What personal data is being collected?
Personal data means any information that can be used to identify directly or indirectly a specific individual.
We ask for personal information so that we can fulfill your request and return your message. Your information, including your personal data, consists of the details provided in the application form, together with any other information that is furnished to us in connection with this account. This information is retained and used in accordance with existing laws, rules, regulations, and other policies. Iron Mill College does not collect personal information from you unless you provide it to us. You are not required to provide Iron Mill College the personal data that we request, but if you choose not to do so, we may not be able to provide you with our products or services, or with a high quality of service or respond to any queries you may have.
We may collect personal data from a variety of sources. This includes:
Why Do We Retain Personal Data?
What purpose do we use your data for and how we process it?
When you supply information about yourself for a specific purpose, we use the information for only that purpose (such as to provide the service or information you have requested). We collect, process and disclose your personal data only for specific and limited purposes. For example, to process your booking, to process your payments, to assess and handle any enquires or complaints, to develop and improve our services, communication methods and the functionality of our website, to provide personalised communications and targeted advertising as well as course/workshop recommendations to you. We do not share this information with outside parties except to the extent necessary to complete that order.
When you visit our website or make a payment online or offline, you may provide us with personal information (such as name, address, email address, telephone numbers, credit or debit card for bookings) that you knowingly choose to disclose, which is collected on an individual basis for various purposes. Credit or debit card information given for any transaction is only retained long enough for that specific transaction to process. We do not retain credit or debit information beyond that single transaction.
These purposes also include registering to receive email newsletters, or other materials, requesting further information from us about courses, workshops or conferences, making requests, submitting a booking on our website, or simply asking a question. We receive and store any information you enter on our website or give us in any other way, whether it is online or offline. You can register with our website if you would like to receive updates on our courses and services. Information you submit on our website or over the phone will not be used for direct marketing unless you ‘opt-in’ specifically.
We collect, process and disclose your personal data for the following purposes:
Your Information may be processed, recorded and retained by us in electronic form. Iron Mill College may communicate with you electronically in relation to your account(s), and that it may rely on such electronic communications, records, originals and documents in any dealing with you. We use return email addresses to answer the email we receive, to receipt any transactions or if follow-up for that specific function is required. Such addresses are carefully guarded by Iron Mill College for their specific purpose and are not shared with outside parties. The College does not sell, rent, give-away or share its email addresses or other personal contact information with outside sources.
We may make such enquiries about you as we may from time to time consider appropriate and may provide information provided by you in the application for Client Work and information in relation to your conduct. DBS information will be kept for a period of at least one year after your graduation.
In some cases, we rely on legitimate interest for processing your personal data. A legitimate interest could exist for example, when you sign up for a course and we use the personal data collected to conduct data analytics to improve our services. This ground will only be used where it is necessary to achieve a legitimate interest, for example to assist in the performance of a contract, or to optimise a service, and does not outweigh your rights as an individual. This legal basis will only be relied upon where there is no less intrusive way to process your personal data. We can assure you that if legitimate interest is used as a ground for processing your personal data, we will keep a record of this and you have the right to ask for this information.
We also process your personal data when we have a legal obligation (e.g., tax or social security obligations) to perform such processing. For example, a court order or a subpoena may require us to process personal data for a particular purpose, or we may be compelled to process personal data to report suspicious transactions under anti-money laundering rules.
Do we share personal data?
With our partners, legal and other advisers, service providers and contractors: We share Personal Data with third-party service providers that perform validation to our courses and accreditation to our students, at our direction and on our behalf. These third-party service providers may, for example, assist in processing transactions and validation of your degree and accreditation for recognised standards of professional competence.
In the context of a sale of the whole or part of our business and/or account;
Where we are required by any regulatory body, law enforcement agency, court or other legal process;
Where necessary to verify the authenticity of documentation provided to us.
What Are Your Rights?
We are accountable to our students who must be able to manage their own information in accordance with their preferences. Please contact us via our email address, phone number or address provided below if your personal details change at all so that we keep an accurate record of our students.
Under the Data Protection Act, you have the right, subject to certain exemptions, to receive a copy of all “Personal Data” and to have any inaccuracies in your Personal Data corrected. To find out what information we hold in relation to you, to have your personal information updated, amended or removed, or to request a copy of such information, please email us at firstname.lastname@example.org, or write to Iron Mill College, Morwenstow, 7 Barnfield Crescent, Exeter EX1 1QT. Any such requests may be written and subject to the fees prescribed under the Data Protection Act.
All visitors to the website have the option to unsubscribe from communications from us. If you do not wish to continue to receive correspondence from us you can opt-out by clicking on the "unsubscribe" link in any emails which we might send you or by contacting us via our email address, phone number or address provided below.
How Do We Protect Your Personal Data?
Personally identifiable information is stored on our server and is not publicly accessible. Further, personally identifiable information is only accessed by Iron Mill College personnel on a “need to know” basis. To prevent unauthorised access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate procedures to safeguard and secure the information we collect online.
Your personal information is protected by a secure system both online and offline. Your information will be stored on a secure, computerised database which seeks to prevent loss, misuse, unauthorised access or disclosure, alteration or destruction of this information. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Statement.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to any of our websites; any transmission is at your own risk. We will not be liable for any loss or damage caused by a distributed denial-of-service ("DDoS") attack, viruses, malware or other technologically harmful material that may infect your computer equipment, computer programs, data or other proprietary material due to your use of this website or to your downloading of any material posted on it, or on any website linked to it. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. When possible, encryption is used, both in transit and storage. Access controls within the organisation limit who may access information.
Contact Details of the Data Officer
Iron Mill College has a Data Officer contact point at email@example.com - please entitle your email “FAO Data Officer.
A cookie is a small data file implanted by our website on your device (e.g. your phone or your computer) which collects information (including your personal information) about you. For example, a cookie could allow the website to recognize your browser, while another could store your preferences and other information to enable you to navigate the website effectively.
Cookies can also help to ensure that adverts you see online are more relevant to you and your interests.
Changes to this Privacy Statement
This Privacy Statement may change without prior notification. We therefore encourage users to familiarise themselves with the contents of this Privacy Statement on a regular basis.
Further information in respect of your rights is available at the website of the Information Commissioner’s Office, https://ico.org.uk.
Morwenstow, 7 Barnfield Crescent,
Exeter, Devon United Kingdom, EX1 1QT
01392 - 219200