Owner and Data Controller
Northfield, Ribblesdale Avenue, Clitheroe, BB7 2HZ
Owner contact email: firstname.lastname@example.org
Our commitments to you
To enable us to undertake our business objectives we collect and use personal data about individuals. We recognise the trust placed in us by individuals whose data we are entrusted with. This policy (together with any other documents referred to in it) sets out the basis on how any personal data we collect from you, or that you provide to us, or that we obtain about you will be processed by us. We are committed to ensuring that we do so in a manner that is both lawful and respects your privacy.
Please read the following carefully to understand our approach and practices regarding your personal data and how we will treat it. We take any complaints we receive very seriously. If you think our collection or use of your personal data is unfair, misleading or inappropriate, please bring it to our attention and we will be happy to provide any additional data or explanations needed. We also welcome suggestions for improving our procedures.
You can also contact the Data Commissioner’s Office at ICO, www.ico.org.uk or write to ICO, Wycliffe House Water Lane, Wilmslow, Cheshire SK9 5AF or telephone 0303 123 1113 for advice or to make a complaint.
Your Privacy Rights
Users may exercise certain rights regarding their Data processed by the Owner.
In particular, Users have the right to do the following:
- Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
- Object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
- Access their Data. Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
- Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
- Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
- Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Data from the Owner.
- Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User’s consent, on a contract which the User is part of or on pre-contractual obligations thereof.
- Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.
If you have any questions, please contact us:
By email at email@example.com
Through our website www.heathlandschool.co.uk
Types of Data collected
Among the types of Personal Data that this Website collects are: Usage Data and Contact Details such as: first name, last name, company name, address, email address and city.
How is this data collected and processed?
Within this Website we use a number of processes to gather data;
- Gravity Forms – https://www.gravityforms.com
Gravity Forms is used to compose the online forms which are found in ‘Contact Us’ and ‘Subscribe to Newsletter’ pages within the Website.
Your data is not processed until the mandatory fields of the form are completed and the form submitted.
Your data is emailed directly to the Data Controller and processed via their email protocols.
Your data is then completely deleted from the Websites Database within 24 hours.
In circumstances where the purpose of the form is for ‘Subscription to a Newsletter’, the data gathered is forwarded to Mailchimp https://mailchimp.com
- Mailchimp – https://mailchimp.com
Mailchimp is a cloud based software used to organise and control subscription lists. This enables the Data Controller to email all the subscribers to a newsletter.
The Data Controller abides by a Double Opt-in procedure regarding your data. i.e Once the Users Data from the Website form is sent to Mailchimp, a secondary email is sent to the User from Mailchimp which requests further confirmation before the Data can be added to the Mailchimp Subscription List.
It is only the Data Controller which has access to the Mailchimp account associated to the Website.
Updating or deleting the Users Data. This can be done either by clicking the links at the foot of the Newsletter emails or by contacting the Data Controller.
- Google Analytics – https://analytics.google.com/analytics/web
Google Analytics is used to understand how the website is being used where upon changes can be made to improve the User experience.
Data is gathered about how the User progresses via their IP address.
The Data Controller ensures that the IP Anonymization is Enabled and the specific location of the User is not identifiable.
The Data collected by Google Analytics will only be used by the Data Controller for the benefit of the Website and not shared with any 3rd parties.
The Data is stored with Google Analytics for 26 months which enables the Data Controller to analyse over annual trends.
Embedded content from other websites
Some information within the Website is imported directly from our Social Media accounts, such as Facebook, Instagram and YouTube.
Typically these appear on a ‘News’ page or within galleries.
This information is typically cached and imported hourly.
How we protect your data
The Website is hosted on a secure VPS managed by TSOHost https://my.tsohost.com with independant c-panel access.
The Website is built on a WordPress platform. The software used to build and function the website is updated frequently to ensure high standards of security.
Full information of the VPS can be accessed here https://www.tsohost.com/vps
Changes to Our Privacy Notice
We review this notice regularly as part of our internal processes or as our services, activities, or regulatory requirements change. It’s subject to change at any time, but the most up to date version is published on our website.