At this stage, 11PlusSuccess has not appointed a Data Protection Officer (DPO) as this is not a legal requirement however we will work to ensure that all personal data is processed in compliance with this Policy and the Principles of the General Data Protection Regulation (EU) 2016/679, Data Protection Act 2018, the Freedom of Information Act 2000 and the Protection of Freedoms Act 2012 are also relevant to parts of this policy. Our ICO registration number is CSN4153467.
You can contact us at 11Plus Success, 61 Bridge Street, Kington, HR5 3DJ.
Any capitalised terms used herein without definition shall have the meaning given to them in the 11PLUS SUCCESS website.
Whilst our service is for children working towards their 11 Plus, usually 10 years of age, registration is through the active consent of a parent or guardian where the only information relating to the child is their name. All other information relates to the Parent or Guardian.
If you have more questions about this policy or believe we have obtained information from a child under the legal age of consent (13) and without the consent of a permitted parent or guardian, please email us at [email protected].
COLLECTION AND USE OF INFORMATION
INFORMATION YOU PROVIDE
We receive and store any information provided directly by the legal parent or guardian. For example, we collect personal information such as the name of the child, in addition we will collect the parent or guardians email address, physical address, post code, location, and details of transactions including a credit card number, when provided to us through our Website or when you email our support team directly.
While you can choose not to provide certain information to us, please know that this may result in our being unable to register you or you may be unable to take advantage of some of our features and services.
We store a user profile which includes your name, display name, email address, password, payment methods and address, a profile picture if you uploaded one, and how long you have been a member.
To remove or update any personal information, please log into your account settings and remove or modify your personal information in the appropriate fields. Information that is required to be retained cannot be deleted until the legal basis for retention has expired.
INFORMATION COLLECTED AUTOMATICALLY FROM YOU
Whenever you interact with our Website, we automatically receive and record certain information. This information may include server logs from your browser including your IP address, browser type, internet service provider, referring/exit pages, operating system, date/time stamp, “cookie” information, and the page you requested.
Technologies such as cookies, tags and scripts may be used by us and our partners, affiliates, analytics or service providers. These technologies are used in analysing trends, administering our Website, tracking users’ movements around our Website and to gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis. “Cookies” are small text files stored on a user’s computer or mobile device that allow us to recognize your browser or mobile device and tell us how and when pages on our Website are visited and by how many people. You may be able to change the preferences on your browser or mobile device to prevent or limit your computer or device’s acceptance of cookies, but this may limit you from taking advantage of some of our Website’s features.
When we collect usage information (such as the numbers and frequency of visitors to the Website, the length of stay on the Website, the types of pages visited and other general information), we only use this data in aggregate form, and not in a manner that would identify you personally. For example, this aggregate data tells us how often users use parts of the Website, so that we can make the Website appealing to as many users as possible. We may also provide this aggregate anonymous information to our partners; our partners may use such information to understand how often and in what ways people use our Website, so that they, too, can provide you with an optimal experience.
When you use our Services, we automatically collect information on the type of device you use, operating system version, and the device identifier (or "UDID"). We do not ask for, access or track any location-based information from your mobile device at any time while downloading or using our Mobile Apps or Services.
We display personal testimonials of satisfied customers on our site in addition to other endorsements. With your consent we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us at [email protected].
SOCIAL MEDIA AND WIDGETS
EMAIL AND OTHER COMMUNICATIONS
We may contact you, by email or other means as you have indicated, to send you information about our products and services, including updates, enhancements, or other related information or to communicate with you about your use of our Website. In addition, where you have agreed, we may send you promotional offers on behalf of other businesses. If you do not want to receive email or other mail from us, please email us at [email protected].
WILL 11PLUS SUCCESS SHARE MY PERSONAL INFORMATION?
We neither rent, sell nor share your personal information with anyone other than as set forth in this Policy.
We employ third parties (other companies and people) to perform certain tasks on our behalf. These include: Active Campaign, LearnDash, WooCommerce and Stripe.
Mailchimp is an email content delivery service that collects email data for the purposes of communicating our services and offers to you. Mailchimp subscribe to the US/EU Privacy Shield Framework and are therefore considered compliant with GDPR obligations and expectations.
Mailchimp is a Processor of data.Processing Addendum: https://mailchimp.com/legal/data-processing-addendum/
Active campaign provides email marketing, automation and customer experience services.
Active Campaign is a processor.
GDPR Policy: https://www.activecampaign.com/gdpr-updates/
LearnDash is an LMS that helps deliver the training needed. The software plugin is stored locally on the website and therefore LearnDash have no access to, or control over the contents of the 11PlusSuccess website.
GDPR Summary: https://www.learndash.com/gdpr/
WooCommerce: an ecommerce and payment gateway plugin installed on WordPress. The purpose of this is to enable payment through Stripe payment processing.
WooCommerce is a Processor of Data
Stripe is a technology company that allows us to use software to accept payments and manage their businesses online.
Stripe is a Controller for certain types of data.
Privacy Shield Agreement: https://stripe.com/privacy-shield-policy
XFerion Latin America S.A
XFerion is a developer and service administrator
Hetzner are a web host based in Germany and is responsible for hosting the 11PlusSuccess website.
As an EU company, they subject to the obligations set out by the GDPR.
These may include use of a payment processor or hosting provider. This may require that we share your information with them in order for us to provide products or services you request. Unless we tell you differently, our 3rd party processors do not have any right to use the personal information we share with them beyond what is necessary to assist us.
We may access, read, preserve, and disclose any information that we reasonably believe is necessary to comply with applicable law or court order; to enforce our rights or conditions of use and other agreements; or to protect the rights, property, or safety of 11PLUS SUCCESS , our employees, our users, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.
We may choose to buy or sell assets. In these types of transactions, customer information is typically one of the business assets that is transferred. Also, if we (or substantially all of our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, personal information would be one of the assets transferred to or acquired by a third party. You will be notified via email and/or a prominent notice on our Website of any change in ownership or use of your personal information, as well as any choices you may have regarding your personal information.
IS MY PERSONAL INFORMATION SECURE?
11Plus Success uses reasonable precautions to protect personal information in its possession from loss, misuse and unauthorized access, disclosure, alteration and destruction. For users of our Website, communications between 11PLUS SUCCESS ’s site and a user’s web browser are accomplished using, at a minimum, 128-bit Secure Sockets Layer (“SSL”) encryption and various third-party security certificates to protect information. While we endeavour to protect the privacy of your account and other personal information we hold, no method of transmission over the Internet can guarantee complete security. As a result, we cannot guarantee its absolute security despite using commercially acceptable means to protection your personal information.
Your account is protected by a password for your privacy and security. You are responsible for keeping this information secure in order to prevent unauthorized access to your account and Personal Information. When you provide a credit card number, we encrypt the transmission of that information using SSL.
WHAT PERSONAL INFORMATION CAN I ACCESS?
Through your account settings, you may access, and, in some cases, edit or delete the following information: Name, display name, email address, password, add/remove payment methods, cancel your subscription, address.
The information you can view, update, and delete may change as the Website changes. If you have any questions about viewing or updating your information, please contact us at [email protected]. We will respond to your request to access personal information on file with us within a reasonable period of time not greater than 30 days. Please note that you will also be required to authenticate your identity in order to obtain access to any personal information.
WHAT CHOICES DO I HAVE?
You can always choose not to disclose personal information to us, but keep in mind some information may be needed to register with us or to take advantage of some of our special features.
You may be able to add, update, or delete information as explained in the 'Your GDPR' section above.
You may request deletion of your account by contacting us at [email protected]. In this situation we may have to notify your employer. Please note that some information may remain in our systems after you request deletion of the information from your account. We will retain your information for as long as your account is active or as needed to provide services. We will also retain and use personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
You may request details of your Personal Information, and where necessary, have it corrected. We reserve the right to charge a reasonable fee if your request is deemed unreasonable to cover our administrative costs for providing you with access to your personal data, standard requests carry no charge. For more details, please contact us at [email protected].
FOR USERS OF OUR WEBSITE FROM THE EUROPEAN UNION
The European Union’s General Data Protection Regulation and other data protection laws grant you certain rights in relation to your personal information. Where applicable to you, you can:
request access to your personal information and how we process it
request correction of the personal information that we hold about you
ask us to delete your personal information
object to us processing your personal information
request the restriction of processing of your personal information
request the transfer of your personal information to you or to a third party
withdraw consent at any time where we are relying on consent to process your personal information.
Note that withdrawing your consent to our processing of your information will not affect the lawfulness of any processing carried out before you withdraw your consent. You should also be aware that if you do withdraw your consent, we may not be able to provide certain services to you. Where this is the case, we will let you know at the time you withdraw your consent. Please be aware that even after you have withdrawn your consent, we may be able to continue to process your personal information to the extent required or otherwise permitted by law, in particular in connection with exercising and defending our legal rights or meeting our legal and regulatory obligations.
If you have a concern or complaint about our processing of personal data, you can contact our Data Protection Officer whose details are listed at the top of this notice. If, after raising your concern or complaint with our Data Protection Officer you are not satisfied and still have concerns about the processing of personal data, or you believe we are unlawfully processing your data, you have the right to complain to the relevant Data Protection Authority (namely the Information Commissioners Office) by calling +44 (0)303 123 1113 or by visiting their website www.ICO.org.uk