policies

Privacy and cookies policy​

Innovate Summer Academy takes data privacy seriously and when we process your personal data or that of your children or wards we are processing it in compliance with the General Data Protection Regulation (GDPR). Please read this privacy and cookies policy carefully to understand why data is being collected and what we do with that data once in our possession. Further information about data privacy may be found in our terms of business document.

What type of personal data will we collect from you?

The personal data we collect will depend on the nature of the services we are providing and what we are contracted to do for you. Typically, where relevant, this might include the following:

1. Contact details (including your name, address, date of birth, and email address)

2. Photographic identification and proof of address documents (to carry out due diligence)

3. Professional information (such as job title, previous positions, and professional experience)

4. Banking and financial details (to establish the source of funds where a transaction is involved)

Where necessary to act in your child or ward’s best interests, we may need to process personal data which is very sensitive in nature such as diversity and health related details. In some circumstances, we may need to share this information with third parties, for example health and social care professionals, a court or other regulatory bodies. If you volunteer sensitive personal data, you will be allowing us to process it as part of engaging our services.

On what basis can we process your personal data?

Our reasons for processing your personal data are as follows:

1. It is necessary for the performance of a contract to which you are a party, or to take steps prior to entering into a contract with you. The retainer between you and us, which is made up of our terms of business and engagement letter, sets out the terms of the contract and the services we will provide

2. It is necessary for the purposes of our legitimate interests, except where our interests are overridden by the interests, rights or freedoms of affected individuals (such as you). To determine this, we shall consider a number of factors, such as what you were told at the time you provided your data, what your expectations are about the processing of the data, the nature of the data, and the impact of the processing on you.

3. It is necessary in order to comply with mandatory legal obligations to which we are subject under EU or UK law.

Personal data collected from you about other people

In commercial matters, in the course of providing our health and social care and other professional services to you we will hold and use personal data about you and/or your employees. When you provide personal data to us relating to your employees, you confirm that you are allowed to do so. You should ensure that those individuals understand how their data will be used by us.

In personal matters, you may be providing other third-party data to us, for example details about your family members, in which case we will use such data as a data controller in our own right and will comply with data protection legislation in relation to use of that data. You must have the authority to disclose personal data if it relates to someone else and all data disclosed should be complete, accurate and up to date.

What are we going to do with your personal data?

We will hold and use personal data about you to:

  • Verify your identity and establish the source of funding in any transaction.
  • Carry out appropriate anti-fraud checks (by conducting online searches using a third-party identity provider). Please note that this will not affect your credit rating.
  • Communicate with you during the course of providing our services, for example providing you with advice and dealing with your enquiries and requests.
  • Prepare documentation to access services and/or complete transactions.
  • Carry out appropriate anti-fraud checks (by conducting online searches using a third-party identity provider). Please note that this will not affect your credit rating.
  • Communicate with you during the course of providing our services, for example providing you with advice and dealing with your enquiries and requests.
  • Prepare documentation to access services and/or complete transactions.
  • Carry out obligations arising from any contract entered into between you and us as part of your educational, health and social care services.
  • Refer you to another of our departments about additional legal services which may benefit you.
  • Statistical purposes so we can analyse figures to help us manage our business and plan strategically for the future.
  • Seek advice from third parties in connection with the services we provide.
  • Respond to any complaint or allegation of negligence against us.
  • Prevent money laundering or terrorist financing in accordance with financial crime regulations.
  • Improve the products and services we provide.
  • Customize our website for you. 
  • Send you information about products, services, offers and other things we think might be relevant to you.

How long we keep your personal data for?

We will only retain your personal data for as long as is necessary to:

  • Carry out health, care and educational services.
  • Establishment or defence of legal claims (for example negligence claims) that could be made against us.
  • Compliance with legal obligations under EU/UK law (anti-money laundering regulations say your identification and source of funds information must be kept for a minimum period from conclusion of the matter). We will keep your data in accordance with our data retention and erasure policy, a copy of which is available on request.

Who your personal data will be shared with?

We may, when required and necessary, share your personal data with other organizations. Depending on the work we are undertaking for you the other organizations may include:

  • Our organization’s ‘data processors’ who are contractors from whom we obtain operational services including IT, message-taking, typing and secretarial support, costs draftsmen, secure document storage and shredding.
  • Other ‘data controllers’ that provide professional or commercial services, such as solicitors, accountants, medical and health and social care practitioners.
  • Experts that you and we agree are necessary to assist us to progress your matter.
  • Providers of insurance, health and social care, educational and other related services to you and/or to our organisation.
  • The CQC, Department for Education, the Information Commissioner’s Office (ICO) and organisations involved with the preparation, assessment and certification of quality standards for which our organisation is seeking or maintaining accreditation.

Your Rights

Here is a list of the rights that you have under the data protection legislation:

  • The right to be informed about the processing of your personal information;
  • The right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed;
  • The right to object to processing of your personal information;
  • The right to restrict processing of your personal information;
  • The right to have your personal information erased (the “right to be forgotten”);
  • The right to request access to your personal information and to obtain information about how we process it;
  • The right to move, copy or transfer your personal information (“data portability”); and
  • Rights in relation to automated decision making which has a legal effect or otherwise significantly affects you.

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the relevant request. This is to ensure that your data is protected and kept secure.

Controlling information about you

If you have agreed that we can use your information for marketing purposes, you can change your mind easily, via one of these methods:

  • Send an email to us;
  • Write to us.

We will never lease, distribute or sell your personal information to third parties unless we have your permission, or we are required to disclose your personal details by law. Any personal information we hold about you is stored and processed under our data protection policy, in compliance with the Data Protection Act 1998.

Security of your personal data

Your data will be held on secure servers within the European Economic Area (“EEA”) with all reasonable technological and operation measures put in place to safeguard it from unauthorised access. Where possible any identifiable information will be encrypted or minimised.

Erasure of personal data

Where we obtained your personal data to fulfil our contractual obligations to you, or if we have a legitimate interest for processing your personal data, we will erase that data as soon as it is no longer necessary to retain it in relation to the purpose for which it was originally collected.

If you are not our client, your personal data may be processed to enable us to provide legal advice to our client and may also be used in legal proceedings on behalf of our client. We are allowed to use your personal data because it is in the legitimate interests of our client.

(for example under the terms and conditions of a loan agreement) to do so. We may also have to use your personal data to comply with our own legal and regulatory obligations.

Erasure of personal data

Where we obtained your personal data to fulfil our contractual obligations to you, or if we have a legitimate interest for processing your personal data, we will erase that data as soon as it is no longer necessary to retain it in relation to the purpose for which it was originally collected.

If you are not our client, your personal data may be processed to enable us to provide legal advice to our client and may also be used in legal proceedings on behalf of our client. We are allowed to use your personal data because it is in the legitimate interests of our client.

(for example under the terms and conditions of a loan agreement) to do so. We may also have to use your personal data to comply with our own legal and regulatory obligations.

Cookies

Cookies are small text files that are placed on your computer by websites you visit. Cookies help make this website work and provide information to us about how users interact with our site.

We use this information to improve our website. The cookies we use help to provide us with anonymised, aggregated technical information. This is principally so that we can make sure that the website is easy to navigate, identify the areas that are of interest to visitors and generally improve the site and our services. The information that we collect in this process will not identify you as an individual. We do not seek to identify individual visitors unless they volunteer their contact details through one of the forms on the site. In some circumstances, our records will identify organisations visiting our site and we may use that information in managing our relationship with those organisations, for example, in considering how to develop the services that we offer them.

By using our website, you agree that we can place these types of cookies on your device. When you accessed this website, our cookies were sent to your web browser and stored on your computer. If you wish to remove them, you can manage this via the settings on your browser but note that this may impact your ability to utilise this and other websites. The way to clear cookies varies from one browser to another. You should look in the “help” menu of your web browser for full instructions. For your reference, please click the following links for details on how to manage cookies in each of the major web browsers:

  • Internet Explorer
  • Firefox 
  • Chrome
  • Opera
  • Safari
  • Safari for iPad and iPhone

Placed Cookies

Adobe Fonts

Purpose pending investigation

Usage

We use Adobe Fonts for display of webfonts. Read more

Sharing data

For more information, please read the Adobe Fonts Privacy Statement.

Purpose pending investigation

Name
Adobe Fonts API
Expiration
Function

Miscellaneous

Purpose pending investigation

Usage

Sharing data

Sharing of data is pending investigation

Purpose pending investigation

Name
e_globals
Expiration
Function
Name
intercom.intercom-state-r70azrgx
Expiration
Function
Name
elementor
Expiration
Function
Name
storeApiNonce
Expiration
Function
Name
_gcl_ls
Expiration
Function
Name
wpformsChallengeStep
Expiration
Function
Name
e_my_templates_source
Expiration
Function
Name
e_site-editor
Expiration
Function
Name
e_document/global
Expiration
Function
Name
e_event-tracker
Expiration
Function
Name
topBanner
Expiration
Function
Name
wpformsChallengeSecondsLeft
Expiration
Function
Name
acf
Expiration
Function
Name
languageBanner
Expiration
Function
Name
e_kit-elements-defaults
Expiration
Function
Name
wistia
Expiration
Function
Name
UeGoogleMapFinderData
Expiration
Function
Name
wc_cart_hash_b64c9886200c2cba0b227f0051dcb4e0
Expiration
Function
Name
wc-marketplaceNoticeClosed-promotion-0
Expiration
Function
Name
WP_PREFERENCES_USER_1
Expiration
Function
Name
wpEmojiSettingsSupports
Expiration
Function
Name
wp-api-schema-modelhttp://malvern-international.local/wp-json/wp/v2/
Expiration
Function
Name
trp_language
Expiration
Function
Name
_wpfuuid
Expiration
Function
Name
wt_consent
Expiration
Function
Name
cookieyes-consent
Expiration
Function
Name
_gcl_au
Expiration
Function
Name
_ga_2DJMR93EQW
Expiration
Function
Name
_ga
Expiration
Function
Name
cmplz_rt_consented_services
Expiration
365 days
Function
Name
cmplz_rt_policy_id
Expiration
365 days
Function
Name
cmplz_rt_marketing
Expiration
365 days
Function
Name
cmplz_rt_statistics
Expiration
365 days
Function
Name
cmplz_rt_preferences
Expiration
365 days
Function
Name
cmplz_rt_functional
Expiration
365 days
Function
Name
cmplz_rt_banner-status
Expiration
365 days
Function
Name
wp-settings-1
Expiration
Function
Name
wp-settings-time-1
Expiration
Function
Name
_ga_GDX04E5X7M
Expiration
Function
Name
cmplz_saved_categories
Expiration
365 days
Function
Name
cmplz_saved_services
Expiration
365 days
Function
Name
cmplz_consented_services
Expiration
365 days
Function
Name
cmplz_policy_id
Expiration
365 days
Function
Name
cmplz_marketing
Expiration
365 days
Function
Name
cmplz_statistics
Expiration
365 days
Function
Name
cmplz_preferences
Expiration
365 days
Function
Name
cmplz_functional
Expiration
365 days
Function
Name
cmplz_banner-status
Expiration
365 days
Function
Name
wp-settings-time-7
Expiration
Function
Name
wp-settings-7
Expiration
Function
Name
wp_lang
Expiration
Function
Name
wordpress_73d87c699abd7ddb34a3f72183f8788b
Expiration
Function
Name
wordpress_logged_in_73d87c699abd7ddb34a3f72183f8788b
Expiration
Function
Name
e_library
Expiration
Function
Name
adobeCleanFontAdded
Expiration
Function
Name
_ga_KR3NCEW22X
Expiration
Function
Name
wp-postpass_43364639c327226d774e98ead204e645
Expiration
Function
Name
wpp_password_cookie_expired_sitewide
Expiration
Function
Name
wp-settings-27
Expiration
Function
Name
wp-settings-time-27
Expiration
Function
Name
wordpress_test_cookie
Expiration
Function
Name
wordpress_logged_in_43364639c327226d774e98ead204e645
Expiration
Function
Name
wfwaf-authcookie-acec790770313ce73559e0ad0b87dbe0
Expiration
Function
Name
_ga_LZGQ84HXEH
Expiration
Function
Name
_ga_FWMCPSY3YP
Expiration
Function
Name
_ga_8GX59KSYRW
Expiration
Function
Name
_ga_YL37CK53PX
Expiration
Function
Name
_ga_JEZWK4PCH4
Expiration
Function
Name
_fbp
Expiration
Function
Name
wordpress_logged_in_1ccddf89b36f2ad9f4e4a8c25a3b0dc9
Expiration
Function
Name
wfwaf-authcookie-dae1f3fa6137b57479c0047d9806dd9d
Expiration
Function
Name
wfwaf-authcookie-4401b093cfcc51cb515e1b8c16c64f46
Expiration
Function

Lodging a complaint

Innovate Summmer Academy only processes your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to lodge a complaint with the ICO.

Contacts

If you have any questions about our privacy policies, want to exercise your right to see a copy of the information that we hold about you, or think that information we hold about you may need to be corrected, want to delete all or any part of it or to object to the processing on legitimate grounds, please contact our Dr. Kevin J. McNamara, Head of Innovate Summer Academy at Kevin.McNamara@malvernplc.com