Daniel Went, sole trader and owner of assessinator.co.uk, recognises that privacy is important. This Privacy Policy applies to the data held within the website database and any other storage location for the running of assessinator. This policy will inform you of your rights and let you what personal information I hold, and how this information is processed and used by me.

Our procedures covering the storage and disclosure of your information are designed to comply with the Data Protection Act 1998 and the General Data Protection Regulation (GDPR).

Our Privacy Principles

Assessinator.co.uk is committed to safeguarding the privacy of your information. By 'your information' we mean any information about you that you provide to us.

• We will only collect and use your information where we have lawful grounds and legitimate business reasons to do so.
• We will be transparent in our dealings with you and will tell you about how we will collect and use your information.
• If we have collected your information for a particular purpose, we will not use it for anything else unless you have been informed and, where relevant, your permission obtained.
• We will not ask for more information than we need for the purposes for which we are collecting it.
• We will continue to review and assess the quality of our information.
• We will implement and adhere to information retention policies relating to your information, and will ensure that your information is securely disposed of at the end of the appropriate retention period (see 'Data Retention').
• We will observe the rights granted to you under applicable privacy and data protection laws, and will ensure that queries relating to privacy issues are promptly and transparently dealt with.
• Any other person or organisation who, now or in the future, is involved in running of assessinator will be informed, checked or trained on their privacy obligations.
• We will ensure we have appropriate physical and technological security measures to protect your information regardless of where it's held.

The categories of data we process

• Personal details
• Contact details
• Education details

 

Data we collect

To provide you with the assessinator.co.uk services, we collect and process the following types of information:

• Your email address to contact you about your assessinator.co.uk account and to allow you to reset your password if necessary
• The name of the school you teach at and the department you work in
• Your login username and password. Your password is stored encrypted
• Sign in information - The date and time of the last two occasions you signed into your user account, and a count of how many times youa??ve signed into your user account. This data assists in investigating account errors or user errors you may have when using assessinator.co.uk. It is also enables us to make sure your information is disposed of according to our retention periods.
• Cookies a?? When you visit assessinator.co.uk, we send one or more cookies a?? a small file containing a string of characters a?? to your computer or other device that uniquely identifies your browser. We use cookies to help make the website work more efficiently and to improve the quality of your experience on assessinator.co.uk, for example, for storing your preferences for how pages display on the site.
• Log information a?? When you access assessinator.co.uk, our servers automatically record information that your browser sends whenever you visit a website. These server logs may include information such as your web request, Internet Protocol address, browser type, browser language, the date and time of your request and one or more cookies that may uniquely identify your browser. This may be used for improving the quality of the service of assessinator.co.uk, and to ensure the technical functioning of the site
• User communications a?? When you send an email to an assessinator email address, or fill out the contact form on assessinator.co.uk, we may retain those communications in order to process your enquiries, respond to your requests and improve our services.

Use of cookies by assessinator.co.uk

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

The table below explains the cookies we use and why.

Cookie	Name	Purpose
Assessinator site cookie acceptance	cookieconsent_status	This cookie is used to record if a user has accepted the use of cookies on the assessinator website.
ASP Session ID	ASPSESSIONID (may appear as the name of the page on the site, for example, departments.asp)	These cookies are essential in order to enable you to move around the website and use its features. Without this cookie, the service you have asked for cannot be provided. More information available here: https://msdn.microsoft.com/en-us/library/ms972338.aspx
Assessinator site settings	schoolID, schoolName, teacher, teacherID, teacherTitle, teacherFirstname, teacherSurname, teacherCode, accountTypeID, accessToView, accessToRemark, prefCurrentDept, prefCurrentClass, prefPageWidth, SchoolServerDomain, SchoolPathToFiles, SchoolStudentsPage, SchoolLoginPage, gridsAvailable, classesAvailable	These cookies are used to identify the user and to record and persist choices and settings made by the user throughout the secure site
Google Analytics	_utma, _utmb, _utmc, _utmz	These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form,www.perfake.me including the number of visitors to the site, where visitors have come to the site from and the pages they visited. More information available here: https://support.google.com/analytics/answer/6004245

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.

To opt out of being tracked by Google Analytics across all websites visit tools.google.com/dlpage/gaoptout

How we process data

How assessinator.co.uk processes data provided by schools, academies and other educational organisations:

• Allowing staff within the school, academy or organisation to add to, store and track the educational progress of the students
• Making data about students available to staff within the school, academy or organisation, to help them support students' education and to work more efficiently.

The basis on which data is processed

• Assessinator.co.uk acts as a Data Processor and the school/academy transferring data to us acts as a Data Controller.
• Maintained schools and academies generally have a lawful basis to process data related to students' education and to transfer it to assessinator.co.uk for processing to pursue their legitimate interests, but our customers are responsible for ensuring they have the necessary measures in place before they transfer data to us.
• Assessinator.co.uka??s lawful basis for processing data is through consent of ita??s users.

Disclosure of your information

We will not share, sell or distribute any of the information you provide to us without your consent, except where disclosure is required or permitted by law.

Assessinator.co.uk will not sub-contract any processing to third parties without the school/academy's written consent. Assessinator.co.uk does not transfer data outside the European Economic Area (EEA) unless the data is being accessed by an assessinator.co.uk user outside the EEA.

If Assessinator.co.uk becomes involved in a merger, acquisition, any form of sale of some or all of its assets, or if it decides to cease its operation, we will ensure the confidentiality of all personal information and provide notice before data is transferred and becomes subject to a different privacy policy

Information security

We take appropriate security measures to protect against unauthorised access to or unauthorised alteration, disclosure or destruction of data. For example, we run tests on the site to check for security flaws, we review how data is stored and collected and will introduce suitable measures to keep data safe where appropriate. We review the storage and hosting of the data, and the processing practices of Assessinator.co.uk.

Within Assessinator.co.uk, access to all data is restricted to Daniel Went and not made available to anyone else.

Data Retention

The following tables shows how long we will store data in different scenarios. The first table applies to users who have an account which is the only one linked to their department on assessinator.co.uk. The second table applies to those users who are linked with other users within their department on the site.

If a usera??s account is linked to a department with no other assessinator users connected to it:

Scenario	Data deletion from live site	Data deletion from backups
The user stops signing in to his/her account.	Between 12 and 18 months after last sign in, the usera??s data and all associated data (including their studentsa?? data) will be deleted	Backups of data containing user-identifiable information will be deleted within 6 months
The user requests their own data is deleted.	Within 5 working days, the usera??s data and all associated data (including their studentsa?? data) will be deleted	Backups of data containing user-identifiable information will be deleted within 6 months
The user requests their students' data is deleted.	Within 5 working days, the student's data and all associated assessment data will be deleted	Backups of data containing user-identifiable information will be deleted within 6 months
The user has not deleted student data after the student finishes KS5	A student's data will be deleted within 1 year of him/her reaching post-Key Stage 5 age.	Backups of data containing user-identifiable information will be deleted within 6 months
The user stops a paid subscription	Data will not be deleted until such time as other Data Retention conditions are met. The account will continue as a free account.	Not applicable

The usera??s account is linked to a department which has other users connected to it:

Scenario	Data deletion from live site	Data deletion from backups
The user stops signing in to his/her account.	Between 12 and 18 months after last sign in, the usera??s data and account will be deleted, after notification is given to the other users within the department. No student or assessment data will be removed as a result of this.	Backups of data containing user-identifiable information will be deleted within 6 months
The user requests their own data is deleted.	Within 5 working days, the usera??s data will be deleted. No student data or assessment data will be deleted as a result of this. The other users within the department will be notified.	Backups of data containing user-identifiable information will be deleted within 6 months
The user requests their students' data is deleted.	Within 5 working days, Assessinator.co.uk will seek approval from the school / department users before carrying out the request. If approval is given, student data and assessments will be deleted within 5 working days of approval.	Backups of data containing user-identifiable information will be deleted within 6 months
The user has not deleted student data after the student finishes KS5	A student's data will be deleted within 1 year of him/her reaching post-Key Stage 5 age.	Backups of data containing user-identifiable information will be deleted within 6 months
A user, department or school/academy stops a paid subscription	Data will not be deleted until such time as other Data Retention conditions are met. The account(s) will continue as a free account	Not applicable

Your rights

The General Data Protection Regulation (GDPR) outlines several rights. More information about these rights, including the conditions under which they apply, can be found on this page: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/

You have the right to:

• Ask for access to, or rectification or erasure of your data.
• Restrict processing (pending correction or deletion).
• Object to communications or direct marketing.
• Lodge a complaint with the Information Commissioner's Office at https://ico.org.uk/concerns/

You should address such requests to ask@assessinator.co.uk.

None of the data within the Assessinator.co.uk site is subject to the right for data portability.

Assessinator.co.uk does not carry out any profiling or automated decision making with a "legal or similarly significant effect"

Questions and complaints

Assessinator.co.uk regularly reviews its compliance with this Privacy Policy. Please feel free to direct any questions or concerns regarding this Privacy Policy or Assessinator.co.uka??s treatment of personal information by contacting us at ask@assessinator.co.uk, or by writing to us at:

Assessinator
41 Swallow Court
St Neots
PE19 1NP

When we receive formal written complaints at this address, we will contact the complainant regarding his or her concerns. We will cooperate with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that cannot be resolved between Assessinator.co.uk and an individual.

Changes to this Privacy Policy

Please note that this Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent, and we expect most such changes will be minor. Regardless, we will post any Privacy Policy changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes). Each version of this Privacy Policy will be identified at the top of the page by its effective date, and we will also keep prior versions of this Privacy Policy in an archive for your review.