model, serial number, IMEI where relevant, asset tag, warranty and cover reference, configuration profile applied and the school the device is assigned to. | Generated by us during provisioning, delivery and servicing. |
| Support, warranty and repair records | Helpdesk tickets, fault descriptions, repair notes, replacement and loan device records, and correspondence with you about a case. | From you and generated by our service and support team. |
| Student information handled for a school | Student name, class or year group, school email address where issued by the school, and the device assigned to that student. | From the school, or from a parent or guardian at the point of order. |
| Website and technical information | IP address, device and browser type, operating system, pages viewed, referring page, time and date of visit, and cookie identifiers. | Collected automatically when you use the website. See section 12. |
| Marketing preferences | Whether you have opted in or out of marketing, and how you have engaged with our emails. | From you and from our email platform. |
| Recruitment information | CV, cover letter, employment history, qualifications and referee details. | From you when you apply for a role. |
We do not ask for special category information, such as health or disability information, as a routine part of an order. If you choose to tell us something of that kind, for example because a student needs a particular accessibility setup or an adjustment on delivery day, we will only use it for that purpose and only keep it for as long as it is needed.
4. Why we use your information and our legal basis
Under the General Data Protection Regulation we must have a lawful basis for everything we do with your information. The table below sets out ours.
| What we use it for | Legal basis |
|---|---|
| Taking and processing your order, taking payment, and delivering the device and accessories you have bought. | Performance of a contract with you. |
| Setting up and administering a payment plan, collecting instalments and dealing with missed payments. | Performance of a contract with you, and our legitimate interest in recovering amounts properly due. |
| Configuring the device to the school's requirements before it is handed over. | Performance of a contract with you, and performance of our contract with the school. |
| Providing warranty, cover, repair and helpdesk support for the life of the device. | Performance of a contract with you, and our legal obligation to provide statutory consumer remedies. |
| Managing our relationship with a school, including quotations, programme planning, deployment scheduling and account management. | Performance of a contract with the school, and our legitimate interest in running our business. |
| Keeping accounting, VAT and tax records. | Compliance with a legal obligation. |
| Preventing and investigating fraud, and securing our systems and premises. | Our legitimate interest in protecting our business and our customers, and compliance with a legal obligation. |
| Sending marketing about our programmes and offers to parents and guardians. | Consent, which you can withdraw at any time. |
| Sending relevant information about our services to school contacts in their professional capacity. | Our legitimate interest in marketing to existing and prospective institutional customers. You can opt out at any time. |
| Improving the website, measuring how it is used and fixing problems. | Consent for non-essential cookies, and our legitimate interest in improving our service. |
| Handling complaints, queries and disputes, and establishing or defending legal claims. | Our legitimate interest in dealing with issues properly, and compliance with a legal obligation. |
| Assessing job applications. | Taking steps at your request before entering into a contract, and our legitimate interest in recruiting. |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by the impact on you. You can ask us for details of that assessment at any time.
5. Payment and payment plans
Card payments on our shop are handled by an external payment provider that is certified to the Payment Card Industry Data Security Standard. Your full card details are entered directly with that provider. We never see or store your full card number or security code. We receive confirmation that a payment succeeded or failed, along with a transaction reference and limited card details such as the card type and the last four digits.
If you choose a payment plan or instalment option, additional information will be processed to set up and run that plan. This includes your bank or mandate details, the instalment schedule and your payment history under the plan. Where the plan is provided by a separate finance provider, that provider is a controller in its own right. It will carry out its own identity, affordability or credit checks where required and it will give you its own privacy notice. We will tell you clearly at checkout who is providing the plan before you commit to it.
If instalments are missed we may contact you about arrears, suspend further orders on the account, and where necessary take steps to recover the amount due. We may share information with a debt recovery agent or legal adviser for that purpose.
6. Student information and our role for schools
Student information is handled carefully and kept to the minimum needed to get the right device, correctly configured, into the right student's hands.
Where a school gives us student information so that we can provision and deploy devices under its programme, the school is the data controller and we act as its data processor. We only use that information on the school's documented instructions, we do not use it for our own purposes, and we do not use it for marketing. Each school programme is covered by a written data processing agreement that sets out what we may do with the information, the security measures we apply, our use of sub-processors, and what happens to the information at the end of the engagement.
Where a parent or guardian buys directly through our shop, we act as controller for the purchaser's own details and for the limited student details needed to allocate and configure the device, such as the student's name, class or year group and school.
We do not create student accounts, we do not monitor student activity on a device, and we do not access the contents of a device once it has been handed over, other than at the request of the school or the user for a support or repair case.
Classroom management and safeguarding software, such as Senso, may be included in a school's programme. Where it is, the school decides how that software is configured and used and the school is the controller for the information it generates. Our role is limited to installing and configuring it as the school has instructed.
7. Children's information
Our website and shop are intended for adults. We do not knowingly sell to anyone under 18 and we ask that orders are placed by a parent, guardian or the school.
We recognise that the information we handle relates to children and that it deserves specific protection. We collect the minimum needed, we restrict internal access to the staff who need it to do their job, we do not profile students, and we do not use student information for marketing under any circumstances.
If you believe a child has given us information directly and you would like it removed, contact dataprotection@olivegroup.io and we will deal with it promptly.
8. Who we share your information with
We do not sell your information and we do not rent or trade it. We share it only where it is necessary for the purposes set out above, and only with recipients who are bound to protect it.
| Who | Why |
|---|---|
| The school running the programme | To confirm orders, allocate devices, plan deployment day and resolve support issues. |
| Payment and payment plan providers | To take payment, run instalment plans and deal with refunds and chargebacks. |
| Delivery and logistics partners | To deliver devices to a school or to a home address. |
| Manufacturers, distributors and authorised service partners | To register warranties, order parts and carry out repairs and replacements. |
| Software and platform providers | To provide the systems we run on, including our customer relationship system, email and productivity platforms, device management tooling, our shop platform and our helpdesk. These are configured to store personal information within the EEA. |
| Professional advisers | Our accountants, auditors, insurers and legal advisers, where they need it to advise us. |
| Regulators, An Garda Síochána and other authorities | Where we are legally required to disclose information, or where disclosure is necessary to establish, exercise or defend legal claims. |
| A buyer or successor | If we sell or reorganise part of our business, information may transfer as part of that transaction, subject to the same protections. |
9. Where your information is stored and who can access it
All personal information we hold is stored and hosted within the European Economic Area. We select our platforms and suppliers on that basis and we do not move personal information outside the EEA for storage, hosting or backup.
A limited number of our technical colleagues who support and administer our systems are based outside the EEA. They may need remote access to those systems to carry out maintenance, resolve faults and keep the platforms secure. Under data protection law that access counts as a transfer even though the information itself stays in the EEA, so we treat it as one and we protect it accordingly:
- Access is limited to named individuals who need it for a specific technical purpose, and is removed when it is no longer needed.
- Access is covered by the European Commission's standard contractual clauses, supported by a transfer impact assessment that we keep on file and review.
- Additional measures apply, including multi-factor authentication, encryption in transit, and logging of activity on the systems concerned.
- Personal information may not be downloaded, copied or stored on equipment outside the EEA.
- Access to student information from outside the EEA is only permitted where the school has been informed and the data processing agreement with that school allows it.
You can ask us for details of the safeguards we rely on by emailing dataprotection@olivegroup.io.
10. How long we keep your information
We keep information only for as long as we need it. The periods below are our normal retention periods.
| Information | How long we keep it |
|---|---|
| Order, invoice, payment and VAT records | Six years from the end of the accounting period, to meet Revenue and company law requirements. |
| Payment plan records | Six years from the final payment or the closure of the plan. |
| Device, warranty and cover records | For the life of the warranty or cover, plus two years. |
| Support, repair and helpdesk records | Three years from closure of the case. |
| Student information held for a school | For the duration of the programme, then returned or securely deleted in line with the school's instructions and our data processing agreement. |
| Enquiries that do not become orders | Twelve months from the last contact. |
| Marketing preferences and consent records | Until you withdraw consent, plus a record of the withdrawal so that we can honour it. |
| Website and cookie information | As set out in our Cookie Notice, and in any event no longer than twenty-four months. |
| Unsuccessful job applications | Twelve months from the decision, unless you agree to us keeping it longer. |
Where we are dealing with a complaint, a dispute or a legal claim we may keep the relevant information for longer until the matter is fully resolved and the time limit for any appeal has passed.
11. How we protect your information
We apply technical and organisational measures appropriate to the risk. These include:
- Encryption of the website and shop in transit, and encryption of devices and storage at rest.
- Multi-factor authentication and role-based access, so staff only see what they need for their role.
- Prompt removal of access when someone changes role or leaves.
- Logging and monitoring of access to systems that hold personal information.
- Secure handling of devices during provisioning, servicing and disposal, including secure wiping to recognised standards before any device is reused or disposed of.
- Written agreements with every supplier that handles personal information on our behalf.
- Staff training on data protection and security, refreshed regularly.
- A documented breach response procedure, including notification to the Data Protection Commission within 72 hours where required.
No system can be guaranteed completely secure, but we take these obligations seriously and review our controls regularly.
12. Cookies and similar technologies
We use cookies and similar technologies on our website. Some are strictly necessary to make the site and shop work, for example to keep you signed in or to remember what is in your basket. These do not require your consent.
Others are used for analytics, performance and marketing. We only set those with your consent, which we ask for through the consent banner when you first visit. You can change or withdraw your choices at any time using the preferences link on the site.
Full details of every cookie we use, what it does and how long it lasts are set out in our Cookie Notice, which is available on the website.
13. Marketing
We will only send marketing emails to parents and guardians where you have opted in, or where you have bought from us and we are telling you about similar products and services. Every marketing email includes an unsubscribe link and we act on unsubscribes immediately.
We may send information about our programmes to school staff at their work address in their professional capacity. You can opt out of this at any time by replying to any message or by contacting us.
We never use student information for marketing.
14. Your rights
You have the following rights in relation to your personal information:
| Right | What it means |
|---|---|
| Access | You can ask for a copy of the personal information we hold about you. |
| Rectification | You can ask us to correct information that is inaccurate or incomplete. |
| Erasure | You can ask us to delete information where we no longer have a good reason to keep it. |
| Restriction | You can ask us to pause our use of your information while a query about it is resolved. |
| Objection | You can object to processing based on our legitimate interests, and you can object to direct marketing at any time. |
| Portability | You can ask for the information you gave us in a commonly used electronic format, or ask us to send it to another organisation. |
| Withdraw consent | Where we rely on your consent, you can withdraw it at any time. This does not affect anything we did before you withdrew it. |
To exercise any of these rights, email dataprotection@olivegroup.io. We will respond within one month. If your request is complex we may extend that by up to two further months and we will tell you if that happens. We may need to verify your identity before we act, and we will not charge you unless a request is manifestly unfounded or excessive.
If your request relates to student information that we hold for a school, we will pass your request to the school without delay, because the school is the controller for that information.
15. Making a complaint
If you are unhappy with how we have handled your information, please tell us first at dataprotection@olivegroup.io so that we can try to put it right.
You also have the right to complain to the Irish supervisory authority:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Telephone: 01 765 0100 or 1800 437 737
Website: www.dataprotection.ie
16. Changes to this policy
We review this policy at least once a year and whenever our services change. The effective date at the top of the page shows when the current version took effect. Where a change materially affects how we use your information, we will tell you directly.
17. How to contact us
Data protection queries: dataprotection@olivegroup.io
Post:
Data Protection
Upskill Online Limited trading as Olive for Education
Suite D2, The Cubes Offices
Beacon South Quarter
Sandyford, Dublin 18
D18 HK83
Company registration number: 470792
Contact Us About Your Data Back to Home