Privacy Policy
Introduction
We really do want you to read and understand our privacy policy. We believe simplicity and openness are key, however there are some important technical terms explained in appendix 1.
Who are we?
We are The Old Grammar School, trading as The Old Grammar School.
What data do we collect?
You may have given us your details by filling out the contact form. This may include your name, your email address, your contact number/s. This data is not stored on the website and will be deleted when no longer necessary.
This website uses cookies to track users using Google Analytics. This functionality can be disabled by disabling cookies for this website. Please see the documentation for your browser to do this.
What is the lawful basis for processing the data?
Our lawful basis for processing the personal data we collect via our website or whilst networking is “consent”.
If you are a customer or you contact us to ask for a quote or prices on products or services then the lawful basis will be to fulfil a “contract”.
Will data be shared with any third parties?
No. We do not share data with third any parties unless we are required to by law. We ceased all sharing of information to select and relevant third party suppliers in 2017.
How will the information be used?
Existing and prospective clients who have given us consent may receive newsletters and occasional contact from us.
We do not undertake any customer profiling and have no intention of sharing data with third parties for marketing purposes. If for any reason we wanted to in the future, your explicit consent will be sought first.
How long will the data be stored for?
We will store data about potential clients (information gathered from the website and in networking situations) for 1 year or until you exercise your right to be forgotten i.e. by opting out. This period will be extended if you are actively engaging with us and/or we believe you may potentially become a client in the near future.
For HMRC purposes, all client details will be removed from our invoicing software 7 years after they cease to be a client. For legal purposes, emails from and to clients providing advice or regarding the supply of goods or services, will be held for 6 years after the last interaction.
Is your data safe?
Your data and any emails we keep will be held in accordance with Article 32 (Security of processing) of the G.D.P.R.. This means we apply “appropriate technical and organisational measures” to ensure security, such as storing data on a secure system which has strong password protection.
What rights does the data subject have?
You can submit a subject access request to see the data we hold or exercise your right to be forgotten by emailing our G.D.P.R. Co-ordinator info@oldgrammarschool.com
How can the data subject raise a complaint?
If you wish to complain please email the G.D.P.R. Co-ordinator info@oldgrammarschool.com
Changes to this Privacy Notice.
This Privacy Notice is effective from 19.02.2019. It will be revised as needed to fully comply with changes in the law.
Should we choose to make any significant changes to this privacy notice you will be asked to again to give your explicit consent.
Appendix 1
G.D.P.R.
The General Data Protection Regulations.
Data subject
The person who’s data is being held by the Company.
Explicit consent
Where a person has taken action to confirm consent; and are not deemed to have accepted something by simply not objecting or by clicking a pre ticked box.
The right to be forgotten
Under Article 17 of the GDPR individuals have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and will depend on the circumstances.
Subject access request
A verbal or written request to an organisation for:
- confirmation that you are processing their personal data;
- a copy of their personal data;
- a copy of the organisation’s privacy notice (or equivalent information).
Organisations have to respond without undue delay or at least within 1 month of the request.
