Beech Lodge School Services Ltd (Fagus)
Privacy Policy
Although you are using a website in the name of Fagus, this is a resource of Beech Lodge School Services Ltd a company limited by guarantee registered in England and Wales (registered company no: 07863609) (“We”) who are committed to protecting your personal information and respecting your privacy. Personal information is information from which an individual’s identity can be ascertained.
Our registered office is at Sorbon, 24 -26 Aylesbury End, Beaconsfield, Buckinghamshire HP9 1LW.
This policy (together with our terms of use and any other documents referred to in it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed and shared by us. Please read the following carefully to understand our views and practices regarding your personal data.
For the purpose of the Data Protection Legislation (which includes the Data Protection Act 1998, from 28 May 2018 the EU General data Protection Regulation and will include the successor act to the 1998 Act), the data controller of your information is Beech Lodge School Services Ltd.
In accordance with the Data Protection Act, the school has notified the Information Commissioner’s Office of its processing activities. The ICO registration number is: ZA352743
Our Data Protection Officer is Sarah Johnstone – Finance and Compliance Manager, who can be contacted on Tel: 01628 879384 or email: finance@beechlodgeschool.co.uk if you have any questions or concerns or if you want to make a complaint. You can also raise any queries or concerns with the Information Commissioner via their website at www.ico.org.uk
Information we may collect from you
We may collect and process the following data about you:
- Information that you provide by filling in forms on our site www.fagus.org.uk. This includes information provided at the time of registering to use our site, subscribing to our service or requesting further services as well as details of your visits to our site and the resources that you access. Personal information collected includes your name, address, email address, telephone number and job title
- We may also ask you for information when you report a problem with our site.
- If you contact us, we may keep a record of that correspondence.
- We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
- We do not collect any special categories of data.
What do we use your data for?
We’ll only use your personal data on relevant lawful grounds as permitted by the EU General Data Protection Regulation and Privacy of Electronic Communication Regulation.
We will use your personal data for the purpose or purposes outlined at the time you gave it to us. This may have been during the course of a sale or becoming a customer.
As a customer of Fagus you have subscribed to use the Fagus online checklist tool. We process data in order to manage that service and issue a licence to you to use Fagus materials.
Your personal information may also be held on our marketing database unless you have opted out of this or unless we require your consent to send you marketing and you have not given us that consent.
We will contact you with information such as events and similar marketing, products and customer updates.
What allows us to process your data?
We must have a lawful basis for processing your data. The basis on which we are using your data under the data protection legislation for this data collection and processing is:
6(1)(a) – Consent of the data subject
Most of the personal information we collect is related to a business relationship and we do not process any special category data. We do not need consent for most of our processing therefore but if we do need consent for anything we will obtain that from you and make sure you can change your mind if you wish to do so.
6 (1)(b) - processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
If you have entered into a contract with us for any of our services then we may rely on this basis for any processing which it is necessary for us to do in connection with fulfilling that contract and sending you relevant customer and product information.
6(1)(f ) – Necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject.
As a data subject on our contact and marketing database we will use the legal basis of legitimate interest to process your personal information. We will collect and process data about you and your usage of the website to carry out evaluation, issue you with information and resources that are useful to you, and to identify areas for improvements. We do not believe that this processing will have any adverse effect on your rights as a data subject. You can ask for a copy of our legitimate interest assessment from our Data Protection Officer.
What are your rights?
You have a number of rights in respect of your personal data. These are:
- The right to be informed
- The right of access
- The right to rectification
- The right to erase
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling.
The Information Commissioner’s website has information and guidance on how to exercise your rights and our responsibilities to you. For more information click here: https://ico.org.uk/for-the-public/
Subject access requests
You have the right to request a copy of the information that we hold about you. This is called a Subject Access Request and we have to reply to you within a specific timescale set out in the legislation. If you would like a copy of some or all of your personal information, please email us at finance@beechlodgeschool.co.uk or write to us at the address at the top of this page.
We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.
Subject Access Requests may be submitted in paper or electronic format and may be responded to in kind.
Cookies
We may obtain information about your general internet usage by creating and using a “cookie”. A “cookie” is a small text file that is placed on a website user’s device/computer hard drive by a website. This helps us improve our site and to deliver a better and more personalised service. They enable us:
- To estimate our audience size and usage pattern;
- To store information about your preferences, and so allow us to customise our site according to your individual interests;
- To speed up your searches;
- To recognise you when you return to our site.
- You may refuse to accept cookies by activating the setting on your browser that allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of our site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our site.
- Further information about cookies is available at aboutcookies.org.
The cookies we use are Google analytics and other third-party analytics products.
Where we store your personal data
The data that we collect from you will not be transferred to, or stored at, a destination outside the European Economic Area (“EEA”).
We use servers located in the UK and do not use cloud storage.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. For example we use SSL encryption technology, anti-malware scanners and Web Application Firewall security which detects and blocks anything which looks like it may be malicious. We take daily back- ups of the server and store them on a physically different server for data recovery safety.
Disclosing and sharing information
We do not sell or share your personal information for other organisations to use.
We may share your information with partners to allow them to perform services on our behalf. Where applicable we have contracts in place with our suppliers, which require them to comply with the General Data Protection Regulation and The Privacy and Electronic Communications Regulations (or PECR), and to have robust systems and processes to protect the security of your information.
How long do we keep your data?
We will retain your data only as required or permitted under data protection law and while it has a legitimate purpose for doing so. Data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
We have a company retention policy which lays down timescales for the retention of information, which depends on the information in question, what it is being used for and sometimes, statutory legal requirements.
Links on our website
We make no representations about any other websites. When you access any other website through a link on this website you understand that it is independent from us and that we have no control over that website or the way your personal information is collected through those websites. Those websites may have their own privacy policies and we encourage you to look at those policies or contact the website operators directly to understand how your personal information is used.
Updating this policy
We keep our privacy policy under regular review. This policy was last updated in May 2018.