Sutton Valence School maintains a database of alumni, friends and parents in order to stay in touch with our community and keep you updated about news, events, careers initiatives and fundraising activities.
Some of our database (but not all) choose to join our online community by registering on this website and creating an online profile. In both instances (individuals with offline database records and individuals with online profiles), we collect and store personal information (or “data”) about you. We are committed to protecting and respecting your privacy and this Policy sets out what information we collect about you, where and how we use (“process”) it.
We may change this Policy from time to time. If we make any significant changes we will advertise this on the website or contact you directly with the information. Please check this page occasionally to make sure you are happy with any changes.
If you have any questions about this Policy or concerning your personal information, please contact Glen Millbery, the School's Data Protection Manager.
For the purposes of the General Data Protection Regulations (GDPR) and any subsequent UK legislation covering data protection, the Data Controller is Sutton Valence School.
The information we have about you depends on where we collect it, but may include:
We collect personal information when you:
[Note: we have not included public sources used in data matching and tele-appending, on which further advice should be sought, if relevant to your organisation]
We will use your personal information in a number of ways, always with a legal basis for processing your data. These may include:
[Note: The above is a selection of the ways in which data might be used. You should delete where not applicable and add any other intended uses you have. Note that we have not included profiling, wealth screening or transference of personal data off the ToucanTech database to other third-parties – you should clearly state if you are doing any of these things, and potentially seek legal advice on the nature of this processing.
The use of your information for the purposes set out above is lawful because one or more of the following applies:
If you have an online profile on this website you can update your consent options by logging-in and clicking on “My Settings” in your profile. Scroll down to find your ‘Consent options’ where you will see a list of consents and the options “opt-in”, “opt-out” and “unspecified”.
Via ‘My Settings’ you can also choose to hide your profile from Google, limit access to your profile so that it’s only viewable to your connections and adjust some of the automatic notifications that you receive from this website. Please note that your name (but not full profile) may appear in various places around the community website, such as a ‘Recent Joiners’ box and in ‘Search’ results irrespective of the privacy settings you have selected.
If we are using consent as our legal basis for processing your data, we must have an explicit “opt-in” from you for this specific type of processing.
If we are using legitimate interests as our legal basis for processing your data, we will process your data responsibly in a way that you would reasonably expect, and you can opt-out at any stage.
If you click ‘unsubscribe’ at the bottom of one of our emails sent you will be automatically opted-out of these types of email communications in the future.
If you want to contact us about your consent preferences please contact [details] by telephone/ email [details].
We understand the importance of keeping your personal information secure and take appropriate steps to safeguard it.
Your data is stored on a dedicated, secure cloud server hosted by Amazon Web Services (AWS) in the EU and managed by our website provider, ToucanTech. Industry standard firewalls, anti-virus, encryption and back-up methods are in place, as well as strict data handling protocols.
We always ensure only authorised persons have access to your information, which means only our approved employees and contractors, and that everyone who has access is appropriately trained in data management.
If you have an online profile for this website you are responsible for keeping your login details (email and password) confidential and we ask that you do not share your password with anyone.
No data transmission over the internet can be guaranteed to be completely secure. So, whilst we strive to safeguard your information, we cannot guarantee the security of any information you provide online and you do this at your own risk.
Third parties who provide services for us, for example [insert details such as, collecting or processing data and sending mailings]. We select our third-party service providers with care. We provide these third parties with the information that is necessary to provide the service and we will have an agreement in place that requires them to operate with the same care over data protection as we do
[Note: ToucanTech does not transfer the personal data of EU customers outside of the EEA, but if you make transfers of your data to third parties outside of the EEA for other reasons, please include details here and explain how you are ensuring compliance with GDPR]
Other than this, we will not share your information with other organisations without your consent.
Please would you let us know if your contact details change. Online members can update your details directly by logging-in to the website and clicking on ‘My Settings’ under your profile. You can also update your details by contacting us at the School's Development Office.
The law states that we can store cookies on your machine if they are essential to the operation of the website, but that for all others we need your permission to do so.
The list below explains the cookies we use and why:
|Used to remember you as you travel from page to page in a single session (without leaving the website) in order to provide a continuous and unified experience|
|Functional Cookie||[Organisation]_Identify||Used to remember your login details when you return to the website after previously logging out, by storing them in your browser. This cookie is turned off by default and is only activated when you select the ‘Remember Me’ check box during login.|
If you do not wish to receive cookies from us or any other website, you should be able to turn cookies off on your web browser: please follow your browser provider’s instruction in order to do so. Unfortunately, we cannot accept liability for any malfunctioning of your computer or its installed web browser as a result of any attempt to turn off cookies.
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org.
Where data can be aggregated and anonymised, our website provider (ToucanTech) might use this for research purposes without restriction. For example, they may monitor traffic patterns, site usage, response rates and data trends to help make improvement to the website software. They are entitled to do this because the resulting data will not personal identify you and will therefore no longer constitute personal data for the purposes of data protection laws.
[Note: it’s optional if you decide to include this – we won’t be processing personally identifiable data for any research/ benchmarking/ usage analysis]
We will hold your personal information for as long as it is necessary for the relevant activity.
Where we rely on your consent to contact you for direct email marketing/ fundraising purposes, we will treat your consent as lasting only for as long as it is reasonable to do so. This will usually be for two years. We may periodically ask you to renew your consent.
If you ask us to stop contacting you, we will keep a record of your contact details and limited information needed to ensure we comply with your request.
You have the right to request details of how we use your personal information through making a subject access request. Such requests have to be made in writing by contacting the School's Development Office.
You also have the following rights:
All of these rights are subject to certain safeguards and limits or exemptions. To exercise any of these rights, you should contact the School's Development Office.
If you believe that the School has not complied with this policy or acted otherwise than in accordance with Data Protection Law, you should utilise the School’s Complaints or Grievance procedures and should also notify the Headmaster. You can also make a referral to or lodge a complaint with the Information Commissioner’s Office (ICO), although the ICO recommends that steps are taken to resolve the matter with the School before involving the regulator.
This Policy was last updated in November 2020.