DATA PROTECTION AND PRIVACY POLICY
Fiona Maida Limited, trading as Student Navigator (“we”, “our” or “Student Navigator”) is committed to complying with the requirements of the General Data Protection Regulation (GDPR) and the general principles of fairness, transparency, accessibility, individuals’ rights and freedoms and good practice.
The aim of this policy is to explain in clear and plain language to our service users (“you”) what personal data we collect about our students and the parents/guardians of our students, how we collect it, why we collect it and how we handle it, including information collected about visitors to www.studentnavigator.co.uk (“our website”).
The Data Protection Officer will review this policy annually, to ensure collected data and data collection methods continue to be adequate, relevant and not excessive.
Data Protection Officer Details:
Name: Fiona Maida (Director)
Address: Fiona Maida Limited, Auker Rhodes Professional Services LLP, Aire Valley Business
Centre, Lawkholme Lane, Keighley, BD1 3BB, United Kingdom
Phone Number: E-mail:
What Personal Data Does Student Navigator Collect?
Under the GDPR, personal data can only be collected for specified, explicit and legitimate purposes and with your consent. You are able to remove your consent at any time. Data obtained for specified purposes must not be used for a purpose that differs from those formally notified to the Information Commissioner as part of Student Navigator’s GDPR registration.
We only collect the minimum personal data that is strictly necessary for legitimate organisational purposes. The following information will be collected:
• Parent/Guardian’s name, postal and email address, contact phone numbers.
• Emergency contact’s names and phone numbers.
• Child/ren’s name, age, date of birth and school and details of the child’s academic performance, if required.
• Information about any medical conditions, allergies or Special Educational Needs of child/ren.
• A record of attendance of child/ren.
You should notify us of any changes in circumstances to ensure personal records are kept up to date.
You have the right to request access, rectification, erasure or to object to collection of personal data. You also have the right to remove your consent for the collection of personal data. Please put your request in writing to the Data Protection Officer.
How Does Student Navigator Collect Personal Data?
• Personal information is collected using a Data Collection Sheet, which is supplied to and completed by the parent/guardian/child (if over the age of 18) and returned to us.
• Further information will be gathered at individual sessions and recorded on a Student Record Sheet by the mentor conducting the session with your child/ren.
• Our website uses cookies to record information to distinguish you from other users of our website. Further information on cookies is detailed below.
Why Does Student Navigator Collect Personal Data?
• Data Collection Sheet – This information is required to enable us to correspond, invoice and contact you, if required and to ensure the safety and wellbeing of your child/ren during a mentoring session.
• Student Record Sheet – This information is helpful to document action points, ideas and other details to ensure sessions are run in a constructive and helpful way for both the mentor and the child/ren.
• Cookies – This information may be used to monitor traffic to our website to enable to make ongoing improvements to our website and services.
How Does Student Navigator Handle Personal Data?
• The Data Collection Sheet and Student Record Sheet is retained in paper form by the Mentor running your child/ren’s session. These will be stored in a locked filing cabinet and only used by the Mentor during the session.
• The information from the data collection sheet will also be recorded in a confidential student database.
• Any letters and other documents we produce, that contain personal data, will be password protected.
• Once your contract with us ends, we will retain your personal data in our confidential student database for a minimum of 2 years and a maximum of 3 years following cancellation. Once the retention date is passed, personal data will be securely destroyed.
• Accident/Incident reports will be kept indefinitely.
• Appropriate measures will be taken to keep all personal data secure, to prevent unauthorised access and accidental loss or destruction.
• We will not share your data with any external companies. If we are obliged to disclose personal data by law, or if the disclosure is necessary for purposes of national security, taxation and criminal investigation or to safeguard your child, we will do so. In some circumstances, you may not be notified first.
Cookies
A cookie is a small text file that is stored on your device. Our website uses cookies to distinguish you from other users of our website. Cookies provide us with information about how this website is used so we can keep it as up to date, relevant and as error-free as possible.
We may monitor traffic to our site and collect information, including:
• The IP address of your computer.
• What sections or pages of the website you look at.
• The referring website from which you have got to our website from.
Most browsers will allow you to turn off cookies but this may restrict your use of our website.
Further information about the types of cookies used on this website can be provided upon request.
Your Data Protection Rights
Under data protection law, you have rights including:
• Your right of access – You have the right to ask us for copies of your personal information.
• Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
• Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
• Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
• You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
• Please contact our Data Protection Officer, at the address above, if you wish to make a request.
How to Make a Complaint
Please address complaints to the Data Protection Officer, at the address above. If you are unhappy with how we have used your data or dealt with your complaint, you can also complain to the Information Commissioner’s Office (ICO), at the address below:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline number: 0303 123 1113