Shaping Futures is committed to protecting the privacy and security of the personal information we collect. This privacy notice explains how we collect and use your personal information when you visit our website or take part in any of our activities, in accordance with the General Data Protection Regulation (GDPR). It applies to all learners, teachers and advisors and parents who take part in our activities, and visitors to our website.
Shaping Futures will be what is known as the ‘Data Controller’ of the personal data we hold about you. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice. We may update this notice at any time.
It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). There are “special categories” of more sensitive personal data which require a higher level of protection.
Learners taking part in our activities
We may collect, store, and use the following categories of personal information about you:
We may also collect, store and use the following ‘special categories’ of more sensitive personal information:
Teachers and advisors attending our activities
We may collect, store, and use the following categories of personal information about you:
Parents and carers attending our activities
We may collect, store, and use the following categories of personal information about you:
Visitors to our website
We may collect, store, and use the following categories of personal information about you:
We may also collect, store and use the following ‘special categories’ of more sensitive personal information:
Learners taking part in our activities
We collect personal data about you through the following routes:
Teachers and advisors attending our activities
We collect personal data about you through the following routes:
Parents and carers attending our activities
We collect personal data about you through the following routes:
As a condition of our funding, we use the HEAT monitoring and evaluation database to track the education journey of the learners we work with, and to use as a tool to evaluate our work.
Shaping Futures are required to comply with the data protection policies put in place by HEAT.
We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:
Legal basis for processing
To process personal data, we must have a lawful basis from
data protection legislation which allows us to do so. For the purposes of
the Shaping Futures programme, we rely on the following lawful basis from the
UK GDPR: Article 6(1)(e), which allows us to process personal data where it is
necessary to perform a task in the public interest. Where the University
processes special category personal data for research or statistical purposes
for this project, we rely on the lawful basis under Article 9(2)(j) in
accordance with Article 89(1) of the UK GDPR and Schedule 1 part 1(4) of the
Data Protection Act 2018.
Change of purpose
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Automated decision making
Automated decision making takes place when an electronic system uses personal information to make a decision without human intervention. Shaping Futures do not use automated decision making.
We may have to share your data with third parties, including third-party service providers. We require third parties to respect the security of your data and to treat it in accordance with the law.
Your data will not be transferred, stored or processed outside of the EU.
We may share the personal information we collect and process with one or more of the following receiving organisations:
How long will you use my information for?
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
Once we no longer need the personal data we have collected, or have reached the date of deletion as outlined in our Records Retention Schedule, it will be securely destroyed in accordance with the Records Retention Schedule in line with our host institution which is available here.
Shaping Futures are committed to protecting the privacy and security of the personal information we collect and process, and take this responsibility very seriously. We have a robust data breach reporting process in place, of which all Shaping Futures staff members are aware.
We also have the following security measures in place to avoid data breaches from occurring:
Any data breaches or suspected data breaches will be inspected and reported appropriately to the ICO within 72 hours of discovery. Where the data breach relates to individuals, we will do our best to notify those involved.
Under GDPR, all individuals have the following eight rights:
The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling
Contact
c/o The University of Liverpool
Foundation Building,
Brownlow Hill,
Liverpool, L69 7ZX
Contact
c/o The University of Liverpool
Foundation Building,
Brownlow Hill,
Liverpool, L69 7ZX
