Effective Date: 24th May 2018
‘C4K Education’: C4K Education Ltd, a company registered in England and Wales number 09385154.
Registered address: 28 One Lusty Glaze, Lusty Glaze Road, Newquay, England TR7 3FH.
The purpose of this statement is to set out how we collect and use your personal information whether supplied to us at an event, online, by email, telephone or on an application form.
It is important that you read this Privacy Notice together with any other Privacy Notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.
Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed.
C4K Education is the controller and responsible for your personal data (referred to as “C4K Education”, “we”, “us” or “our” in this Privacy Notice).
Service is satsbootcamp.co.uk, SATs Boot Camp and all other education resources operated by C4K Education Ltd.
If you have any questions about this Privacy Notice, including any requests to exercise your legal rights, please email email@example.com.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
This Privacy Notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
To the extent that we are allowed to do so under relevant law, we collect, use, store and transfer different kinds of personal data about you as follows:
A. Information you give us
We don't allow children to set up their own Student logins directly. C4K Education’s Student accounts must be created by a Teacher User or a Parent User (this includes guardians). Teacher’s are only able to add the first name and 2 letters from a surname, to keep children’s names anonymous to us.
B. Information we collect automatically
When you use C4K Education’s websites, we collect some information automatically. For example, we collect educational progress data as you answer questions.
If you're a Student User, this information may be accessed by Parent Users or the Teacher Users linked to your C4K Education School.
To help us improve C4K Education, we also use analytics software to collect usage information.
We only ask teacher and parent users to provide us with their child's first name and 2 letters of their surname. This is personal data as defined in the GDPR (EEA).
We do not ask student (children) users to enter any personal information.
C. Other Information we may collect
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Notice.
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product you have with us but we will notify you if this is the case at the time.
We collect several different types of information for various purposes to provide and improve our Service to you.
We use different methods to collect data from and about you including through:
We will also collect your information where you only partially complete and/or abandon any information entered into our websites and/or other online forms and may use this information to contact you to remind you to complete any outstanding information and/or for marketing purposes.
We may add to the personal information we collect from you with information we obtain from third parties that are allowed to share that information. For example, information from the Department for Education, search information providers or public sources. In each case we will do only what is allowed by relevant laws.
If you intend to give us personal information about someone else, you are responsible for ensuring that you follow any responsibilities and consent responsibilities under relevant data protections laws. As required by relevant data protection laws, you must ensure that you have their clear agreement to do so and that you explain to them how we collect, use, share and keep their personal information or tell them to read our Privacy Notice.
We collect personal data in order to deliver our products. Most commonly we will use your personal data in the following circumstances:
Purposes for which we will use your personal data
The provision of C4K Education’s services are intended to help children and parents or guardians with their child's education and development. It is in our legitimate business interests to collect and process your personal information so that we can continue to provide our services.
The data is used in the following ways:
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
We may have to share your personal data with the parties set out below for the purposes set out in section 4 above.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We may share non-personally identifiable information about the use of our websites or products publicly or with third parties but this will not include information that can be used to identify you.
Under certain circumstances, C4K Education may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
C4K Education may disclose your Personal Data in the good faith belief that such action is necessary to:
We will keep your information secure by taking appropriate technical and organisational measures against its unauthorised or unlawful processing and against its accidental loss, destruction or damage. We will do our best to protect your personal information but we cannot guarantee the security of your information which is added to our websites or products or to other websites or products via an internet or similar connection. If we have given you (or you have chosen) a password to access certain areas of our websites or products, please keep this password safe; we will not share this password with anyone and we will never ask you to share your password under any circumstances.
We also expect our customers to adopt good security practices, such as ensuring that your computers are adequately protected from malware and potential misuse, and that login credentials and passwords are not shared.
If you believe your account has been compromised, please contact us at firstname.lastname@example.org.
We encrypt your information using SSL - while it's being transferred between your computer and our servers. On your web browser, you'll see a padlock beside the web address. Clicking the padlock gives you the details of our security certification. We store your data on secure servers in the Europeans Economic Area (EEA).
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
We employ policies regarding the retention of your data in order to:
When a school terminates their subscription with us we will, unless requested otherwise, retain the data for the remainder of the academic year and the following academic year in order that any subsequent re-subscription will allow the customer to access their historical data. After one full academic year with no active subscription, a school’s personal data will become anonymised.
Backups of data are stored for up to 5 years, on a separate server.
We are registered with the information commissioner’s office, Registration Number: ZA404927
If you have had any dealings with us it is possible that we hold information about you as a ‘data subject’. Under certain circumstances (where the GDPR applies), by law you have the right to:
In each case, we will typically respond to you without delay and within one month of receipt. This can be extended by a further two months if the request is complex or where there are numerous requests. Please address your enquiry to “Data Officer” using the following address:
28, One Lusty Glaze
Lusty Glaze Road
Cornwall, TR7 3FH
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Pleade note: It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.
We may use service providers based outside of the EEA to help us provide our websites and products (for example, marketing service providers). This means that we may transfer your information to service providers outside the EEA for the purpose of providing our applications, advertising and services to you.
We take steps to ensure that, where your information is transferred outside of the EEA by our service providers, appropriate measures and controls are in place to protect that information in accordance with relevant data protection laws and regulations. In each case, such transfers are made in accordance with the requirements of Regulations (EU) 2016/679 (the General Data Protection Regulations or “GDPR”) and may be based on the use of the European Commission’s Standard Model Clauses for transfers of personal data outside the EEA.
By using our websites or products or by interacting with us in the ways described in this Privacy Notice, you consent to the transfer of your information outside the EEA in the circumstances set out in this Privacy Notice. If you do not want your information to be transferred outside the EEA you should not use our websites or products.
If you are an EU citizen or our use of your personal information is subject to the GDPR, you also have the right to lodge a complaint about how we handle your personal information with an EU data protection supervisory authority.
In the UK, the supervisory authority is the Information Commissioner's Office / the ICO. You can call the ICO's helpline on +44 (0)303 123 1113. See also https://ico.org.uk/global/contact-us/.