This privacy policy sets out how The Bold Type Training & Consultancy Ltd (trading as the Out of School Alliance ('OOSA')) uses and protects any information collected when you browse its website, make a purchase, join us a member, or contact us.
OOSA is committed to ensuring that your privacy is protected. Any information by which you can be identified when using this website or any of our services will only be used in accordance with this privacy policy.
OOSA may change this policy by updating this page. You should check this page regularly to ensure that you are happy with any changes, and each time before you submit your personal information.
The Bold Type Training & Consultancy Ltd is the controller and is responsible for your personal data (referred to as OOSA, we us or our in this privacy policy). We have appointed a data protection officer, who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, please contact the DPO using the details set out below.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
What information do we collect?
You may browse the Out of School Alliance website without telling us who you are or revealing any personal data. The only information we gather during general browsing is from standard server logs. These include your IP address, domain name, browser type, operating system, and information such as the web site that referred you to us, the files you downloaded, the pages you visit, and the dates/times of those visits. This information is not used to develop a personal profile of you and is only recorded for the purpose of statistical analysis and to monitor website security. The log files are regularly purged. This website is not intended for children and we do not knowingly collect data relating to children.
You may however choose to provide us with your personal data, for example, if you register for a newsletter, subscribe to our member services, order a product from our shop, complete a survey or request information. In circumstances such as these we will collect personal data from you to help process this request. You may be asked for:
- name
- occupational details
- contact information including email address
- demographic information such as postcode, preferences and interests
- other information relevant to customer surveys and/or offers
- payment details (such as debit or credit card details) if purchasing a product
- marketing and communications data including your preferences for receiving marketing from us and third parties, and your communication preferences
- usage data, including how you use our website, products and services
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
What do we use personal data for?
OOSA will use personal data collected through its website, through order forms, or through email or telephone conversations with you, to answer enquiries and / or provide materials / services as requested.
If you opt in to receive our newsletter and other occasional mailings, we will send the newsletter to you every month. (You can unsubscribe at any time.) Our occasional mailings will relate to new products, special offers or other information which is immediately relevant to our membership.
We will never sell your data to a third party.
Lawful basis for processing your personal data
Under GDPR, our lawful basis for processing your personal data when you make a purchase from us or join us as a member or make an enquiry, is performance of a contract with you.
Our lawful basis for processing any personal data that we collect as a result of a survey or competition is that it is necessary for our legitimate interests as a business (eg to survey how our customers or members use our services or to develop new products or services).
Our lawful basis for using log file and tracking data collected from our website, including via cookies, is that this is necessary for our legitimate interests as a business (ie to help keep our website up to date and secure, to improve the visitor experience on our website, and to develop our business and marketing strategy).
How long do we keep your personal data for?
We will keep your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including for the purposes for satisfying any legal, accounting or reporting requirements which may require an extended retention period.
This means that we keep your membership account details for as long as you are member of the Out of School Alliance and for up to six years afterwards. We then keep a simplified record of the dates of your membership with us on an ongoing basis.
Who do we share your personal data with?
We will only disclose personal data to government bodies and law enforcement agencies as required by law, successors in title to our business and suppliers whom we engage to process data on our behalf.
We use RomanCart to manage our online ordering system, and Stripe to process online card purchases; both of these organisations are GDPR compliant. Our website and mail servers are hosted by MediaTemple, and our mailshots are managed by MailerLite, both of which are located in the USA and are compliant with the equivalent US regulation known as the EU-US Privacy Shield Framework.
Where we have a partnership arrangement with another organisation to offer special deals to our members, these organisations sometimes need to verify that someone claiming a discount or special deal is a current OOSA member. In this situation we will share your name and/or email address with the partner organisation, solely for the purposes of verifying your membership status. We will always ensure that the partner organisation is GDPR compliant before sharing your data in this fashion.
Your rights to your personal data under GDPR
Subject Access Requests: You have the right to request a copy of the personal data that we hold about you; this is known as a Subject Access Request or SAR. Please send your SAR, or any of the other requests listed below, in writing to:
The Data Protection Officer
The Bold Type Training & Consultancy Ltd
16 Ffordd Morgan
Llay
Wrexham LL12 0RR
Or via email to info@oosa.co.uk.
We will respond within one month of receiving your request.
Right to rectification: If you believe that the data we hold about you is incorrect you can request that we correct it.
Right to erasure: You have the right to request that your personal data be erased. Note that in certain circumstances we will not be able to erase all of your data immediately because we need to retain certain types of data for minimum periods to satisfy legal requirements. Note also that we cannot maintain your membership of the Out of School Alliance without holding certain personal data about you so deleting all your personal data may result in the termination of your membership.
Right to restriction: You can ask us to restrict our use of your personal data if you believe that it is not accurate, or has been used unlawfully, or is no longer relevant, but you don’t want us to delete it.
Right to object: You have the right to object to us using your personal data for our legitimate interests.
Right to data portability: You have the right to ask us to provide the data that we hold about you in a commonly used format, eg as an Excel spreadsheet.
Complaints
If you have a complaint about how we have kept your information secure, or how we have responded to a request to access, update, restrict or erase your data, you can refer us to the Information Commissioner’s Office (ICO).
Security
We make all reasonable efforts to maintain security of your personal data. All of our computers are password protected and only accessible to authorised staff. Any paper records are only accessible to authorised staff.
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
How we use cookies
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
On our website we use cookies to recognise members who have previously logged in and to ensure that restricted member content is delivered correctly.
We use traffic log cookies to identify which pages are being visited. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the web site.
Except for essential cookies, all cookies will expire after 100 days.