Version 3.0 · Academic Year 2026–27 · Next review September 2027
Including Online Safety, Staff Conduct, Safer Recruitment, Live Lessons and One-to-One Sessions. IWS Online School is committed to safeguarding and promoting the welfare of all children and young people who learn with us.
| Document owner | Designated Safeguarding Lead (DSL) |
|---|---|
| Approved by | Cigdem Karaman — CEO |
| Applies to | All staff, teachers, tutors, Success Coaches, contractors, volunteers, agents, partner schools and anyone working with or on behalf of IWS Online School |
| Version | 3.0 — Academic Year 2026–27 |
| Status | Approved for publication |
| Date adopted | June 2026 |
| Next review date | September 2027 (or sooner if required) |
| Related policies | Safeguarding Concern Reporting Form; Low-Level Concern Reporting Form; Allegation Against Staff Procedure; Cross-Border Safeguarding Contact Appendix; Privacy Policy; Staff Code of Conduct; Acceptable Use Policy; Online Safety Policy; Behaviour/Anti-Bullying Policy; Safer Recruitment Policy; Whistleblowing Policy; Low-Level Concerns Policy; Health & Safety Policy; Complaints Policy; Data Retention Schedule; Lesson Recording Protocol |
This policy is mandatory reading for all staff, volunteers and contractors. It must be read before working with any IWS student.
IWS Online School (“IWS”, “the School”, “we”) is committed to safeguarding and promoting the welfare of all children and young people who learn with us.
Although IWS delivers education online, our duty of care is the same as any school. The welfare of the child is our first priority. Every child has the right to learn in a safe, respectful and supportive environment, free from abuse, neglect, exploitation, bullying, discrimination and inappropriate adult contact.
Safeguarding is everyone’s responsibility. Every adult working with or on behalf of IWS must understand this policy, follow it in practice, and report concerns immediately.
This policy explains how IWS prevents harm, recognises safeguarding concerns, responds to disclosures, manages online safety risks, maintains professional boundaries, recruits staff safely, and works with parents, carers, partner schools and safeguarding authorities.
This policy is designed to:
This policy applies to:
Where a student is based outside the UK, IWS will consider both UK safeguarding good practice and the child protection laws and reporting systems of the country where the child lives.
Regulatory position. IWS Online School is a Cambridge Assessment International Education registered centre. It is not currently registered as an independent school with the Department for Education (DfE) under the Education Act 2002. As such, UK statutory guidance — including Keeping Children Safe in Education (KCSIE) and Working Together to Safeguard Children — is not legally binding on IWS in the same way it is on registered independent or maintained schools. However, IWS voluntarily commits to meeting the standards set out in this guidance because it represents best practice for any organisation providing education to children. IWS also has legal obligations under the Acts listed below that apply to all persons and organisations working with children, regardless of registration status.
This policy has regard to the following legislation and guidance:
IWS follows these safeguarding principles:
Where information is shared to protect a child, IWS does so in line with data protection law, which permits the sharing of personal data — including special-category data — where necessary to safeguard a child.
The governing body and proprietor hold overall accountability for safeguarding at IWS. They must ensure that:
The DSL leads safeguarding and child protection at IWS. The DSL must be a member of the senior leadership team and must have sufficient time allocated to fulfil the role effectively. Every member of staff must know who the DSL is and how to contact them.
| Role | Name |
|---|---|
| Designated Safeguarding Lead | Michelle van Roon |
| Deputy DSL | Elsie Eayrs |
| Governing Body / Proprietor Safeguarding Lead | Cigdem Karaman |
| Executive Principal | Matt Vickery |
| Data Protection Lead / DPO | Lori Cali |
The DSL is responsible for:
When the DSL is unavailable (including outside UK business hours), the Deputy DSL assumes all DSL responsibilities. A rota for out-of-hours cover is maintained by the DSL and made available to all staff. Contact details for both the DSL and Deputy DSL are published in Section 33.
All staff must:
Safeguarding concerns may include, but are not limited to, the following. Staff do not need to decide whether abuse has occurred — they only need to recognise that something may be wrong and report it to the DSL.
| Type of harm | Indicators / Examples |
|---|---|
| Physical abuse | Hitting, shaking, throwing, burning, scalding, poisoning, or otherwise causing physical harm. In an online school context: unexplained injuries visible on screen, flinching or fearful behaviour, or direct disclosure. |
| Emotional abuse | Threats, humiliation, rejection, intimidation, controlling behaviour, persistent criticism, age-inappropriate expectations. Signs include low self-esteem, extreme withdrawal, and difficulty forming relationships. |
| Sexual abuse | Sexualised behaviour, grooming, inappropriate messages, sexual comments, exploitation or assault, including non-contact offences and online offences. |
| Neglect | Lack of supervision, unmet basic needs, poor health care, persistent hunger, exhaustion or unsafe home conditions. Observable in online lessons through clothing, environment, or presentation. |
| Online abuse | Grooming, coercion, cyberbullying, sextortion, harmful content, inappropriate adult contact, sharing or soliciting sexual images. |
| Child-on-child abuse | Bullying, sexual harassment, online abuse, sharing images without consent, intimidation or discrimination between peers. |
| Domestic abuse | Abuse or violence in the home, including coercive control, which may be disclosed or witnessed during online learning. Children are victims in their own right. |
| Mental health risk | Self-harm, suicidal thoughts, severe anxiety, eating-disorder concerns or emotional distress that may indicate abuse or create risk of harm. |
| Radicalisation | Exposure to extremist content, grooming into extremist views or concerning ideological behaviour. |
| Exploitation (CSE/CCE) | Child sexual exploitation or child criminal exploitation, including county lines drug trafficking and coercion by organised groups. |
| Honour-based abuse | Physical, emotional or sexual violence carried out in the name of family or community honour, including forced marriage and FGM. |
| AI-related harm | Deepfakes, AI-generated sexual images, manipulated student images, impersonation or cyberbullying using AI tools. |
In addition to the types of abuse in Section 7, all staff should be aware of the following specific safeguarding issues. Annex B of KCSIE 2025 contains further detail on each topic.
Mandatory reporting duty. Under s.74 of the Serious Crime Act 2015, any member of staff who, in the course of their work, discovers that an act of FGM appears to have been carried out on a girl under 18 has a personal, non-delegable duty to report this to the police. This duty cannot be delegated to the DSL. The staff member must make the report themselves, and must also inform the DSL. ‘Discovers’ means the child discloses it directly, or the staff member observes a physical indicator. Suspicion alone does not trigger the mandatory duty, but must still be reported to the DSL as a safeguarding concern.
FGM is child abuse and a criminal offence in the UK. It includes all procedures that involve partial or total removal of the external female genitalia for non-medical reasons. IWS staff must:
Honour-based abuse (HBA) is a term used to describe a collection of practices used predominantly — but not exclusively — to control the behaviour of a person in order to protect the perceived honour of the family or community. HBA encompasses physical, emotional and sexual violence, as well as forced marriage, FGM, and other coercive acts. It can affect children of any background, gender or nationality.
Forced marriage is a specific criminal offence under the Anti-social Behaviour, Crime and Policing Act 2014. It differs from an arranged marriage, in which both parties freely consent. Concerns about forced marriage can be reported to the Forced Marriage Unit: 020 7008 0151 (or +44 20 7008 0151 for international callers).
Warning signs of HBA or forced marriage include: absences for extended family trips; a student expressing fear about returning home; a student being withdrawn from school; a sudden engagement or marriage; or direct disclosure. Staff must never attempt to mediate or contact the family before consulting the DSL, as this can significantly escalate risk to the child.
CSE and CCE are forms of abuse in which children are manipulated, coerced or deceived into sexual activity or criminal activity, often in exchange for gifts, affection, money or status. Children may not recognise that they are being exploited. County lines drug trafficking is a common form of CCE. Warning signs include: unexplained gifts or money; associating with older or unknown individuals; going missing; unexplained behavioural changes; sudden withdrawal; and fearfulness or aggression.
Online grooming for CSE purposes can begin through gaming platforms, social media, or other digital channels — all of which are relevant in an online school context. Any concern must be referred to the DSL without delay.
Children who are in the care of a local authority (looked-after children) or who have previously been in care are among the most vulnerable pupils. They may have experienced significant trauma, placement instability, or disrupted education. Working Together 2026 reinforces the link between care planning and child protection planning.
IWS will appoint a Designated Teacher for Looked-After Children: Anika van der Westhuizen. The Designated Teacher is responsible for:
Previously looked-after children (including those who have been adopted, have a special guardianship order, or have left care) retain vulnerabilities associated with their earlier experiences. Staff should be alert to the particular needs of this group and refer any concerns to the DSL.
Children with SEND are statistically more vulnerable to abuse and may face additional barriers to communication and disclosure. They may be more reliant on adult support, less able to recognise or report concerning behaviour, or more likely to have their concerns dismissed or misunderstood.
All staff working with pupils with SEND must:
Any concern about a SEND pupil must be referred to the DSL in the same way as any other safeguarding concern.
The Domestic Abuse Act 2021 recognises children as victims in their own right where they see, hear or experience the effects of domestic abuse, including coercive control. Working Together 2026 includes strengthened guidance on identifying abusive behaviour in intimate relationships and coercive control.
In an online school context, staff should be alert to: students disclosing conflict or violence in the home; distress or fearfulness around family members during sessions; visible domestic incidents in the background of a live session; or students disclosing abuse in their own intimate relationships (see also Section 24, Child-on-Child Abuse). Any such concern must be reported to the DSL.
Poor mental health can be both an indicator of abuse or neglect and a risk factor for further harm. Staff are not expected to diagnose mental health conditions, but should report concerns to the DSL when a pupil:
Staff must not promise confidentiality where there is a mental health concern that could involve risk of harm. A pupil who discloses suicidal ideation or intent to self-harm during a live session must not be left alone — the session should be paused, the DSL contacted immediately, and emergency services called if there is immediate danger.
IWS has a voluntary commitment to the Prevent duty under the Counter-Terrorism and Security Act 2015, as best practice for an online education provider working with children. IWS will:
Indicators of concern include: accessing or sharing extremist material; repeating extremist views; isolation from family or peers; secretive online activity; contact with unknown adults or groups; or sudden significant changes in behaviour or beliefs.
A private fostering arrangement exists where a child under 16 (under 18 if disabled) is cared for for 28 days or more by someone who is not a close relative. Where IWS becomes aware of a private fostering arrangement, it will notify the relevant local authority, as is required practice under the Children Act 1989.
Working Together to Safeguard Children 2026 places an explicit requirement on all organisations working with children to embed anti-racist and anti-discriminatory practice within safeguarding. IWS is committed to this standard.
Racism and discrimination can be both a form of abuse and a barrier to identifying and responding to abuse. A child’s race, ethnicity, religion, nationality, gender, disability, sexual orientation, or any other protected characteristic must never be used to minimise, explain away, or delay a safeguarding concern.
IWS commits to:
Any member of staff who witnesses racist or discriminatory behaviour must report it to the DSL. Where such behaviour is directed at a child by another adult at IWS, it will be treated as a safeguarding concern and managed under the appropriate procedure.
Because IWS is an online school, online safety is central to safeguarding. IWS will take reasonable steps to ensure that:
The school’s Online Safety Policy provides detailed guidance on platform use, acceptable use standards and monitoring. Staff should read it alongside this policy.
Live lessons, trial lessons, tutoring, Success Coach sessions and one-to-one meetings must be managed safely. The following rules apply:
All staff must maintain clear professional boundaries with students. Staff must not:
Any breach of professional boundaries must be reported to the DSL or senior leadership immediately.
Where the concern relates to adult behaviour that appears to fall below expected professional standards but does not appear to meet the harm threshold, staff should complete the IWS Low-Level Concern Reporting Form and submit it to the DSL, Executive Principal or nominated senior safeguarding lead. If the concern suggests that a child has been harmed, may have been harmed, or is at immediate risk, it must be reported immediately under the safeguarding or allegation procedure instead.
If a child tells a member of staff something that may be a safeguarding concern, the staff member must:
Staff must not investigate the concern themselves, contact the alleged person responsible, or discuss the matter with others who do not need to know.
If a child is in immediate danger, staff should contact the emergency services in the country where the child is located and then inform the DSL as soon as possible.
After reporting the concern to the DSL, the staff member must complete the IWS Safeguarding Concern Reporting Form as soon as possible, and normally on the same working day. In an emergency, staff must contact emergency services and/or the DSL immediately and complete the form afterwards. The form must be factual and objective.
All safeguarding concerns must be recorded promptly, accurately and objectively. Records should include:
Opinion must be clearly separated from fact. Safeguarding records must be stored securely and separately from ordinary academic records, with access restricted to the DSL, Deputy DSL and authorised senior staff only.
IWS uses the Safeguarding Concern Reporting Form as the standard internal record for child protection and safeguarding concerns. Completed forms must be shared only with the DSL or Deputy DSL and stored in the restricted safeguarding records area. Safeguarding records must not be stored in ordinary academic files, Trello boards, general HR folders, public folders or open shared drives.
IWS will handle safeguarding information carefully, confidentially and lawfully. However, safeguarding information may be shared without consent where this is necessary to protect a child, prevent harm, comply with a legal duty or make a referral to the relevant authority.
Information may be shared with:
This reflects the lawful bases set out in the Privacy Policy, including legal obligation, vital interests and the substantial-public-interest/safeguarding conditions for special-category data. Data protection law does not prevent the sharing of information to protect a child — the threshold for sharing is whether it is necessary, proportionate and lawful.
Any concern about the behaviour of an adult working with or on behalf of IWS must be taken seriously. This includes concerns about staff, teachers, tutors, Success Coaches, contractors, volunteers, agents, partner-school staff, senior leaders, or anyone else who may have contact with students.
Concerns may include behaviour that:
Where an allegation may meet the harm threshold, it must be reported immediately to the Executive Principal or the appropriate senior safeguarding lead. If the allegation concerns the Executive Principal, it must be reported to the Board/Proprietor/Chair.
Where there is a UK connection, the DSL or senior leader will consider whether the matter must be referred to the LADO. Where the student or adult is overseas, the equivalent local safeguarding authority should be considered. Where a person is dismissed or would have been dismissed for harming a child, a referral will be made to the Disclosure and Barring Service (DBS) and to any relevant regulatory body.
A low-level concern is any concern about adult behaviour that does not appear to meet the harm threshold but is still inconsistent with expected professional standards. Examples include:
Low-level concerns must still be reported promptly to the DSL, Executive Principal or nominated senior safeguarding lead. They will be recorded and reviewed so that patterns of behaviour can be identified early. Staff must feel able to report concerns without fear — raising a genuine concern is always the right thing to do.
Where the concern relates to the DSL, it must be reported to the Executive Principal or Board/Proprietor safeguarding lead instead. Low-level concern records must be stored securely and reviewed to identify any patterns, repeated behaviour, or escalation concerns.
Staff must raise concerns if they believe safeguarding is not being handled properly. This includes concerns that:
Staff may use the IWS Whistleblowing Policy and, where appropriate, contact external safeguarding bodies — for example the NSPCC whistleblowing helpline (0800 028 0285). No member of staff will be treated unfairly for raising a genuine safeguarding concern.
IWS is committed to recruiting safely and preventing unsuitable adults from working with children. Before any member of staff, volunteer or contractor begins working with students, the following checks must be completed and recorded:
IWS will maintain a Single Central Record (or equivalent safeguarding recruitment record) of all pre-employment checks, which will be reviewed termly. At least one person involved in each recruitment process must have current safer-recruitment training.
Partner schools and agents working with IWS students are required to follow equivalent safeguarding standards. This requirement must be included in all contractual agreements with partners and agents.
All staff must complete safeguarding and online safety training before working with students. Training is provided at induction and must be updated at the required intervals.
The DSL maintains a training log for all staff, reviewed termly. Gaps in training coverage are reported to the Executive Principal and governing body. Training records are made available on request to Cambridge Assessment International Education, Ofsted or any other relevant inspection body.
Students will receive age-appropriate online safety education and information about how to report concerns. Parents and carers will be told how to raise safeguarding concerns with IWS.
In an online school, unexplained absence from live lessons or a sudden and prolonged withdrawal from engagement is equivalent to a child going missing from education — a recognised safeguarding risk. IWS treats unexplained non-attendance as a potential safeguarding concern.
The following procedure applies when a student is absent without explanation:
| Stage | Action |
|---|---|
| Day 1 of unexplained absence | Teacher attempts contact via official IWS messaging. Notes absence in attendance record. |
| Day 2 (no response) | DSL is notified. DSL or nominated staff member contacts parent/carer directly via official IWS channels. |
| Day 3 (no response) | DSL escalates: attempts contact with emergency contact on file. Reviews the pupil’s safeguarding history. |
| Day 5 or if immediate risk identified | DSL considers referral to children’s social care or relevant child protection authority in the student’s country. If there is reason to believe the child is in immediate danger, emergency services are contacted. |
| International students | Where the student is based outside the UK and cannot be reached, the DSL will use the country-specific reporting routes (Section 23) and may seek advice from a recognised safeguarding authority. |
All absence-related safeguarding concerns must be recorded on the Safeguarding Concern Reporting Form and managed by the DSL. The DSL will inform the governing body of any case where a student remains unreachable for five or more working days.
IWS works in partnership with parents and carers to keep children safe. Parents and carers are normally informed about safeguarding concerns involving their child. However, IWS may delay informing a parent or carer if doing so could place the child at greater risk or interfere with a safeguarding referral.
Where a student is enrolled through a partner school or local organisation, safeguarding responsibilities must be agreed clearly in writing before the partnership begins. This must include:
Where IWS arranges in-person activities, including summer schools, trips or events, a separate safeguarding risk assessment must be completed before the activity takes place.
IWS teaches students in different countries. Safeguarding action must consider the child’s location, the adult’s location and any UK connection.
The DSL maintains a practical list of safeguarding reporting routes for each country where IWS has students (the Cross-Border Safeguarding Contact Appendix). This includes:
Where local reporting routes are unclear, unsafe or unavailable, the DSL will seek advice from a recognised safeguarding authority and use UK safeguarding advice routes where appropriate.
IWS does not tolerate child-on-child abuse. This includes:
Child-on-child abuse must never be dismissed as “banter”, “drama”, “just a joke” or “part of growing up”. Concerns must be reported to the DSL and handled in a way that protects all children involved.
If a student shares, threatens to share, or is pressured to share a nude or semi-nude image, staff must:
The DSL will decide what action is required, including whether police, parents/carers, partner schools or child protection authorities should be contacted. This procedure applies to AI-generated and manipulated images as well as real images.
Mental health concerns can be safeguarding concerns, especially where a child may be at risk of harm. See Section 8.7 for full guidance. Staff must report concerns such as self-harm, suicidal thoughts, severe anxiety or distress, eating-disorder concerns, sudden withdrawal, concerning written work or messages, comments about not feeling safe, domestic abuse or family crisis, or signs of coercion, control or exploitation.
Staff are not expected to diagnose or provide counselling. Their role is to report concerns and ensure the child receives appropriate support. Pupils in crisis must not be left alone in a virtual session.
See Section 8.8 for full guidance on radicalisation and the Prevent duty. Concerns must be reported to the DSL, who will consider whether a Prevent referral or equivalent local safeguarding referral is appropriate.
IWS recognises that online education creates specific risks, including misuse of digital tools. Staff and students must not use IWS platforms to:
Any misuse involving a child must be reported as a safeguarding concern.
Safeguarding information is confidential but not secret. Staff must share safeguarding information only with the DSL or those who need to know in order to protect a child. Staff must not:
Safeguarding records will be kept securely and retained in accordance with the following periods:
| Record type | Retention period |
|---|---|
| Safeguarding concern records (general) | Until the child’s 25th birthday (or 26th birthday where the child had an Education, Health and Care Plan) |
| Child protection conference / strategy meeting records | Until the child’s 25th birthday |
| Allegation against staff records | Until the member of staff’s normal retirement age or 10 years from the date of the allegation, whichever is longer |
| DBS check records | Delete once decision made; record that a check was made and the outcome |
| Recruitment records (unsuccessful applicants) | 6 months after the appointment decision |
| General academic records | 7 years after the student leaves IWS |
Safeguarding records must not be included in routine data purge schedules. Deletion of safeguarding records requires the explicit authorisation of both the DSL and DPO. These periods reflect guidance from the Information Commissioner’s Office and recognised best practice in UK safeguarding.
When a student leaves IWS, their safeguarding file must be transferred securely to any receiving school, separately from the general academic file, directly to that school’s DSL. Where there is no receiving school, the DSL will follow local authority guidance.
Parents, carers, students or staff may raise concerns about safeguarding practice by contacting:
Where a complaint concerns the DSL, it should be escalated to the Executive Principal or Board/Proprietor safeguarding lead. Where a person believes a child is at immediate risk, they should contact emergency services in the child’s location immediately.
This policy will be reviewed at least annually — ordinarily in September each year. It will also be reviewed sooner if:
The DSL is responsible for monitoring legislative developments — including the Children’s Wellbeing and Schools Bill and future editions of KCSIE and Working Together — and for proposing amendments to this policy. All staff will be notified of material changes and required to re-read the updated policy.
Final approval rests with the CEO. The next scheduled review date is September 2027.
| Concern / Role | Contact |
|---|---|
| IWS DSL | Michelle van Roon — [email protected] |
| IWS Deputy DSL | Elsie Eayrs — [email protected] |
| IWS Data Protection | Lori Cali — [email protected] |
| Immediate danger | Emergency services in the child’s country / location (see Cross-Border Appendix) |
| UK emergency services | 999 |
| NSPCC Helpline | 0808 800 5000 / [email protected] |
| NSPCC Whistleblowing Helpline | 0800 028 0285 |
| Childline | 0800 1111 / childline.org.uk |
| CEOP (online sexual abuse/grooming) | ceop.police.uk |
| Internet Watch Foundation (CSAM reporting) | iwf.org.uk |
| Forced Marriage Unit | 020 7008 0151 / +44 20 7008 0151 (international) |
| Cambridge International | www.cambridgeinternational.org |
All staff, contractors, volunteers and agents are required to confirm that they have read, understood and will comply with this Safeguarding & Child Protection Policy. A new declaration must be signed when a materially updated version of this policy is issued.
Where IWS uses an online HR or onboarding system, a timestamped electronic acknowledgement of this policy is accepted in place of a physical signature. Records of all declarations must be retained by the DSL.
This is a quick reference for all staff.
If you cannot reach the DSL: contact the Deputy DSL. If neither is available and there is immediate risk, contact the police or children’s social care directly and inform the DSL as soon as possible.
Remember: session recordings may be used as safeguarding evidence. If a concern arises during a recorded session, ensure the recording is preserved and flag it to the DSL immediately.
| Term | Definition |
|---|---|
| Barred list | The list maintained by the DBS of individuals barred from working with children. |
| CAMHS | Child and Adolescent Mental Health Services. |
| CCE | Child Criminal Exploitation — coercion of a child into criminal activity. |
| CEOP | Child Exploitation and Online Protection Command (part of the National Crime Agency). |
| Channel | A multi-agency programme to support individuals vulnerable to radicalisation. |
| CSA | Child Sexual Abuse. |
| CSE | Child Sexual Exploitation. |
| DBS | Disclosure and Barring Service — conducts criminal record checks. |
| DfE | Department for Education (England). |
| DSL | Designated Safeguarding Lead. |
| EHC Plan | Education, Health and Care Plan — for children with SEND. |
| FGM | Female Genital Mutilation. |
| HBA | Honour-Based Abuse. |
| KCSIE | Keeping Children Safe in Education — DfE statutory guidance. |
| LAC | Looked-After Child — a child in the care of a local authority. |
| LADO | Local Authority Designated Officer — manages allegations against adults working with children. |
| MASA | Multi-Agency Safeguarding Arrangements. |
| MASH | Multi-Agency Safeguarding Hub. |
| PLAC | Previously Looked-After Child. |
| PEP | Personal Education Plan (for looked-after children). |
| Prevent | Government counter-terrorism strategy to prevent radicalisation. |
| SCR | Single Central Record — record of pre-employment checks for all staff. |
| SEND | Special Educational Needs and Disabilities. |
| TRA | Teaching Regulation Agency — regulates teachers in England. |
| WRAP | Workshop to Raise Awareness of Prevent — Prevent training for staff. |
| WT 2026 | Working Together to Safeguard Children 2026 — DfE statutory guidance. |
Mandatory reading for all staff · Review: September 2027