1. Introduction
This privacy notice explains how we use any personal data we collect about you when you use this website or enquire about any of our services via another method, such as telephone, email or in person.
2. Data Controller and contact details
Spirit Studios is the trading name of Spirit SSR Ltd. Spirit SSR Ltd is the data controller of any personal data collected from an enquiry or by this website. Please use the following contact details if you have any questions about our privacy notice or the personal data we hold about you:
- By email: dpo@spiritstudios.ac.uk
- Or write to us at: Data Protection Officer, Spirit SSR Ltd, 65-69 Downing Street, Manchester, M1 7JE, UK
If you wish to opt-out of all marketing, please click here or email opt-out@spiritstudios.ac.uk
3. Personal data for categories of individuals
What personal data do we collect about you?
Personal data refers to any data which relates to or identifies you as an individual. We collect personal data about you when you make an enquiry, register for an event, make an application for one of our courses and subscribe to our newsletter. We only collect the personal data necessary to provide the services that you request.
Our website server can log limited data about you, such as date/time of visit, IP address, browser and operating system. Logging is disabled by default and only enabled for troubleshooting purposes or ascertaining the performance of our systems.
We also use technologies, such as cookies, to personalise content and advertising, to provide social media features and to analyse traffic to our website. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.
When visiting our site, you have the choice to opt-in and allow the use of these cookies or reject them. You can change your choice at any time. Please note that certain features of our website will only function if you opt-in to using cookies, such as embedded audio and video players. Some cookies are necessary for the operation of our website, and it is not possible to opt-out of these.
It is possible to adjust your browser or device controls to block cookies or limit ad tracking. It is also possible to browse websites, including our website, anonymously. Please consult the documentation of your web browser and/or device for more information. The cookies used on our site are:
Necessary:
- GDPR Cookie Consent is a plug-in that is used to store whether or not a user has consented to the use of cookies.
Analytics:
- Google Analytics is a service offered by Google that tracks and reports website traffic and use. Google Analytics privacy notice
- Facebook Pixel is an analytics tool that allows us to measure the effectiveness of our Facebook advertising by understanding the actions users take on our website. It allows us to ensure adverts are being shown to the right people and build advertising audiences. Facebook’s privacy notice
How will we use your personal data?
We collect personal data about you to contact you regarding your enquiry. If you register for an event, we’ll create an attendance register and contact you close to the event with a reminder. If you agree, we will also send you information and updates on news, courses and events, as well as any special offers and marketing content we feel will be of interest to you. This can be by email. Our lawful basis for such processing is by consent. Consent means you have given clear consent for us to process your personal data for a specific purpose. You have the right to withdraw consent for such processing.
Details from an online application are used to secure you a place on the course. We will contact you regarding the course start date and time, and induction information, if applicable. If a payment was made with the application, an account will be made for you in our accounts software. The lawful basis for processing online applications is by contract. This is because the processing of your personal data is necessary to assess your application with a view to creating a contractual relationship with you in the future (i.e. enrolling you on a course as a student). In processing an online application, we may send data to, and use information from, fraud prevention agencies.
Our website server can log personal data about you purely for technical purposes, such as troubleshooting and ascertaining performance of our systems. The lawful basis for this processing is by legitimate interests. The processing is for a legitimate purpose, is necessary and has been balanced against your interests, rights and freedoms.
The information logged during your visit to our website by cookies is used to learn about our visitors as a group, not about you as an individual. This information helps us identify overall usage patterns and trends. The lawful basis for such processing is by consent. Consent means you have given clear consent for us to process your personal data. You have the right to withdraw consent for such processing.
We also backup email, files and documents, calendars, contacts and more on a daily basis. Our lawful basis for such processing is by legal obligation.
How long do we keep your personal data?
All personal data collected about you when you make an enquiry, register for an event or agree to any marketing will be processed indefinitely or until we receive notification that you wish us to erase your data. Personal data collected when subscribing to our E-Newsletter will be processed until you unsubscribe from the service or we receive notification that you wish us to erase your data.
Personal data collected when you make an online application for one of our courses will be kept indefinitely. If your application is unsuccessful or you decide not to study with us for any reason, you may request we erase your personal data. If you enrol on one of our courses, some information collected may need to be processed throughout your studies and cannot be erased.
Details on how to opt-out of marketing is available in the privacy notice on our website.
Any personal data logged by our website server will be stored for 30 days.
Personal data logged from your visits to our website by cookies will be stored for 38 months.
What personal data do we collect about you?
Personal data refers to any data which relates to or identifies you as an individual. We collect personal data about you when you submit an application for one of our academic courses via UCAS or directly with us. Further personal data may be collected throughout the application process, such as during an interview. We only collect the personal data necessary to process your application.
How will we use your personal data?
We process your personal data in a number of ways. We review your application, contact you to arrange an interview, provide offers, review your application for any updates and send offer details to our academic partners. We also keep a centralised spreadsheet to track offers, interviews and acceptances for each courses. Anonymised data is also used to track application numbers against previous years.
How long do we keep your personal data?
Any special category data is deleted from the UCAS Applications Master spreadsheet 6 months after the application process closes. The remaining personal data contained in the spreadsheet is deleted 38 months after the application process closes. After 38 months, we retain statistical information, such as the number of applicants for each course, campus and academic partner at various dates throughout the application process to compare the application numbers to previous and future years.
What personal data do we collect about you?
Personal data refers to any data which relates to or identifies you as an individual. We collect personal data when you apply for a job at Spirit Studios. We only collect the personal data necessary to undertake the processes outlined below.
How will we use your personal data?
We’ll review your application, check your suitability and whether you meet the minimum requirements of the position and contact your referees. Following these processes, we’ll contact you to arrange an interview. After the interview, successful candidates will be contacted with details relating to employment and the induction process. Unsuccessful candidates will also be informed.
We consider the processing of your personal data for the above purposes to be either necessary for us to to take steps to creating a contractual relationship with you (i.e. process your application and arrange and interview) or necessary for legal obligations.
How long do we keep your personal data?
If you are successful with your application, your personal data will be verified during induction. Personal data will be retained throughout your employment as detailed in the staff privacy notice.
If you are not successful with your application, we will keep your personal data on file for 12 months in case the position becomes available again, or another position becomes available that we feel may be of interest to you. After 12 months your personal data will be deleted. Please inform us if you wish us to delete your information sooner.
What personal data do we collect about you?
Personal data refers to any data which relates to or identifies you as an individual. We collect personal data from school contacts directly. Such data will include name, email address, phone number and school address.
How will we use your personal data?
We process your personal data in a number of ways. We will use your personal data to arrange any visits, whether they be at Spirit Studios or your school/college. We may also provide you with information and updates on news, courses and events, as well as any special offers and marketing content we feel will be of interest to you and your students. Such marketing correspondence would be by Email.
How long do we keep your personal data?
All personal data collected on school contacts will be kept indefinitely or until we detect inaccuracy with the data or receive notification that you or the school wishes us to erase their personal data.
4. Your rights
- Right to be informed – This privacy notice outlines how we process your personal data.
- Right of access – You have the right to obtain confirmation that your personal data is being processed by us, as well as request a copy of the personal data we have on you. We may make a small charge for requests that are considered unfounded or excessive.
- Right to rectification – We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.
- Right to erasure – You can request that the deletion or removal of personal data where there is no compelling reason for its continued processing.
- Right to restrict processing – You have the right to block the processing of personal data under certain circumstances. This would allow us to continue to store your personal data but not further process it.
- Right to data portability – You have the right to obtain and reuse the personal data we store on you for your own purposes across different services.
- Right to object – You have the right to object to us processing your personal data for direct marketing and we will stop such processing when receive an objection from you. You also have the right to object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority. You must have an objection on grounds relating to your particular situation. We will stop such processing unless we can demonstrate legitimate grounds for the processing, or that the processing is for the establishment, exercise or defence of legal claims.
- Rights related to automated decision making – We do not process any of your personal data with any wholly automated decision-making systems, nor do we carry out any profiling.
5. International transfers
We use external providers, including cloud service providers, to process, store and backup data. Usually, data is stored at data centres located in the UK or EU but in exceptional circumstances may be processed in other countries. Your personal data will only be transferred to countries whose data protection laws have been deemed adequate by the European Commission, or where safeguards are in place to protect your personal data. Such safeguards include the EU-US Privacy Shield framework and Standard Contractual Clauses.
6. Children’s personal data
Consent needs to be obtained from a parent or guardian to process the personal data of a child aged 16 or under for any information society service or for the purposes of marketing.
7. Changes to our privacy notice
We keep our privacy notice under regular review and we will place any updates on this webpage. This privacy notice was last updated in September 2022.
8. Supervisory Authority
If you believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).