At Worldly Wise we are dedicated to bridging the gap between education and career readiness. By partnering with local businesses, we provide schools with unique opportunities to enhance their students’ learning experiences. Our programs are designed to inspire and prepare students for future careers.

We operate as a data controller and are registered with the Information Commissioner, Registration Number 00016343809

This privacy notice explains why we need to use your personal information and how we keep it safe.

Our contact details

Email: info@worldly-wise.org

Why we need to process your personal information.

We need to collect, process and sometimes share your information to enable us to establish a contract with you for communication, and for collecting feedback. The feedback you provide is mainly sought in relation to your experiences when taking part in our programme, however, you may choose to include information about your broader experiences such as personal welfare, safety and fear of crime.

The type of data we collect.

Most of the data we collect is to enable us to establish and maintain a relationship with you, to organise and plan events, and to seek feedback and resolve complaints.
Type of personal data Places where these may normally be collected
Your full name and contact details, including email address, telephone number, postal address, unique education reference number, and information about any special requirements you may have such as access needs

When providing feedback that extends beyond the services we provide which might relate to your personal perception relating to your safety, fear of crime or being a victim of crime, the information you provide must not include the personal information of others. If a person or persons known to you are causing you concern you should contact the relevant public authority, such as a teacher, social worker or the police.

When:

• Making enquiries with us
• When setting up a contract with us
• When attending our programmes
• For maintaining communications
• For resolving complaints or dissatisfaction
• When you provide us with feedback via our online feedback form

Digital Images When:

• You attend one of our programmes we may require your digital image for identification purposes
• If you agree to appear in a feature published online, through digital communications, or in the media

Our Legal Basis

Article 6(1)(a) Consent

When our processing involves the use of digital images for identity and promotional purposes.

Article 6(1)(b) Establishing a Contract.

Processing is necessary to establish and maintain a contractual arrangement with you, including setting up account credentials.

Article 6(1)(f) Legitimate Interests

Processing is necessary for the purpose of the legitimate interests of you, ourselves, and other interested third parties involved in our programmes, such as schools, local authorities and other relevant public authorities.

Article 9(1)(a) Your Explicit Consent.

If due to medical or religious beliefs you require us to make special arrangements to facilitate your attendance at an event.

It is not our intention to process other special category or criminal data, however, it may be disclosed to us by programme participants inadvertently. In such circumstances we will take steps to refer the matter to the relevant public authority, when doing so we would apply the following legal basis.

Article 9(2)(g) Processing is necessary for reasons of substantial public interest on the basis of law. Including Data Protection Act 2018, Schedule 1, Part 1 to 3, safeguarding children and adults at risk, preventing and detecting unlawful acts.

 

How we keep your information safe.

Your privacy is important to us, we fully understand the duty we must exercise to protect it. We take appropriate organisational and technical steps to safeguard it, including:

• Restricting access to your data to only those who require it when providing you with services
• Access to the personal data we process is password protected
• Proportionate technical preventative solutions are installed on our systems
• Using encrypted computers
• Ensuring our staff are trained and understand potential risks
• By using adequate physical security at our premises and when working remotely
• When transferring data to a third party, sending it by securely using encryption or password protection or a reliable secure courier
• When taking files and records off site for business purposes
• When deleting or destroying records or dispensing with IT equipment

How long we keep information

We keep your data for no longer than is necessary for our purposes, or for any period required by law; for example for compliance with HMRC requirements, if this is longer. What is necessary will depend on the reason for which the information was collected. Maximum retention periods:

6 months – short term business use e.g. requests for information

2 years after the last activity – engagements such as surveys, website users who have not signed in, Business Ambassadors who have not done activities.

6 years after the end of the activity – e.g. Business ambassador activities, placement participation information, impact data

Regulatory lifetime – Data assets, normally related to finance, which are required to be held to comply with other legislation or regulatory requirements.

If you have any questions about how long we keep your information, contact us at info@worldly-wise.org

Who we share information with

Other organisations
• Organisations we need to share information with for safeguarding reasons
• Professional or legal advisors
• Relevant regulatory authorities
• External auditors or inspectors
• Organisations we’re legally obliged to share personal information with
• Emergency services (where necessary)
• Publicly on our website, social media or other marketing and information media (where appropriate)
• External data processors who support and manage our technology
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal data

Your right to rectification – You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete

Your right to erasure – You have the right to ask us to erase your personal data in certain circumstances

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal data in certain circumstances

Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances

Your right to data portability – You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances

Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent

You don’t usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint

Last updated
28 August 2024