Privacy policy
Westcliff High School for Boys process data about our website users and those who purchase products from us. This Notice explains what data we process, why we process it, our legal basis, how long we keep it and your rights.
We will always make sure that your personal data is protected and treated securely. Any information that we process will be held in accordance with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
Our contact details
Westcliff High School for Boys
Company number: 07347930
Registered address: Kenilworth Gardens, Westcliff-On-Sea, Essex, SS0 0BP
Phone: 01702 475443
Email: office@whsb.essex.sch.uk
Our Data Protection Officer is Kristy Gouldsmith and she can be contacted at Kristy.gouldsmith@spencer-west.com
1. The types of personal data we collect about you
We may process the following kinds of personal data:
· first name, last name
· billing address, delivery address, email address and telephone numbers
· payment card details are taken through our shopping platform
· details about payments to and from you and the details of products that you have purchased from us
· internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website when you agree to our use of cookies
· any feedback
· your preferences in receiving marketing from us
2. How is your personal data collected?
We use different methods to collect data from and about you including through:
· Your interactions with us. You may give us your personal data by filling in online forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
· Purchase our products;
· create an account on our website; or
· give us feedback or contact us.
· From our online shopping platform. The platform will inform us of your order and that payment has been made.
3. How we use your personal data
The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:
· Performance of a contract with you: Where we need to perform the contract we are about to enter into or have entered into with you.
· Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests.
· Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.
· Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.
Purposes for which we will use your personal data
We have set out below all the ways we plan to use the various categories of your personal data and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
|
Purpose/Use |
Type of data |
Legal basis [and retention period] |
|
To register you as a new customer |
first name, last name billing address, delivery address, email address and telephone numbers
|
Performance of a contract with you
|
|
To process and deliver your order including manage payments, fees and charges
|
first name, last name billing address, delivery address, email address and telephone numbers payment card details are taken through our shopping platform details about payments to and from you and the details of products that you have purchased from us |
Performance of a contract with you
|
|
To manage our relationship with you which will include dealing with your requests, complaints and queries |
first name, last name billing address, delivery address, email address and telephone numbers payment card details are taken through our shopping platform details about payments to and from you and the details of products that you have purchased from us
|
Performance of a contract with you Necessary for our legitimate interests (to keep our records updated and manage our relationship with you
|
|
To use data analytics to improve our website, products/services, customer relationships and experiences and to measure the effectiveness of our communications and marketing |
Website information
|
We will only use cookies with your consent. |
|
To send you marketing communications |
first name, last name, email address
|
Legitimate interests where you have bought a product from us or have made an enquiry about a product |
You can ask to stop sending you marketing communications at any time by clicking the unsubscribe link in the email.
If you opt out of receiving marketing communications, you will still receive service-related communications such as order confirmations and delivery emails.
4. Sharing of your personal data
We will share your personal data with our software and cloud service providers as well as the payment service provider.
We do not transfer your personal data outside the UK.
By law we have to keep basic information about our customers for seven years after they cease being customers for tax and HMRC requirements.
We hold data on enquires for 6 months.
For marketing, we hold your data until you withdraw consent or until we see that you are no longer opening the emails. We review our consents every year
7. What are your privacy rights?
Under the UK General Data Protection Regulation (GDPR), data subjects have rights about their personal data:
|
The right to be informed |
Provide data subjects with information about the processing activities being conducted. |
|
The right to request access |
Provide data subjects with confirmation that their personal data is being processed and access to the personal data, subject to exemptions. |
|
The right to recertification |
data subjects have the right to request to have inaccurate or incomplete personal data corrected |
|
The right to erasure |
Data subjects have the right to request to have their personal data erased |
|
The right to restrict processing |
Data subjects have the right to request to the restriction of the processing of their personal data |
|
The right to data portability |
Data subjects have the right to request a move of their personal data between organisations |
|
The right to object |
Data subjects have the right to object to how their personal data is being processed |
|
Rights relating to automated decision making and profiling |
Data subjects have the right to not be subject to an automated or profiling decisions |
For more information about your Data Subject Rights, please refer to the ICO website –
You also have the right to lodge a complaint with the ICO regarding any aspect of our processing of your personal data. We would appreciate the opportunity to address any issues and request that you contact us in the first instance.
WHSB is registered with the Information Commissioner's Office under number Z2821659.