School & Institutional
Agreement

Already Doing It provides a platform for structured, honest 1-to-1 video sessions between sixth formers, typically aged 16 to 18, and verified current university students and recent graduates. To students these near-peer mentors are known as "Uni Insiders"; in this Agreement they are referred to as "Mentors". This Agreement is designed to support the School in meeting its statutory duties and strategic goals, in particular:

• Gatsby Benchmark 2 (learning from career and labour market information)
• Gatsby Benchmark 3 (addressing the needs of each pupil)
• Gatsby Benchmark 7 (encounters with further and higher education)

Where students are matched with graduate Mentors who are in employment, sessions additionally evidence Gatsby Benchmark 5 (encounters with employers and employees).

The Company's distinctive value is honest insight: Mentors share candid, first-hand experience, including challenges as well as positives. The Company and its Mentors are independent of the School, which supports the School's duty to secure careers guidance that is independent of the School. This is addressed in section 7.

• Access codes: The Company will provide the School with unique access codes for a designated student cohort.
• Peer-to-peer sessions: Students may book 1-to-1 video sessions with verified Mentors to discuss courses, university life and post-18 transitions.
• Impact Reporting: The Company will provide the School with the reporting deliverables defined in Schedule 1 (Service Schedule). These reports are built from anonymised aggregates and are designed to satisfy Gatsby Benchmark evidence requirements and support the School's careers department.
• Funded allocation: Where the cohort's sessions are funded (see section 3), the School's codes draw from a funded allocation set out in the Order Form. Capacity is expressed as "up to" a number of sessions, because actual usage depends on student demand.

• Funded Access: Where sessions are funded for the School, for example by a university partner or grant funding, the Services are provided at no cost to the School for the funded sessions. The School agrees to actively promote the service to the eligible cohort and to run a facilitated booking session to ensure high engagement.
• Direct Purchase: For paid cohorts, the School agrees to the rates set out in its Order Form or invoice. Payment is due within 30 days.

The Company's experience is that a scheduled, facilitated booking session is the single most reliable way to turn access into completed sessions. Accordingly, as a condition of issuing access codes, the School agrees to schedule and host a facilitated booking slot (for example a form-time session) at which eligible students book their sessions, using the Company's materials and a ready-filtered booking link.

Access codes are issued once this slot is scheduled.

The Company operates a "Safety by Design" model. The School acknowledges that the Company provides an external digital service and that the School retains its own statutory safeguarding duties, including under Keeping Children Safe in Education (KCSIE).

• Non-regulated activity: The sessions do not constitute "Regulated Activity" within the meaning of the Safeguarding Vulnerable Groups Act 2006 (as amended by the Protection of Freedoms Act 2012), because they are student-led, advisory, time-limited and, for students under 18, conducted with a parent or guardian present at the start of the session. An Enhanced DBS check is therefore not the applicable check for this activity.
• Verification and assessment: All Mentors are identity verified and must complete the Company's mandatory safeguarding and professional boundaries assessment, tailored to near-peer digital mentoring, before delivering sessions.
• Supervised access: For students under 18, a parent or guardian must be present at the start of each session.
• Reporting: Any safeguarding concern, including a low-level concern, identified during a session is reported to the School's Designated Safeguarding Lead (DSL), without undue delay, so the School can maintain its holistic view of student welfare.
• Recording: Sessions are never recorded, by anyone, including the Company. Sessions must not be recorded, screenshotted or shared.

Roles. For the purposes of UK data protection law, roles are split by who provides the data. Already Doing It Ltd is an independent controller for the information students provide themselves through the platform (their booking details and their pre- and post-session reflections), which it processes under its published Privacy Policy and student privacy notice. The School is the controller for the small number of per-pupil marks its own staff enter on the school dashboard (a disadvantaged indicator drawn from records the School already holds, and outcome marks recording whether a pupil applied and whether they enrolled), and Already Doing It acts as the School's processor for those marks. This processing is governed by the Data Processing Schedule, which forms part of the School's Order Form.

What is processed. Booking details; pre- and post-session reflections completed by the student; an optional postcode that is converted to an area indicator and immediately discarded, so the postcode itself is never stored; and the per-pupil marks entered by School staff described above. No special category data is processed.

Consent gates on outcome marks. The applied and enrolled marks feed wider reporting only where the individual student has given the outcome consent collected at the point of use; without it, nothing about that student enters any partner-facing figures.

Sharing and anonymisation. Survey and reflection results reach the School only as anonymised aggregates. Universities receive only anonymised, grouped figures and quotes students have separately consented to share; no figure based on fewer than 6 students is ever displayed anywhere, and no named student data is shared with any university, employer or other third party. Student data is never sold and is never used for marketing unrelated to the Services.

Retention. Named per-pupil records are visible to the School for the academic year of the relevant session plus three further academic years, and are then deleted, with only anonymised aggregates retained. Full retention terms, sub-processors, security measures, breach notification and audit rights are set out in the Data Processing Schedule. Students can request deletion of their personal data at any time at alreadydoingit.co.uk/delete-my-data.

The credibility of the Services with students depends on the independence of the Company and its Mentors. The School acknowledges and agrees that:

• Mentors share honest, first-hand experience, including challenges and drawbacks as well as positives, and are not agents or spokespeople for the School or for any funder.
• Neither the School nor any funder will require the Company or any Mentor to present any institution favourably, to follow a promotional script, or to suppress honest feedback.
• Honest student feedback, including anything critical, is used to inform improvement and is only ever shared with the School or a funder in anonymised, aggregate form, other than pupil-level results the School is entitled to about its own pupils.

This independence supports the School's duty to secure careers guidance that is independent of the School.

The School agrees to:

• Distribute access codes only to the authorised student cohort.
• Schedule and host the facilitated booking slot described in section 4.
• Ensure students understand that Mentors provide personal experience, not professional, financial or legal advice.
• Provide the Company with a point of contact, including the Designated Safeguarding Lead for safeguarding matters, and cooperate with any safeguarding enquiry.
• Use the Company's name and marks only as agreed.

• Advisory nature: Sessions are student-led and advisory. The Company is not liable for individual student choices or for university application or admissions outcomes.
• Availability: The Company aims for high availability but is not liable for interruptions within the School's local network or a student's home internet connection, or arising from third-party platforms used to deliver sessions.
• Cap: Subject to the General Terms and to the extent permitted by law, the Company's total liability under this Agreement is limited to the total amounts paid to the Company in respect of the School's cohort under the relevant Order Form. Nothing in this Agreement limits any liability that cannot be limited by law.

This Agreement is supplemental to the Already Doing It General Terms and Conditions. Where a university funds the School's cohort, this Agreement is read together with the University Partnership Agreement between the Company and that university; the School is not a party to that agreement. Individual students and Mentors are additionally governed by the General Terms. In the event of a conflict between the General Terms and this Agreement on matters of safeguarding, data protection or the School relationship, this Agreement prevails.

This Agreement runs for the term set out in the Order Form. Either party may terminate on 30 days' written notice. On termination or expiry, any unused access codes are deactivated and the Company will provide a final Impact Report for sessions completed to date. Funded capacity already made available is not refundable on termination.

This Agreement is governed by the laws of England and Wales, and the parties submit to the exclusive jurisdiction of the courts of England and Wales.

Institutional and partnership queries can be directed to partnerships@alreadydoingit.co.uk.