Privacy policy

When you subscribe to newsletters or emails from us, we require:

• your name
• your email address
• in some cases, information about your organisation and role

We will collect this information as part of your subscription to our mailing lists.

A subscription to our mailing lists means that you will automatically receive email updates about Childnet related activities. We will not email you unnecessarily or for a purpose that you have not agreed to.

Our use and storage of personal information for email marketing and communications is based on your consent for us to do so. Therefore you will only receive emails and other information that you have consented to receive. We make sure that our consent process is double-opt in, which means that your consent is validated before we send any communications to you.

You may withdraw your consent at any time by using the ‘unsubscribe’ link on any of our newsletters.

If you unsubscribe from our emails or withdraw your consent for us to use your personal information in this way, we will retain your information within our systems to prevent emails from being sent to you by us. We will retain this information only for as long as we require it for these purposes.

We use external platforms to manage our email marketing and communications, and we use third party organisations to manage specific marketing campaigns. Such platforms may be located outside the EEA, however any such platforms shall be compliant with the EU-U.S. Privacy Shield Framework. The two platforms we use to process your information are Campaign Monitor and Salesforce. We use Bee Digital to manage specific marketing campaigns.

Our emails may, from time to time, contain links to and from the websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Accessing our website

For security purposes we do collect some personal information about you, for example your IP address. This is so that we can block someone if they try and get into our site.

Browsing our website

Whilst using our website we collect anonymous information about your browsing session to help us improve our website. We are committed to ensuring that this information is collected, stored and used in an ethical way which observes UK data protection legislation.

We use a tool called Google Analytics to collect this data. All of the data is stored securely on Google’s servers. In order to track your browsing across sessions, Google analytics will place a ‘cookie’ on your machine (a small text file that websites use to track and remember information across several browsing sessions). You can tell your web browser not to accept cookies if you don’t your data to be collected in this way (refer to your web browser’s help file for more information).

For further details on Google Analytics, and the Google Analytics privacy policy, please visit the Google Analytics website.

You can read our cookie policy here.

The kind of data we collect includes the pages that you visit on the Childnet website, the number of times that you visit them, your operating system, your screen resolution, the version of your web browser and the country you’re visiting from.

This data helps us:

• To plan for future site developments
• To identify and better promote our most popular content, and likewise, our less popular content
• To gauge the success of our campaigns and resources
• To identify periods of heavy site usage, to help forecast when is best to perform maintenance work on our server.

Giving us your information via our website

Sometimes we may ask you to provide us your personal information on our website if you are subscribing to programme or service through our website, completing surveys or evaluation via our website, posting material or requesting further services. When you use these elements of our website, we may require:

• your name
• your email address
• in some cases, your postal address
• in some cases, information about your organisation and role

We will use this information:

• to carry out our obligations arising from any contracts entered into between you and us
• to notify you of changes to our services, and to provide you with support in using our services. If you contact us for support in using our website, and we may keep records of such contact.
• to provide you with information or services that you may have requested

The use and storage of any personal information within the website will be based on legitimate interests. The legitimate interests we are pursuing are the operation of our website and provision of our services.

We will retain this information only for as long as we require it for these purposes.

We will store information you provide to us on our secure servers or on secure servers provided by our service providers. All data will be stored within the EEA or with service providers that are compliant with the EU-U.S. Privacy Shield Framework.

If you have bought an item at our shop

If you are buying an item in our shop you have the option to set up an account so that you can have your shopping history easily accessible. We will keep this information for as long as you keep your account open.

You also have the option not to set up an account. If you do not we will still require the following details in order to process your order.

• Billing email Address
• Billing first Name
• Billing last Name
• Billing address
• Billing Phone number
• Shipping email Address
• Shipping first Name
• Shipping last Name
• Shipping address
• Shipping Phone number
• School / organisation name

This information will only be kept up until after the end of our financial year (April) that the transaction takes place in, after which we will remove all personal information.

Security of our website

This website was designed, and is maintained by Contra, an independent digital agency who take the security of any personal data processed on their websites seriously. We are committed to information security and we have systems in place to ensure the confidentiality, integrity and security of any personal data we process.

Linking to other websites

Our website may, from time to time, contain links to and from the websites of third parties. You can also share articles or features of our website through other sites such as Facebook or Twitter. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

When you book a Childnet Education visit or register for a Childnet event, we require:

• your name
• your email address
• in some cases, your postal address
• in some cases, information about your organisation and role
• in some cases, payment information

We will collect this information as part of your confirmation of booking a visit or event.

Our use and storage of personal information in relation to events is based on your consent for us to do so.

We use this personal information to effectively organise and administer the event. Personal information will only be shared with other organisations where it is necessary to do so for this purpose. This includes, for example, providing the names of attendees to venues we are using.

We will retain this information only for as long as we require it for these purposes.

All personal information that is collected, used or kept for the purposes of The Childnet Digital Leaders Programme is kept securely and only for the purposes of the programme and is compliant with GDPR. If your school or organisation has signed up to the Childnet Digital Leaders Programme, we will require some personal information such as:

• your name
• your contact details (including email address, telephone number)
• your gender
• how you access the Digital Leaders Platform

We require this information in order to have you on the programme. Our use and storage of personal information is based on each person’s consent.

We may use external platforms to manage the Childnet Digital Leaders Programme. Such platforms may be located outside the EEA, however any such platforms shall be compliant with the EU-U.S. Privacy Shield Framework. Our Digital Leader Programme is managed by Contra, an independent digital agency.

You can see our full Digital Leader privacy policy on the Digital Leader platform or within the Programme Pack you received once subscribed.

We may ask you to take part in research or evaluate our services, website or activities related to the work of Childnet. This means we may ask you for your personal information such as:

• Name
• Address
• Gender
• Age
• Information about your organisation and your role

We will only contact you about your responses if you have consented to being contacted. All results that we publish will be anonymised unless you consent to be identified for any particularly reason (for example you want to provide a quote in support of our work). Any consent forms or records will be retained for as long as we need it for our purposes and not used for any other purpose.

We do not provide any personal information to third parties for commercial purposes, so we will never rent or sell your personal information to other organisations.

If you have given us permission to contact you, we may pass on your details to third party companies and/or individuals to perform certain functions on our behalf (including delivering events, sending postal mail or email, academic/research projects related to our work, delivering certain aspects of our service, and processing card payments). If they require access to your personal information then we will make sure that:

• the third party agrees to use it only for the agreed function(s) and not for any other purposes
• the third party agrees to process the personal information in accordance with this Privacy Policy and as permitted by the UK’s data protection legislation

We may also share your personal information with a third party if:

• it is required or authorised to do so by law or for child protection purposes
• it is necessary to enforce or apply our terms and conditions and/or other agreements; or to protect the rights, property, or safety of UKSIC, our customers, or others
• it is required to arrange attendance at an event or similar benefit
• we have your consent to do so

Where we use or store personal information relating to you, you have the following rights:

• the right to be informed how your personal information is being collected, used or stored by us. This Privacy Policy advises you of this.
• the right to access the personal information we hold which relates to you
• the right to object to direct marketing by unsubscribing from it
• the right to object to processing carried out on the basis of legitimate interests
• the right to erasure of information we use or hold that relates to you
• the right to data portability, so you can obtain or reuse your personal data for your own purposes across different services from one IT service to another in a safe and secure way
• the right to have your data changed if its inaccurate or incomplete
• the right to have your data restricted or blocked from our processing

These rights apply to certain situations, but do not apply to others. The Information Commissioner’s Office’s (ICO) guidance on each of the rights can be found here. If you do want to exercise any of these rights then please contact us at privacy@childnet.com

Personal data breaches

We take any suggestion of a personal data breach seriously and will fully investigate it. As per the requirements of GDPR, we will alert the ICO within 72 hours if we believe a breach has occurred, and depending on the circumstances, also contact those who may be impacted.

You can learn more about the obligations of organisations regarding personal data breaches on the ICO’s website here.

Where we feel it necessary in the event of a breach, we may employ an external independent Data Protection Officer to investigate the matter on our behalf.

Please read this notice carefully and contact us if you have any queries by emailing us at: privacy@childnet.com

If you are concerned about any aspect of our processing or personal information, please contact us at privacy@childnet.com

Should we fail to resolve your concerns, you have the right to complain to the Information Commissioner’s Office.

We reserve the right to change this Privacy Notice from time to time and suggest therefore that you review it periodically. We will make sure that if we do change this policy then it will be in accordance with GDPR.

This version of the Privacy Notice was last updated on 20 May 2018.