Who we are
We are The School, London – a drama school based in London, UK. Our website address is: https://theschoollondon.co.uk.
What personal data we collect and why we collect it
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
If you contact us using one of the contact forms on the website, personal data including your name and email address will be captured and used for the purpose of responding to your enquiry. Data may be stored for up to 18 months for the purposes of customer service. Data captured in this way will not be used for marketing or any other purpose, unless you have checked the box indicating that you are happy to be contacted by us regarding future opportunities. If you have opted to join our mailing list, you may unsubscribe at any time.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Who we share your data with
Our website is covered by Akismet anti-spam service. Akismet collects information about visitors who comment on the site. This information typically includes the commenter’s IP address, user agent, referrer, site URL along with other information directly provided by the commenter, e.g. name, username, email address and comment.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
If you fill in a contact form or an enquiry form on this site, your name and contact details will be collected by us and may be retained for up to 18 months for customer service purposes. Details collected in this way will not be used for marketing purposes, unless you have checked the box to say that you are happy to receive information from us in the future regarding further courses and training opportunities.
If you check the box on one of our forms to indicate that you are happy to receive information from us in the future, your name and contact details will be retained for marketing purposes and you will from time to time receive promotional emails from us. In this instance, data may be retained for up to 5 years, although you may unsubscribe at any time and all emails will include a reminder of this fact. Once unsubscribed, all such data will be deleted.
If you fill in an application form for one of our courses, details including your name and contact information will be retained by us for the purposes of processing your application and may be kept on file for up to 2 years for the purposes of customer service and record keeping.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
If you have any concerns regarding data protection, please contact our nominated Data Protection Officer, Sarah Kelly, via firstname.lastname@example.org or 07908892235.
How we protect your data
We have made every effort to ensure that our website and our company practices are compliant with GDPR. Our website has an up to date SSL certificate to enhance security on the site and ensure our visitors’ data is kept safe. Any data retained by us as a company (e.g. names and contact details of applicants and those who have opted to join our mailing list) are stored securely in a file that is password protected and to which only 2 people have access. We have a nominated Data Protection Officer who is responsible for ensuring that our data processing is GDPR compliant and all staff members have received basic training in data protection.
What data breach procedures we have in place
The nominated Data Protection Officer is responsible for monitoring the company’s data processing and ensuring that any potential data breaches are reported both internally (to the Director of The School) and to the ICO, in line with current legislation and best practice. Any data breach (or suspected data breach) will be reported immediately.
What third parties we receive data from