Privacy Policy Notice

The policy: This privacy policy notice is for this website; www.libraries4schools and served by Libraries 4 Schools and governs the privacy of those who use it. The purpose of this policy is to explain to you how we control, process, handle and protect your personal information while browsing or using our website and services, including your rights under current laws and regulations.

Policy key definitions:

• “I”, “our”, “us”, or “we” refer to the business, Libraries 4 Schools.
• “you”, “the user” refer to the person(s) using our services/website.
• GDPR means General Data Protection Act.
• PECR means Privacy & Electronic Communications Regulation.
• ICO means Information Commissioner’s Office.
• Cookies mean small files stored on a user’s computer or device.

Processing of your personal data

Under the GDPR (General Data Protection Regulation) we control and / or process any personal information about you electronically using the following lawful bases.

• We are exempt from registration in the ICO Data Protection Register as we handle limited personal data only for accounts, contacting for requested services and record keeping.

• Lawful basis: Consent
  The reason we use this basis: You have given clear consent for us to process your personal data for a specific purpose, including by making an enquiry.
• We process your information in the following ways: To contact you in response to your enquiry/initial contact.
  Data retention period: We will continue to process your information under this basis until you withdraw consent or it is determined your consent no longer exists.
  Sharing your information: We do not share your information with third parties without your prior and explicit consent.

• Lawful basis: Contract
  The reason we use this basis: This processing is necessary for a contract we have with the individual, or because you have asked us to take specific steps before entering into a contract.
• We process your information in the following ways: For continuing communication and analytical purposes to improve our services.
  Data retention period: We shall continue to process your information until the contract between us ends or is terminated under any contract terms.
  Sharing your information: We do not share your information with third parties without your prior and explicit consent.

• Lawful basis: Legitimate interests
  The reason we use this basis: This processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
  We process your information in the following ways: To contact with regards to legitimate interests relevant to the company (e.g. children’s books, libraries, etc.), such as book events or opportunities.
  Data retention period: We will continue to process your information under this basis until it is determined that it is no longer necessary, or until you request otherwise.
  Sharing your information: We do not share your information with third parties without your prior and explicit consent.

If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.

Your individual rights

Under the GDPR your rights are as follows. You can read more about your rights in detail here;

• the right to be informed;
• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restrict processing;
• the right to data portability;
• the right to object; and
• the right not to be subject to automated decision-making including profiling.

You also have the right to complain to the ICO [www.ico.org.uk] if you feel there is a problem with the way we are handling your data.

We handle subject access requests in accordance with the GDPR.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Internet cookies

We use cookies on this website to provide you with a better user experience. We do this by placing a small text file on your device / computer hard drive to track how you use the website, to record or log whether you have seen particular messages that we display, and to allow you to connect our website to your social media accounts.

We use a cookie control system which allows you to accept the use of cookies. Some cookies will be saved for specific time periods, where others may last indefinitely. Your web browser should provide you with the controls to manage and delete cookies from your device, please see your web browser options.

Cookies that we use are listed at the bottom of the page.

Data security and protection

We ensure the security of any personal information we hold by using secure data storage technologies and precise procedures in how we store, access and manage that information. Our methods meet the GDPR compliance requirement.

Resources & further information

• Overview of the GDPR – General Data Protection Regulation
• Data Protection Act 1998
• Privacy and Electronic Communications Regulations 2003
• The Guide to the PECR 2003
• Twitter Privacy Policy
• Facebook Privacy Policy
• Google Privacy Policy
• Linkedin Privacy Policy
• Mailchimp Privacy Policy
• Small business GDPR policy template

Privacy Notice Policy Base: v.4.0 May 2018.

Images

All images used on this website and associated social media accounts are done so with the relevant permissions where necessary.

Our Cookies