Privacy Policy
GDPR Privacy Notice
As a legal requirement within the EU General Data Protection Regulations (as of 25 May 2018), this document outlines the data we request, use and store to enable us to deliver services to clients.
1.Why do we need to obtain data?
We will retain personal data for our clients, so we can carry out the work and maintain contact, and for marketing purposes. This includes email addresses, business postal addresses and phone numbers.
We only collect the data we need to carry out our projects or for marketing purposes
2.How do we collect data?
We send marketing emails to schools and multi academy Trusts or any other public-sector clients contacts using email addresses that are within the public domain. We use up-to-date information. We always provide an unsubscribe facility in our marketing emails.
Unsubscribe requests are processed in a timely manner.
This information is held and processed under the ‘legitimate interest’ legal basis. We will only send marketing information to prospective clients with information about products that we feel are useful to them.
We also retain data about clients.
If our clients provide us with personal information about 3rd parties, we will ask them if they have permission for this information to be shared.
If we provide any information to our suppliers, we ask them to sign an undertaking that their information is held securely, will not be shared with anyone else, and will be deleted in a reasonable time after the project has been completed.
3.How do we store data?
PCs ,emails accounts and storage are password protected.
4.How long do we hold data for?
We will retain any information that is required for HMRC purposes for 6 years as is required by law.
We will retain project files and contact information as regular updates to literature are required on at least an annual basis. If we are no longer working with a client, they can ask for their files to be deleted and we will do so.
5.Accuracy of data
If a client feels that we are holding incorrect data about them, they can contact us, and we will amend our records.
Any enquires about data held or anything else in this notice should be directed to Debbie Smith, responsible for Data Protection at Debbie.smith@stoneworkseducation.co.uk