Privacy policy
PRIVACY NOTICE
About this Notice
The protection of personal data is of paramount importance to us and we go to great lengths to ensure that we collect and use personal data lawfully and only for specific purposes.
This Notice applies to personal data which we process about job applicants and past employees, personnel of customers, suppliers, partners and other organisations who we work with as part of our business operations, visitors to our website and users of our resources and services (each of which we refer to in this Notice as “data subject” or “you”).
In this Notice we explain the things which we think are important for you to know about the personal data we collect from you such as who we are, how we use your data, how we protect your data and who we may share your data with. We also explain the rights you have in relation to your personal data which we hold. Finally, there’s a bit about cookies – what they are and how to get rid of them if you don’t want them. If you have any questions relating to how we handle your personal data, please write or email us at the contact address set out below.
This Notice does not cover the links within our website linking to other websites. We encourage you to read the privacy statements of the other websites you visit.
About us
References in this Privacy Notice to “we” or “us” are references to LIFT for Learning.
LIFT for Learning Limited (”LIFT”) is a charitable organisation and a company limited by guarantee registered in England and Wales with company registration number 05544951 whose registered address is at Arran, Yew Tree Road, Grange-over-Sands, Cumbria, LA11 7AA.
Curious Quo Limited (”CQ”) was a company limited by shares registered in England and Wales with company registration number 09931147 whose registered address was at Greenhead Garden, Storth Road, Storth, Milnthorpe, Cumbria, LA7 7HF. CQ was a wholly-owned subsidiary of LIFT.
LIFT is registered with the Office of the Information Commissioner under registration number Z1457960.
We are a data controller in relation to your personal data because we decide what your personal data can be used for and how the personal data is processed.
If you would like to contact us in relation to this Notice or your personal data, please contact our Data Protection Officer via email at admin@digismart.net or by post to the following address:
FAO: Data Protection Officer, LIFT for Learning, Arran, Yew Tree Road, Grange-over-Sands, Cumbria, LA11 7AA.
About your personal data
The personal data we collect, the purpose(s) we use it for and the lawful basis we hold it will vary depending on the category of the person it relates to. To help explain this, we have set out these separate categories as follows:
-
Job Applicants
What personal data we collect
We may receive your personal data where you apply to us for employment, whether you apply directly through our website or indirectly through a recruitment agency.
The personal data we collect will typically include your name, home address, telephone number, email address, details relating to your past employment and education and could include ethnic origin and gender. At certain stages of the application it will be necessary for us to collect and use more personal data as we explain below. We do not collect more information than we need to use for this stated purpose and you do not have to provide the information we request however it may affect your application if you do not provide it.
If we make you a conditional offer of employment, we will ask you for information so that we can carry our pre-employment checks including proof of your identity, proof of your qualifications and a criminal records declaration. We will need to contact your references and we may ask you to complete a questionnaire about your health. If we make you a final offer, we will also ask you for your bank details and emergency contact details.
How we use your personal data
We use your personal data for our recruitment purposes only, to contact you to progress your application and to assess your suitability for the role you applied for. We may from time to time refer to your personal data to assess your suitability for employment positions which may arise in our organisation. We may also use your personal data to monitor our compliance with equality and diversity legislation.
The lawful basis for our collection and use of the personal data
Our processing of this personal data is necessary for the purposes of our legitimate interests in evaluating you as a candidate for employment within our company and for communicating with you.
How long we keep your personal data
If you are successful, we will keep your personal data for the duration of your employment plus 6 years following the end of your employment.
If you are unsuccessful, we will keep your personal data for 6 months from the date we determine that you are not successful or for a longer period if we have your consent to retain your personal data for future employment opportunities.
-
Past Employees
What personal data we collect
Where you have worked as an employee within our organisation we will have collected personal data relating to you during your employment which we will continue to hold after your employment with us has ended.
We will keep personal data relating to your employment for 6 years after your employment has ended.
How we use your personal data
We will use your personal data to comply with our legal obligations under employment and tax law and to provide employment references.
The lawful basis for our collection and use of the personal data
Our processing of this personal data is necessary for the purposes of our compliance with employment and tax laws.
Who we can disclose this personal data to
We will confirm the dates of your employment to third parties who contact us in writing in connection with an employment application you have made to them requesting employment references from us. We do not otherwise disclose your personal data to any third party.
-
Customer Personnel
What personal data we hold
LIFT may have collected your personal data if you registered on with LIFT in relation to its DigiSmart project or if you corresponded with LIFT on behalf of the school or educational establishment that you worked for prior to 2018, typically if you were a head teacher, teacher or teaching assistant where LIFT provided access to its DigiSmart project to your school prior to 2018.
LIFT no longer collect personal data relating to teachers and teaching assistants from schools.
The personal data LIFT may have collected typically included your name, your email address (which may be your school email address or your personal email address), the name and address of the school you work for, your role at the school, your choice of salutation and if you were a lead teacher in relation to the services we provide to your school, your mobile telephone number.
How we use your personal data
We will use your personal data only to correspond with you in the course of business conducted between us and the school you work for or represent. This may include notifying you about existing resources and services which we provide to your school or informing you about new resources and services which we think your school may be interested in.
The lawful basis for our collection and use of the personal data
Our processing is necessary for us to comply with a legal obligation to which we are subject, to maintain appropriate business records and to comply with lawful requests by courts and regulatory authorities and for us to comply with applicable laws and regulations. Our processing is also necessary for our legitimate interests to inform you about updates to the services which we offer.
-
Supplier Personnel
What personal data we collect
We may collect your personal data when you correspond with us on behalf of the company or organisation that you work for. Where you do not act on behalf of another company or organisation, we may collect your personal data in the course of your provision of services to us or if you apply to supply services to us.
The personal data we collect will typically include your name, where applicable the name and address of the company you work for, your business telephone number, your mobile telephone number and your email address. If you are a supplier and you provide services to us, we will also collect additional personal information about you including your bank details.
How we use your personal data
We will use your personal data to evaluate you or the organisation you represent as a potential supplier of services to us, to correspond with you in the course of business conducted between us and you or the organisation you work for or represent. This may include contacting you in connection with existing resources and services which your organisation provides to us, for billing and payment and in response to your enquiries.
The lawful basis for our collection and use of the personal data
Our processing of this personal data is necessary for the purposes of our legitimate interests in carrying out business with you or the organisation which you work for or represent and to correspond with you.
-
Personnel from prospective customers
What personal data we collect
We may collect your personal data in connection with education events, dissemination and promotion opportunities or in response to requests for information which you have made to us.
The personal data we collect will typically include your name, the name and address of the organisation you work for, your contact telephone number and your email address.
How we use your personal data
We will use your personal data only to correspond with you in connection with our provision of resources and/or services to the organisation you work for or represent.
Our processing of this personal data is necessary for the purposes of our legitimate interests in offering resources and/or services to the organisation which you work for or represent and to correspond with you.
-
Users of our app resources
What personal data we collect
We may collect your personal data if, prior to or following your purchase of our app resources, you contact us to request information or to provide feedback. The personal data we collect will typically include your name, organisation or role, email address and contact telephone number.
We do not otherwise collect any personal data as a result of any purchase or usage of our resources.
How we use your personal data
We will use your personal data only for the purpose of responding to your enquiries.
The lawful basis for our collection and use of the personal data
Our processing of this personal data is necessary for the purposes of our legitimate interests in responding to your enquiries. Our processing is also necessary for us to comply with a legal obligation to which we are subject, to maintain appropriate business records, to comply with lawful requests by courts and regulatory authorities and for us to comply with applicable laws and regulations. We will use your personal data only for the purpose of communicating with you in response to your enquiries about your purchase or usage of our app(s).
-
Visitors to our website
What personal data we collect
When you visit our website, we may collect your personal information where you submit a form containing your personal data or where the website helps you send an email to us.
The personal data we collect will typically include your name, the organisation you work for, your email address and the information contained in any correspondence with you.
How we use your personal data
We will use your personal data only for the purpose of communicating with you in response to your enquiries.
Our processing of this personal data is necessary for the purposes of our legitimate interests in responding to your enquiries.
-
Feedback and Testimonials
What personal data we collect
We may receive feedback and testimonials from teachers and pupils in relation to our resources.
If you are a teacher the personal data we collect will typically include your name, the organisation you work for, your role in that organisation, your email address and the information contained in any feedback you provide to us. If you are a pupil, we will only collect your first name and the feedback you provide.
How we use your personal data
We may use extracted quotations from feedback which you provide to us. If you are a teacher, we may also attribute the quotation to you using your full name and/or the school which you work for. If you are a pupil we may attribute the quotation using a first name pseudonym so that you cannot be personally identified. We will always obtain your express consent before we publish any quotation or attribution.
Our processing of this personal data is based on your consent which you may withdraw at any time by contacting our Data Protection Officer using the contact details given in this Notice.
-
Photographs
What personal data we collect
When our personnel visit schools who use our resources, they may take photographs of pupils when they use our resources. No other personal data is collected in connection with any pupil who is photographed.
How we use your personal data
We may publish the photographs on our website.
Before we collect any photograph of any pupil, we provide to the school a photo permission form. We will only collect and use photographs of pupils where we have obtained written confirmation from the relevant school that they have obtained appropriate permissions from the parent or legal guardian of the relevant pupil for his/her image to be used on our website in connection with our DigiSmart resources.
The lawful basis of our use of any photograph of any pupil is based on express consent from the pupil’s parent or guardian which the relevant school collects on our behalf and confirms to us in writing. We will always obtain copies from a school of our photo permission forms signed by parents or guardians, said forms to include an express right for a parent or guardian to withdraw consent.
Our safekeeping of your data
We will periodically evaluate your personal data which we hold to determine whether we should continue to hold it. We have implemented all appropriate technical, organisational and security procedures to protect your personal data from unauthorised access or from accidental loss or corruption. These measures include password protection and firewalls. We recommend that you also take steps to safeguard your personal data against the risk of unauthorised access or accidental loss or corruption by backing up your personal data.
Who we may disclose your personal data to
Except as set out above and save for the following exceptions, we will not disclose your personal information to any third party.
- We will disclose your personal data to law enforcement agencies or regulatory bodies if we are required to do so by law.
- We may disclose your personal details to a third party in connection with the sale or merger of our business.
If at any time we wish to disclose your personal data in circumstances other than those above, we will always obtain your express consent before doing so.
We store the personal data entrusted to us on a 7-level security server provided by our hosting services provider Whois.com which server is located in the United Kingdom.
How long we keep your personal data
Unless we provide for a specific duration in the categories set out above, we will keep your personal data for as long as is necessary for the purposes set out in this Notice after which time we will either delete your personal data or remove all personal identifiers from the data so that it has become anonymous.
International data transfers
We do not transfer your personal data to any country outside the EU.
Cookies
Our website does not use cookies to track user traffic patterns. Where we use cookies, we do so in accordance with our Cookie Policy at http://www.digismart.net/cookie_policy.html
Your rights in relation to your personal data
As a data subject, the law provides you with certain rights in relation to your personal data which we hold. You have the right to request the following: (1) Access to your personal data and information about why we hold it and who we can disclose it to; (2) Correction of your personal data if it is inaccurate, incomplete or out of date; (3) Deletion of your personal data (for example where you withdraw consent to our processing of your personal data or if you object to our processing and we have no overriding legitimate interest to continue to process your data); (4) Stopping the processing of your personal data for certain purposes such as direct marketing; (5) To receive your personal data in a commonly used machine-readable format or have this data sent to your designated recipient; and (6) To object to automatic decision making and profiling based on your personal data. Where we rely on your consent to process your personal data, you have the right to withdraw your consent at any time.
To request a copy of your personal data or to make any other request outlined above, please contact our Data Protection Officer by email or by post at the contact details given at the start of this Notice. To safeguard the personal data we hold, we need to confirm your identity before we can take action following a request made under this section.
Contacting the Regulator
If you are not happy with how we have processed your personal data or how we have responded to a request you have made to us, you have the right to make a complaint to the Information Commissioner’s Office who is charged with regulating data protection and use of personal data. The Information Commissioner’s Office can be contacted through their website (www.ico.gov.uk) or by telephone (0303 123 1113).
Revisions to this Privacy Notice
We may change this Notice from time to time. If we make any material changes we will endeavour to place a notice on our website in advance of the changes. This Notice was last reviewed on 18 October 2024.