Privacy Policy

When we say "we" or "us" in this policy, we are referring to Next Step Exhibitions Ltd, which operates Club ISS and the Independent Schools Show. Club ISS is a membership network for UK independent schools, operated as part of the Next Step Education group.

We are the data controller for the personal information you provide to us through this website and membership platform.

We collect personal data when you register for a Club ISS membership, invite colleagues, or contact us. This includes:

• Name and job title
• Email address
• School or agency name and address
• Membership type and payment information
• Login credentials (email and password, stored securely via Supabase)
• Usage data — pages visited, reports downloaded, events attended
• Communications you send us

When you invite a colleague to join your school's membership, we collect their email address solely to send the invitation.

We use the information we collect to:

• Create and manage your Club ISS account
• Process membership payments and renewals
• Send you membership-related communications (approval confirmations, invitations, renewal notices)
• Give you access to member benefits — ISS Show discounts, ISS Insights reports, AgentsConnect events, and Scholato (where applicable)
• Respond to your questions and support requests
• Improve the platform and develop new features
• Analyse usage patterns to understand how members use the service (via Google Analytics)

We may contact you about Club ISS events, new benefits, and related products and services from the Next Step Education group where you have given us permission to do so, or where we have a legitimate interest in doing so as your membership provider.

We will always send you essential service messages — such as membership approval, payment confirmation, and renewal reminders — regardless of your marketing preferences.

You can update your communication preferences at any time by emailing us at info@schoolsshow.co.uk.

We do not sell or pass your personal data to third-party marketers. To operate Club ISS, we share data only with the following trusted service providers, each bound by their own privacy and data processing commitments:

• Supabase — cloud database and authentication platform that securely stores member accounts and data
• Resend — transactional email provider used to send membership emails (confirmations, invitations, password resets)
• Stripe — payment processing for online membership subscriptions. Stripe handles card details directly; we do not store payment card data
• Google Analytics — website analytics to understand how visitors use club-iss.co.uk (anonymised usage data)
• Vercel — hosting platform for the Club ISS web application

Your data may be shared within the Next Step Education group of companies where relevant to your membership or related services.

Club ISS is committed to protecting your privacy and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

i) Cookies

This website uses cookies to maintain your login session and improve your experience. Essential cookies are required for the platform to function. You can disable cookies in your browser settings, though this will affect your ability to log in.

ii) Google Analytics

We use Google Analytics (property ID: G-HL68SV4L97) to understand how visitors use club-iss.co.uk. Analytics data is anonymised and does not identify you personally. You can opt out using the Google Analytics Opt-Out Browser Add-on.

iii) External links

This website may contain links to external sites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies.

We send transactional and membership emails through Resend. All emails include an unsubscribe or opt-out option where applicable.

We may track whether emails are opened and whether links are clicked, to help us improve our communications. This data is held securely and not shared with third parties.

To be removed from our mailing list, email info@schoolsshow.co.uk with "unsubscribe" in the subject line. Please allow up to 28 days for processing.

Communications with Club ISS on social media platforms are subject to each platform's own terms and privacy policies. We will never ask for personal or sensitive information through social media — please contact us directly at info@schoolsshow.co.uk for any account or membership queries.

Under UK GDPR, you have the right to access the personal data we hold about you. To make a subject access request, please contact us in writing at the address below. We will respond within 30 days of verifying your identity.

If any information we hold about you is inaccurate or out of date, please contact us and we will correct it promptly.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten") where we have no lawful basis to retain it
• Object to or restrict our processing of your data
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at info@schoolsshow.co.uk.

If you believe we have handled your personal data unlawfully, please contact us in the first instance and we will do our best to resolve your concern. If you remain unsatisfied, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
ico.org.uk · 0303 123 1113

We retain your membership data for as long as your membership is active and for a reasonable period afterwards to fulfil any legal or contractual obligations. Payment records are retained for 7 years in accordance with HMRC requirements. You may request deletion of your account at any time by contacting us.

By email: info@schoolsshow.co.uk
By post: Next Step Exhibitions Ltd, The Engine Room, 18 Battersea Power Station, London, SW11 4RF