Standards for using CSA’s public website and website-linked accounts

Effective date: 24 July 2026

1. Scope and purpose

This policy applies to visitors, applicants and other users of caspianschool.ac.uk and any account or interactive feature provided directly through it. Separate IT, VLE, student and staff acceptable-use rules may also apply. The purpose is to protect users, information, systems and CSA’s educational community.

2. Permitted use

You may use the website for lawful personal, educational, admissions, support and business purposes consistent with the function provided. Limited automated access is permitted only where CSA expressly provides an API, feed or written permission and the access respects technical limits and data-protection law.

3. Prohibited conduct

• breaking any law, regulation, court order, contractual duty or another person’s rights;
• attempting unauthorised access, privilege escalation, password guessing, vulnerability scanning or interception;
• introducing malware, harmful code, denial-of-service traffic or excessive automated requests;
• circumventing authentication, consent, rate limits, robots controls, paywalls or technical restrictions;
• scraping or harvesting personal information, course materials or substantial website content without authority;
• impersonating another person, misrepresenting affiliation, creating deceptive accounts or submitting false application information;
• uploading unlawful, defamatory, threatening, discriminatory, sexually exploitative, infringing, fraudulent or malicious content;
• using forms, messaging or accounts for spam, unsolicited marketing, phishing, harassment or abuse;
• sharing credentials or enabling unauthorised use of an account;
• publishing confidential CSA, student, staff or third-party information without authority; or
• using site content or systems to train, test or operate automated systems where this breaches intellectual-property, confidentiality, data-protection or contractual obligations.

4. User content and communications

Keep submissions relevant, accurate and respectful. Do not include unnecessary sensitive information in public or general-purpose fields. Where you submit material concerning another person, you must have a lawful basis and authority to do so. CSA may moderate, restrict or remove material that breaches this policy, while preserving evidence where needed for investigation or legal compliance.

5. Security reporting

Report suspected security weaknesses privately to info@caspianschool.ac.uk with enough detail to investigate. Do not access more data than necessary to demonstrate the issue, retain or share personal information, disrupt services, demand payment, or publish details before CSA has had a reasonable opportunity to respond. Testing requires prior written authorisation.

6. Monitoring and enforcement

CSA may log and review website activity where necessary and proportionate for security, service operation, fraud prevention and legal compliance, as explained in the Privacy Notice. If misuse is suspected, CSA may block traffic, suspend accounts, preserve evidence, remove content, notify affected organisations or authorities, and take legal or disciplinary action under applicable procedures.

7. Fair process

Where practicable and lawful, CSA will explain restrictions and provide an opportunity to respond. Immediate action may be taken where needed to protect people, data or systems, prevent ongoing harm, preserve evidence or comply with law.

8. Contact

Questions or reports concerning this policy should be sent to info@caspianschool.ac.uk or by post to Caspian School of Academics Ltd, Olympic House, 28–42 Clements Road, Ilford, England IG1 1BA.