St Paul's Collegiate School maintains a database of alumni/ friends/ supporters/ parents in order to stay in touch with our community and keep you updated about news, events, and fundraising activities.
Some of our database (but not all) choose to join our online community by registering on this website and creating an online profile. In both instances (individuals with offline database records and individuals with online profiles), we collect and store personal information (or "data") about you. We are committed to protecting and respecting your privacy, and this Policy sets out what information we collect about you, where and how we use ("process") it.
We may change this Policy from time to time. We will advertise this on the website or contact you directly with the information.
If you have any questions about this Policy or concerning your personal information, please contact email@example.com.
WHAT TYPE OF PERSONAL INFORMATION DO WE COLLECT?
The information we have about you comes from our school database (PC School) and your activity on this platform (ToucanTech), and may include:
WHERE DO WE COLLECT THAT INFORMATION FROM?
We collect personal information when you:
HOW WE USE YOUR INFORMATION
We will use your personal information in a number of ways, always with a legal basis for processing your data. These may include:
OUR LEGAL BASIS FOR PROCESSING YOUR INFORMATION
The use of your information for the purposes set out above is lawful because one or more of the following applies:
UPDATING YOUR CONSENT PREFERENCES
If you have an online profile on this website, you can update your consent options by logging in and clicking on "My Settings" in your profile. Scroll down to find your 'Consent options' where you will see a list of consents and the options "opt-in," "opt-out," and "unspecified."
Via 'My Settings,' you can also choose to hide your profile from Google, limit access to your profile so that it's only viewable to your connections, and adjust some of the automatic notifications that you receive from this website. Please note that your name (but not your full profile) may appear in various places around the community website, such as a 'Recent Joiners' box and in 'Search' results, irrespective of the privacy settings you have selected.
If we are using consent as our legal basis for processing your data, we must have an explicit "opt-in" from you for this specific type of processing.
If we are using legitimate interests as our legal basis for processing your data, we will process your data responsibly in a way that you would reasonably expect, and you can opt out at any stage.
If you click 'unsubscribe' at the bottom of one of our emails sent, you will be automatically opted out of these types of email communications in the future.
If you want to contact us about your consent preferences, please contact firstname.lastname@example.org.
HOW WE KEEP YOUR INFORMATION SAFE
We understand the importance of keeping your personal information secure and take appropriate steps to safeguard it.
Your data is stored on a dedicated, secure cloud server hosted by Amazon Web Services (AWS) in the EU and managed by our website provider, ToucanTech. Industry-standard firewalls, anti-virus, encryption, and backup methods are in place, as well as strict data handling protocols.
We always ensure only authorised persons have access to your information, which means only our approved employees who are appropriately trained in data management.
If you have an online profile for this website you are responsible for keeping your login details (email and password) confidential and we ask that you do not share your password with anyone.
No data transmission over the internet can be guaranteed to be completely secure. So, whilst we strive to safeguard your information, we cannot guarantee the security of any information you provide online and you do this at your own risk.
WHO HAS ACCESS TO YOUR INFORMATION?
Web hosting, email hosting, analytics, and search engine providers that enable us to run our community database and improve our website and its use.
Other than this, we will not share your information with other organisations without your consent.
KEEPING YOUR INFORMATION UP TO DATE
Please would you let us know if your contact details change? Online members can update their details directly by logging in to the website and clicking on 'My Settings' under your profile. You can also update your details by contacting us at email@example.com.
USE OF AGGREGATED DATA
Where data can be aggregated and anonymised, our website provider (ToucanTech) might use this for research purposes without restriction. For example, they may monitor traffic patterns, site usage, response rates, and data trends to help make improvements to the website software. They are entitled to do this because the resulting data will not personally identify you and will therefore no longer constitute personal data for the purposes of data protection laws.
HOW LONG WE KEEP YOUR INFORMATION FOR?
We will hold your personal information for as long as it is necessary for the relevant activity.
Where we rely on your consent to contact you for direct email marketing/fundraising purposes, we will treat your consent as lasting only for as long as it is reasonable to do so. We may periodically ask you to renew your consent.
If you ask us to stop contacting you, we will keep a record of your contact details and limited information needed to ensure we comply with your request. If you ask us to remove your personal data from our database we will delete all the information we hold out apart from your name and the dates that you attended St Paul's Collegiate School and archive your record in our database.
You have the right to request details of how we use your personal information by making a subject access request. Such requests have to be made in writing by contacting us at firstname.lastname@example.org.
You also have the following rights:
All of these rights are subject to certain safeguards and limits or exemptions. To exercise any of these rights, you should contact email@example.com.
If an individual believes that St Paul's Collegiate School has not complied with this Policy or acted otherwise than in accordance with Data Protection Laws, please contact St Paul's Comunity immediately.
If you feel your complaint has not been addressed satisfactorily, you can also make a referral to or lodge a complaint with the Privacy Commissioner, PO Box 10 094, Wellington 6143, or phone 0800 803 909.
This Policy was last updated in April 2023