Privacy Policy
Up A Level York is a trading name registered under the company D&R Games Ltd. All personal information gathered and held by Up A Level York is treated with the care and confidentiality required by the General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This privacy notice sets out the ways in which Up A Level York will collect, use, store and share your data and details the rights you retain in relation to your personal information.
1. Who are we?
For the purposes of processing your personal information in this instance, the data controller is Up A Level York, 26 Market Street, York, YO1 8SJ, email: info@upalevelyork.co.uk.
2. What information do we collect?
For purposes of subscribing to our marketing services, Up A Level York will collect your name, telephone number and email address. For purposes of membership, Up A Level York will collect your name, age, telephone number, email address and geographical location.
3. How do we use your personal information?
The personal information you provide will be used to keep you up to date with services, offers, events, news and other marketing purposes related to Up A Level York. When you a become a member of Up A Level York we will use your personal information for all marketing purposes and to contact you concerning your membership.
4. What legal basis do we have for processing your personal data?
The GDPR requires us to establish a legal basis for processing your information. For the purpose of this privacy notice the processing is covered under GDPR Article 6(a) where the data subject has given clear consent for Up A Level York to use their data for the purposes outlined in Section 3 of this privacy notice. You have the right to withdraw your personal data at any time in accordance with our retention schedule, detailed in Section 8.
5. When do we share your personal data?
Up A Level York will not share your personal data with any third parties.
6. Where do we store and process your personal data?
Personal data collected by Up A Level York will be stored safely and securely on our servers and processed only for the purposes outlined in Section 3 of this privacy notice. Access to the data will be restricted to authorised internal personnel.
7. How do we secure your personal data?
In order to ensure that the safety and security of such data is maintained, we will:
- • protect data against accidental loss
- • prevent unauthorised access to, use of, destruction of or disclosure of the data
- • ensure business continuity and disaster recovery
- • restrict access to personal information
- • conduct Privacy Impact Assessments in accordance with the law and University policies
- • train staff and contractors on data security
- • manage third party risks, through use of contracts and security reviews
8. How long do we keep your personal data?
Personal data collected for purposes of subscribing to our marketing services will be retained by Up A Level York until one month after we receive your instruction to cancel the subscription. Personal data collected for purposes of memberships will be retained by Up A Level York until up to six months after you cancel your membership.
9. What are your rights in relation to your personal data?
Under the UK GDPR, you have a right to:
- • be kept informed as to how we use your data;
- • request a copy of the data we hold about you via a Subject Access Request;
- • update, amend or rectify the data we hold about you;
- • change your communication preferences;
- • ask us to remove your data from our records;
- • object to or restrict the processing of your information
- • raise a concern or complaint about the way in which your information is being used.
10. Any questions or concerns?
If you have any questions or concerns about the way we are collecting and using your personal data we request that you contact us at Up A Level York, 26 Market Street, York, YO1 8SJ, email: info@upalevelyork.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) about the way in which we process your personal data. Details can be found at: https://ico.org.uk.