WHO PROCESSES INFORMATION?
Ark Curriculum Plus is a programme of Ark UK Programmes. Ark UK Programmes is the organisation which is in charge of your personal information. This means that Ark UK Programmes is called the ‘Data Controller’. The postal address for Ark UK Programme is The Yellow Building, 1 Nicholas Road, London, W11 4AN.
All personal data is held in compliance with UK Data Protection legislation, the UK General Data Protection Regulation and with all other laws concerning the protection of personal information, including the Privacy & Electronic Communications Regulations 2003.
We take your data protection seriously, and this Privacy Notice is designed to explain how we use any personal information we collect about you.
If you want to contact us about your personal information you can contact our data protection lead by emailing email@example.com . You can also email Ark UK Programmes’ Data Protection Officer using the email address firstname.lastname@example.org.
The personal data we process may be shared with third parties, where it is necessary for us to do so and we have a lawful basis to do so.
WHY DO WE NEED INFORMATION?
We have the legal requirement, a contractual obligation and a legitimate interest to collect and process your personal data, including those in relation to the following:
We have a good reason for having this information which means it is lawful and so we do not usually need consent to use this information. Sometimes we may want to use data differently and in these cases we may need to gain consent from a user. Where we ask for consent, users can change their mind at any time.
INFORMATION THAT WE COLLECT, PROCESS, HOLD AND SHARE
This includes the following information:
If you are a registered user of MyMastery, or have expressed an interest in Ark Curriculum Plus programmes on our website, and have given us consent to contact you, we may occasionally send you an email to tell you about new features, ask for feedback or keep you up to date with our programme of work.
If you no longer wish to hear from us, you can unsubscribe quickly and easily using the link at the bottom of our emails, or email email@example.com and we will remove you from the list.
Third party websites
HOW LONG DO WE HOLD YOUR PERSONAL INFORMATION?
We only keep your information for as long as we need to, or for as long as the law requires us to. We have established a retention schedule. Please see Storing Data below.
THE LAWFUL BASIS ON WHICH WE PROCESS THIS INFORMATION
The processing of personal data and the identification of a relevant lawful basis of processing is subject to an ongoing review and is consistently being reviewed as part of our efforts to adhere to the principles of data protection.
Personal data is processed using a combination of cloud-based information management systems, cloud storage and sharing facilities, on local file servers and in paper copies. In accordance with data protection legislation it is only retained for as long as is necessary to fulfil the purposes for which it was obtained, and not kept indefinitely.
We have a policy which explains how long we keep information relating to partner schools that we work with. It is called a Data Retention Schedule, and details can be found in the below table.
Ark Curriculum Plus Data Retention Schedule
Document category and basic description
Ark Curriculum Plus Retention Period
CRM data – inclusive of Name, Email address, mobile number, address, emails and phone call summaries
Until no longer needed or requested to be deleted
Platform data – inclusive email address, first and second name
Retained whilst organisation remains a customer. Once an organisation requests all records to be deleted, data will be removed from the back-ups within 45 days.
Retained whilst organisation remains a customer or deleted by user. Once an organisation requests all records to be deleted, data will be anonymised
Signed Customer Agreements
Name, email address
Kept until person unsubscribes / requests to be removed from system
The following document categories are covered under Ark Central Data Retention Schedule and you can request a copy of this schedule by emailing firstname.lastname@example.org: Corporate/ Constitutional, Insurance, Health and Safety, Pension records, Employees/ Administration.
Transfer outside of the European Economic Area (EEA)
We do not normally transfer your information to a different country outside the EEA. However, some of our external third-party support partners are based outside the EEA so their processing of personal data will involve a transfer of data outside the EEA. Whenever we transfer personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented, including:
WHO WE SHARE DATA WITH?
We do not share information about customers with anyone without permission unless the law says we can or should. We use three cloud-based platform providers who would have access to data as part of their service provision to us:
We may also share personal data with:
Any and all breaches of the GDPR, including a breach of any of the data protection principles shall be reported as soon as it is/they are discovered, to the Ark Curriculum Plus Data Protection Officer.
The Data Protection Officer will then assess the extent of the breach and take the appropriate steps and precautionary measure to mitigate any risks to affected individuals.
WHAT ARE YOUR RIGHTS?
Customers have the right to do the following with regards to their own data and their child’s data on their behalf:
If you make a subject access request, and if we do hold information about you, we will:
Ark Curriculum Plus and Ark UK Programmes aims to comply fully with its obligations under the GDPR. If you have any questions or concerns regarding Ark management of personal data including your child’s data subject rights or your data subject rights, please contact the Data Protection Officer (email@example.com) who is responsible for ensuring Ark UK Programmes is compliant with the UK GDPR. If Ark holds inaccurate information about you, please contact Ark Curriculum Plus and / or the Data Protection Officer (firstname.lastname@example.org) explaining what the problem is and where appropriate provide with any evidence to show what the information should say. Keep copies of the correspondence. If after a reasonable amount of time (28 days is recommended) the information has not been corrected, a complaint can be made. If you feel that your questions / concerns have not been dealt with adequately on any data protection matter, please get in touch with us and the matter will be escalated to our Ark Director of Governance. If you remain unhappy with our response or if you need any advice you can contact the Information Commissioner’s Office (ICO). Please visit their website (www.ico.org.uk/concerns) for information on how to make a data protection complaint or contact the ICO at If you are not happy with the outcome, you may wish to contact the Information Commissioner’s Office: the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone – 01625 545 745.