Busy Teacher's Club Privacy Policy
-
By using www.busyteachersclub.co.uk you consent to the collection, use and transfer of the information that you provide to us in accordance with the terms of this policy.
We reserve the right to change this policy from time to time at our sole discretion. It is your responsibility to familiarise yourself with this policy regularly to ensure that you are aware of any changes. Your use of this website after a change has been posted will signify your acceptance of the modified privacy policy.
Definitions
Consent: agreement which must be freely given, specific, informed and be an unambiguous indication of the Data Subject’s wishes by which they, by a statement or by a clear positive action, signifies agreement to the processing of personal data relating to them.
Data Controller: the person or organisation that determines when, why and how to process Personal Data. It is responsible for establishing practices and policies in line with the GDPR. We are the Data Controller of all personal data relating to our company personnel and personal data used in our business for our own commercial purposes.
Data Subject: a living, identified or identifiable individual about whom we hold personal data. Data Subjects may be nationals or residents of any country and may have legal rights regarding their personal data.
Personal Data: any information identifying a Data Subject or information relating to a Data Subject that we can identify (directly or indirectly) from that data alone or in combination with other identifiers we possess or can reasonably access. Data can be factual (for example, a name, email address, location or date of birth) or an opinion about that person’s actions or behaviour.
Personal Data Breach: any act or omission that compromises the security, confidentiality, integrity or availability of personal data or the physical, technical, administrative or organisational safeguards that we or our third-party service providers put in place to protect it. The loss, or unauthorised access, disclosure or acquisition, of personal data is a personal data breach.
Processing or Process: any activity that involves the use of personal data. It includes obtaining, recording or holding the data, or carrying out any operation or set of operations on the data including organising, amending, retrieving, using, disclosing, erasing or destroying it. Processing also includes transmitting or transferring personal data to third parties.
Data Collection and Retention
Busy Teacher’s Club understands that, under the GDPR, data controllers should not retain personal data for any longer than necessary.
On collection of data, Busy Teacher’s Club will obtain ‘opt in’ permission before retaining personal data. Furthermore, the GDPR gives data subjects rights to require the erasure of their personal data (also known as “the right to be forgotten”).
We will retain the personal data provided by you for as long as is reasonably necessary for the purposes listed in this policy.
Consent
A Data Controller must only process personal data on the basis of one or more of the lawful bases set out in the GDPR, which include consent.
A Data Subject consents to processing of their personal data if they indicate agreement clearly either by a statement or positive action to the processing. Consent requires affirmative action so silence, pre-ticked boxes or inactivity are unlikely to be sufficient. If consent is given in a document which deals with other matters, then the Consent must be kept separate from those other matters.
Data Subjects must be easily able to withdraw consent to processing at any time and withdrawal must be promptly honoured. Consent may need to be refreshed if you intend to process personal data for a different and incompatible purpose which was not disclosed when the Data Subject first consented.
Protecting Personal Data
Personal data must be secured by appropriate technical and organisational measures against unauthorised or unlawful processing, and against accidental loss, destruction or damage.
We will develop, implement and maintain safeguards appropriate to our size, scope and business, our available resources, the amount of personal data that we own or maintain on behalf of others and identified risks (including use of encryption and pseudonymisation where applicable). We will regularly evaluate and test the effectiveness of those safeguards to ensure security of our processing of personal data.
We will maintain data security by protecting the confidentiality, integrity and availability of the personal data, defined as follows:
(a) Confidentiality means that only people who have a need to know and are authorised to use the personal data can access it.
(b) Integrity means that personal data is accurate and suitable for the purpose for which it is processed.
(c) Availability means that authorised users are able to access the personal data when they need it for authorised purposes.
We will comply with and not attempt to circumvent the administrative, physical and technical safeguards we implement and maintain in accordance with the GDPR and relevant standards to protect personal data.
Data Subjects
Data Subjects have rights when it comes to how we handle their personal data. These include rights to:
(a) withdraw consent to processing at any time;
(b) receive certain information about the Data Controller’s processing activities;
(c) request access to their personal data that we hold;
(d) prevent our use of their personal data for direct marketing purposes;
(e) ask us to erase personal data if it is no longer necessary in relation to the purposes for which it was collected or processed or to rectify inaccurate data or to complete incomplete data;
(f) restrict processing in specific circumstances;
(g) challenge processing which has been justified on the basis of our legitimate interests or in the public interest;
(h) request a copy of an agreement under which personal data is transferred outside of the EEA;
(i) prevent processing that is likely to cause damage or distress to the Data Subject or anyone else;
(j) be notified of a personal data breach which is likely to result in high risk to their rights and freedoms;
(k) make a complaint to the supervisory authority; and
(l) in limited circumstances, receive or ask for their personal data to be transferred to a third party in a structured, commonly used and machine-readable format.
We will verify the identity of an individual requesting data under any of the rights listed above.
Reporting a Personal Data Breach
The GDPR requires Data Controllers to notify any personal data breach to the applicable regulator (ICO) and, in certain instances, the Data Subject.
We have put in place procedures to deal with any suspected personal data breach and will notify Data Subjects or any applicable regulator where we are legally required to do so.
Direct Marketing
Busy Teacher’s Club are subject to certain rules and privacy laws when marketing to our customers. We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:
• To quickly process your transactions.
• To send periodic emails regarding your order or other products and services.
• A Data Subject’s prior consent is required for electronic direct marketing (for example, by email, text or automated calls). The limited exception for existing customers known as “soft opt in” allows organisations to send marketing texts or emails if they have obtained contact details in the course of a sale to that person, they are marketing similar products or services, and they gave the person an opportunity to opt out of marketing when first collecting the details and in every subsequent message.
• The right to object to direct marketing must be explicitly offered to the Data Subject in an intelligible manner so that it is clearly distinguishable from other information.
• A Data Subject’s objection to direct marketing must be promptly honoured. If a customer opts out at any time, their details should be suppressed as soon as possible. Suppression involves retaining just enough information to ensure that marketing preferences are respected in the future.
If at any time users want Busy Teacher’s Club to stop sending such communications, they should email[email protected] or write to:
The Database Manager
The Busy Club
Lymedale Business Centre
Hooters Hall Road Newcastle Under Lyne ST5 9QFAmendment of personal data takes place within 2 working days of receipt of the request if made online and 10 working days if made offline.
IP Addresses and Cookies
This website utilises a standard technology called ‘cookies’ and web server log files to collect information about how this website is used. A ‘cookie’ is a small piece of information sent from our website to your computer to help us to identify you quickly. The information we collect allows us to monitor website traffic and to personalise content of the website for you. The information we collect is anonymous.
You do not need to accept cookies and may alter the configuration of your browser to refuse cookies. If you choose to have your browser refuse cookies it is possible that some areas of this website will not function as effectively when viewed.
Security
We employ security measures to protect the information provided by you from access by unauthorised persons and against unlawful processing, accidental loss, destruction or damage.
Your Rights
You may ask us to make changes to the information provided by you and/or held about you, to ensure that it is accurate and kept up to date. You may also request that we cease from processing your personal information and that we delete your data from our database or records.
We will only perform the activities outlined above to the extent that such activities will not compromise privacy, security or any other legal interests.
Sharing Personal Data
Generally, we are not allowed to share personal data with third parties unless certain safeguards and contractual arrangements have been put in place.
We will only share the personal data we hold with third parties, such as our service providers if:
(a) they have a need to know the information for the purposes of providing the contracted services;
(b) sharing the personal data, if required, the Data Subject’s consent has been obtained;
(c) the third party has agreed to comply with the required data security standards, policies and procedures and put adequate security measures in place.
Busy Teacher’s Club Third Party Providers
Kajabi – E-Newsletter
We use a third-party provider, Kajabi, to deliver our marketing emails. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter.
Website & Blog
We use a third-party, Kajabi, to publish our website. We use a standard WordPress service to collect anonymous information about users’ activity on the site, for example the number of users viewing pages on the site, to monitor and report on the effectiveness of the site and help us improve it.
Stripe – Credit Payments
We use a third-party provider, Stripe, to process payments on our behalf for our credit payments. View their privacy policy here.
Changes to this Privacy Policy
We reserve the right to change this Privacy Policy at any time without notice to you so please check back regularly to obtain the latest copy of this Privacy Standard. We last revised this Privacy Standard on 8th August 2022.
This Privacy Standard does not override any applicable national data privacy laws and regulations in countries where the company operates.
Contact
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to [email protected]
