Privacy Policy

27

Privacy policy

We respect the privacy of every individual who visits the ‘This is Creative Enterprise’ website. Our Privacy Policy governs the way in which we use and disclose any personal information.

  • We do: use your personal data to help us provide a great experience for schools and young people. This includes tailoring the information we share to ensure you find it relevant, useful and timely.
  • We do: respect your privacy and work hard to ensure we meet strict regulatory requirements.
  • We don’t: sell your personal data to third parties.

We’ll always protect your personal data and, as part of this, we regularly review our privacy notice so that you can see how we use your data and what your options are. If there are any further changes to the ‘General Data Protection Regulation’ (or GDPR) or related laws, we may need to amend this statement in the future.

A few quick notes:

This privacy policy explains what data we collect as well as how and why we use your personal data. The policy applies to you if you’re a supporter of the This is Creative Enterprise C.I.C (whether that’s as a school, business supporter, volunteer, or employee) or use any of our services, visit our website, email, call or write to us. We’ll never sell your personal data. We will only share it with organisations we work with who meet our high privacy standards.

Version 2 – last updated 25.08.2018.

The ‘This is Creative Enterprise’ website is owned and operated by This is Creative Enterprise C.I.C, a social enterprise under company number 87234632. This is Creative Enterprise is the Data Controller and is responsible for your personal data.  If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us using the details set out below in section 10.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (ico.org.uk). We would appreciate the opportunity to deal with your concerns before you complain to the ICO, and you can contact our Data Protection Manager using the contact details below in section 10.

You can also contact us to inform us of any changes to the personal data we hold about you. That will help make sure that our records are accurate and up to date.

1. Our use of your Personal Data

We’ll only use your personal data on relevant lawful grounds as permitted by the EU General Data Protection Regulation and Privacy of Electronic Communication Regulation.

Personal data includes any information that identifies you personally. This personal data you give us may include your name, title, address, date of birth, age, gender, employment status, demographic information, email address, telephone numbers, personal description, photographs, attitudes, opinions, usernames and passwords.

It does not include data where your identity has been removed (anonymous data). We use the personal data we collect from visitors to the website in the following ways:

  • to enable you to use any services on this website, and any other websites that we control
  • to allow us to respond to any comments through the website or feedback you may give us
  • to send you information and updates about our activities
  • to generally track the popularity of our content and marketing activities and to improve our website, our services, and our relationships with our supporters
  • to manage our relationship with you which may include letting you know about changes to this notice or asking you to take part in a survey
  • to administer and protect our organisation, our staff and this website, including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data
  • If you have posted a submission for a work experience or the opportunities listings, we will also make some of this information public. See the work experience and Opportunities listings section for more details.

We only use your personal data when the law allows us to. We will use your personal data in the following ways:

  • When we provide services;
  • When it is necessary for our legitimate interests (and they do not override your interests);
  • When we need to comply with a legal or regulatory obligation.

We will also ask for your consent to use your personal data to send you updates about our work, and the activities of others that are connected or associated or similar to our work. We operate an ‘opt-in’ policy so that you will only receive information from us if you have asked to receive it. You can withdraw your consent at any time by contacting us or unsubscribing from our mailing lists. If you opt out of receiving our updates, we may still use your personal data for our other legitimate interests.

We will only use your personal data for the purposes for which we collect it unless we reasonably consider that we need to use it for another reason compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will let you know and explain the basis which allows us to do so. We may process your personal data without your knowledge or consent, in accordance with these rules, where required or permitted by law.

1.2 Volunteers or Work Experience

If you’re a volunteer, we may collect extra information about you (such as references, criminal records checks, details of emergency contacts or medical conditions). We will keep this information for legal or contractual reasons, to protect us (including in the event of an insurance or legal claim), and for safeguarding purposes.

We don’t want to exclude under-18s from exciting opportunities to support our work through creative project opportunities such as work experience or by volunteering. We may, therefore, need to collect and store their personal information as set out in the jobs and opportunities sections of this document. Children should always ask a parent or guardian for permission before sending personal information to anyone online.

2. Disclosures
We will only disclose personal data to:

  • suppliers we engage to process data on our behalf
  • law enforcement agencies

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

3. Links to other websites
We signpost information and resources that we think will be useful to our visitors. This website contains links to other websites owned and operated by third parties. Clicking on those links may allow other people to collect or share data about you. We do not control those other websites, and we are not responsible for their privacy statements. We suggest you read the privacy notice of every website you visit.

4. Cookies
When you view our website, we may store information on your device in the form of a ‘cookie’ (this is essentially a small text file).

Cookies allow us to tailor the website to your interests and preferences. For example, a cookie might contain information about the web pages you have visited on the website, which could allow us to customise your next visit. Cookies do not allow us access to the rest of your computer and we do not use them to collect personal data about you.

Most internet browsers enable you to delete cookies or to receive a warning before a cookie is stored on your hard drive. Please refer to your browser instructions or help screen to learn more about how to do this. However, should you decide to disable any cookies we place on your computer you may not be able to use certain services or facilities on this website.

5. Marketing communications
If you agree to receive marketing information from us you can always change your mind at a later date. For more on withdrawing your consent, please see the information in section 9 under Your data protection rights. We’ll never share your information with companies outside This is Creative Enterprise CIC who want to use it for their marketing.

5.1 Marketing to young people

We won’t send marketing emails and letters or make marketing calls to people under 13. For TICE programmes needing young people’s engagement through our website or emails, a consent form is sent to all parents/guardians to sign and confirm any digital communication.  To stop receiving an email from a This is Creative Enterprise through a programme or a marketing list, please click on the unsubscribe link in the relevant email received from us or you can manage your contact preferences by contacting us using the details in Section 10.

5.2 Research

We carry out research with our supporters, young people, staff and volunteers to get feedback on their experience with us. We use this feedback to improve the programmes we offer and ensure we know what you find relevant and interesting.

If you choose to take part in research, we’ll tell you when you start what data we will collect, why and how we’ll use it. All the research we conduct is optional and you can choose not to take part. For some of our research, we may ask you to provide sensitive personal data (for example, ethnicity). You don’t have to provide this data and we also provide a ‘prefer not to say’ option. We only use it at an aggregate rather than individual level (for example, for reporting on equal opportunities).

We may give some of your personal data (for example, contact information) to a research agency so that they can carry out research on our behalf.

6. Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees and other third parties who have a need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and the ICO of a breach where we are required to do so.

7. Data retention and your right to see your Personal Data
We will only keep your personal data for as long as necessary to fulfil the purposes we collected it for, taking into account the amount, nature and sensitivity of the data. In some situations, you can ask for access to your personal data, correct your data, delete your data, or object to our use of your data. If you wish to exercise any of those rights, please contact us.

You will not have to pay a fee to access your personal data. We may refuse to comply with an access request if it is clearly unfounded, repetitive, or excessive. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We will try to respond to all legitimate requests within one month. Sometimes it may take us longer if your request is complex or you have made several requests. In this case, we will notify you and keep you updated.

8. Work Experience and Opportunities listings
We accept submissions for development opportunities relevant to creative, design and digital mentorship careers and programmes. These are submitted by users of the website, via an online form.

The information provided on this online form will be held on our servers and published on the website. We also promote these listings via other channels, such as our email newsletter and social media. We may also syndicate these listings to partner websites if the content is deemed suitable.

These listings may include personal data, such as an address or contact email, to enable visitors to respond to them. Once a listing is live, you can amend or remove these details if required by contacting us here.

Once submitted, a listing will be reviewed by a website administrator and published. However we are not responsible for moderating these listings, and if you submit a listing, you are responsible for ensuring it does not contain any misleading, offensive or illegal content. We reserve the right to reject or remove listings that we consider unsuitable and our decision is final.

9. Comments on the website
We do not allow comments on our website.

10. Contact Details
The organisation’s Data Privacy Manager can be contacted at hello@thisiscreativeenterprise.com

10.1 Withdrawal of consent
Where you have given consent for the This is Creative Enterprise to use your personal data, you have the right to withdraw that consent at any time. You also have the right to ask This is Creative Enterprise to stop using your personal data for direct marketing purposes. To stop receiving an email from a This is Creative Enterprise marketing list, please click on the unsubscribe link in the relevant email received from us or you can manage your marketing contact preferences by contacting us using the details above.

May 2018