Last Updated: Monday 21st May 2018
This Privacy Notice (“Notice”) governs the manner in which Andrell Education Ltd (“Andrell”, “We”, “Us”, or “Our”) collects, uses, maintains and discloses information collected from users (“User”, “You”) of the Andrell websites (“Sites”) and products and services (“Services”).
What Information Do We Collect
- Your name;
- Your school address, school email address and school phone number;
- Preferences, including when consent was given;
- In relation to Sites, including but not limited to: username, password, school pin number, usage of the Sites including links clicked, resources accessed, data entered as part of usage of the Sites, browser or device used for access, timestamps of activities, etc.; and
- In relation to purchasing Services, subscriptions to Sites, or products: payment details, delivery and invoice address, contact name and contact details, a record of the Services purchased.
This information will only be collected with the appropriate permission and legal basis as noted in the Legal Basis section.
How We Use Collected Information
Andrell collects and uses Users’ personal information to provide and promote Our Sites and Services, to meet our legal obligations, to maintain appropriate business records, to ensure the security of our Sites and Services and to monitor and improve our Sites and Services.
There are Services that We provide which require Your personal information. You are within Your rights to refuse but We are then unable to provide You with the Service.
We will only retain information for as long as reasonably necessary for the stated purposes of collection or in order to meet Our legal obligations. We will delete Your data if a request for removal is received and accepted.
You may request further information on the categories of information that We collect, how it is processed, and the third party partners that We use.
We will use Your information as follows:
To fulfil a contract at Your request which can include but is not limited to: completing a Services or Sites order, providing technical support for a purchased Site or Service, providing You with updates regarding Services or Sites that You are currently using, maintaining our business records, and meeting any legal obligations.
To pursue Our legitimate interests which can include but is not limited to: maintaining Our business records, meeting any legal obligations, keeping records of data related requests, providing access to Sites and Services as requested by You, analysing the usage of Our Sites and Services in order to improve them, analysing the effectiveness of Our marketing, sending You information about Our Sites and Services, and keeping Our Sites and Services secure.
Andrell as the Data Controller
We act as data controller for information that We collect from You and then process in respect of the legal basis set out for collection. This information is necessary to complete the stated task. This Notice and Our Legal Notice sets out the terms of Our actions as data controller.
We may also use third party suppliers where their services help Us to provide services to You. In this case, they are data processors on Our behalf. The third parties have their own contracts in place with Us to ensure compliance.
You may request Our data controller and processor list by email from firstname.lastname@example.org
Andrell as the Data Processor
We act as data processor for information added to Our Sites and Services. Users have agreed to this Notice and the Legal Notice before accessing the Sites and Services and agree that We must hold and process the information in order to offer the agreed service.
We do not view this information without express permission from You.
Your Data Rights
Where Your consent is required, We are fulfilling a contract or We are pursuing Our legitimate interests, We will ask for consent at the point the data is collected and make this Notice and the Legal Notice available.
You have the right to withdraw your consent at any time. You have the right to request the data We hold on You, ask how the data is used, request a digital copy of the data, request amendments to the data, and request the removal of the data. Where We hold data for legitimate purposes or to fulfil a contract, You may request that the data is no longer processed but We reserve the right to keep the data for record keeping purposes and to ensure ongoing compliance of Your request.
These requests can be emailed to email@example.com
You have the right to lodge a complaint regarding Our processing of data to the appropriate authority.
We do not sell Your information to third parties.
How We Protect Your Information
We adopt appropriate privacy by design practices around data collection, storage and processing and security measures to protect against unauthorised access, alteration, disclosure or destruction of Your personal information stored on our Sites and internal office servers.
This includes but is not limited to: SSL certificates, strong passwords, encryption of User passwords, controlled, IP address restricted access to admin areas, hardware firewalls, access logs, server monitoring.
In the event of a data breach which includes personal information, We will make the appropriate authority aware within 72 hours of discovery. In the event that the breach poses a material risk to You, We will inform You within 30 days.
Web Browser Cookies
The personal information that We hold is stored within the EU. Our third party service providers have relevant documentation and agreements stating that they will not move the data outside of the EU. Our Sites are hosted with a UK company that hosts data within the UK only. Our internal office servers are based in the UK and can only be accessed from within the office or through a secure virtual private network with the appropriate permissions.
Sharing Your Personal Information
We use Your personal information within Andrell in order to carry out required processing in line with the stated purpose and legal basis for collection.
We use third party service providers that support Us in providing You with requested Sites and Services. These providers do not have direct access to Your data.
We do not sell, trade, or rent personal information to others. We may share, but never sell, generic aggregated, demographic information not linked to any personal information regarding visitors and users with our business partners, trusted affiliates and advertisers for the purposes outlined above.
We will share Your information with government or legal officials if it is required by law.
Third Party Websites
Users may find content on our Sites that links to the sites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these sites and are not responsible for the practices employed by websites linked to or from Our Sites. In addition, these sites or services, including their content and links, may be constantly changing. These sites and services may have their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to Our Sites, is subject to that website’s own terms and policies.
Changes to this Privacy Notice
Andrell may update this Notice at any time. When We do, We will revise the updated date. We encourage Users to frequently check for any changes to stay informed about how We are helping to protect the personal information We collect. You acknowledge and agree that it is Your responsibility to review this Notice periodically and become aware of modifications.
Your Acceptance of These Terms
We will always gain permission to use personal data when the data is collected as set out in this Notice. This will be before You first use the Sites or Services. By using these Sites and Services, You signify Your continuing acceptance of this Notice and the Legal Notice. If You do not agree to this Notice, please do not use Our Sites and Services. Your continued use of the Sites and Services following the posting of changes to this Notice will be deemed Your acceptance of those changes.
If You have any questions about this Privacy Notice, the practices of the Sites and Services, or Your dealings with Us, please contact Us at: firstname.lastname@example.org or call us on 01924 229380.