Privacy Policy

Who is the Data Controller and the Data Processor for the personal information you provide to the Sustainability Support for Education website?

The Sustainability Support for Education service is an initiative commissioned by the Department for Education. The Department for Education (“the department”) is therefore the data controller for any personal information that you provide whilst using the Sustainability Support for Education service.

To deliver the service, the department is working with a number of partners who will act as Data Processors for the personal information that you provide. The department is responsible for determining the purposes and means by which these data processors will process your personal data, but broadly speaking, this will be for the purpose of delivering the Sustainability Support for Education service.

Appropriate Data Processing Agreements and Data Sharing Agreements are in place between the department and all partners who will have access to personal data in order to deliver the programme.

A full list of partners who may act as Data Processors for the personal information you provide are as follows:

TPXimpact
Blue Marble
United Learning

As the lead partner delivering the programme, TPXimpact may also share the information collected with relevant suppliers, for example: Google Forms which we will use to gather feedback on the service; Google Firebase Hosting where we will store a users profile and manage account authentication; email distribution tools for example: Mailchimp which we will use to manage mailing lists; and analytical services that enable us to evaluate use of the Sustainability Support for Education website and improve its performance and content (Plausible). If we share your information with other suppliers, at that point your data will be in handled accordance with their privacy policies.

What data will be collected, how it will be used and what lawful basis is used to process the information?

If you choose to register with Sustainability Support for Education we will collect the following information, some of which includes your personal data:

Name
Email address
Job title
Postcode of educational setting
Information about your estate
Priorities for your setting

Where you are registering to create a login for the Sustainability Support for Education Service, the collection and processing of your personal information is required by the department and other project partners for the purpose of administering, managing and evaluating the programme, and contacting you about Sustainability Support for Education. This may include sending you both email updates about the service and newsletters about sustainability issues. The information may also be used to contact you to ask for feedback on the service.

For the purpose of research and analysis, including evaluation of the programme, we will link the personal data that you provide to an associated education setting. We will then anonymise that data, so that you are no longer associated with the setting, and conduct analysis of the associated setting. For example, we may aggregate the associated settings and seek to understand the usage of the service by characteristics such as setting type, geography, socio-economic status, sustainability maturity. We will be using this data to both enhance performance of the website, and inform further strategy and policy thinking.

If you are not registering to create a login for the Sustainability Support for Education Service but are interested in signing up to stay informed about the service, provide feedback, or find out about opportunities to submit resources, then we will only collect the following information, which is your personal data:

Name
Email address

The lawful basis for the collection and processing of this information is your consent. This information will be used to send you update emails about Sustainability Support for Education. You can contact us at [email protected] to opt out of these at any time.

How long will your personal data be held for?

The Sustainability Support for Education service is currently planned to run until 2026. Where it is necessary to retain personal data for the above purposes, your data will be retained for the duration of the service required. Thereafter, the department will only retain any personal data where it is required for audit purposes for up to seven years.

How will your personal data be kept safe and secure?

The personal data that you provide via the Sustainability Support for Education website is kept safe and secure in accordance with the Cyber Essentials security standard. Cyber Essentials is a United Kingdom certification scheme which indicates that a minimum level of protection has been met as regards cyber security. The Cyber Essentials certification is backed by the UK government and overseen by the National Cyber Security Centre.

Will your data be transferred abroad?

Our preference is to use systems and organisations that process and store data within the UK or European Economic Area. Where this is not possible, we will always ensure an adequate level of protection is provided for personal information transferred outside the European Economic Area.

What are your rights under data protection law?

Under data protection law you have the following rights:

to obtain access to, and copies of, the personal data that we hold about you
to require us to correct any inaccurate personal data we hold about you
to require us to restrict our processing of your personal data
to object to us processing your personal data
to object to receiving marketing communications from us
to withdraw your consent to processing of your personal data
to require us to erase your personal data ('right to be forgotten')
to obtain from us the personal data which you have provided, in order to transmit it to another organisation ('data portability')

Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.

For further information about how the department processes personal data and how to contact the department if you would like to exercise any of the above rights, please see the department’s Personal Information Charter.

Why don't you have a Cookies policy?

Cookies are small text files that are sent to your computer by websites that you visit. Websites use cookies to distinguish you from other users of the website. We don't have a cookies policy because we don't track cookies.

We are using a 'cookie-less' solution. We track traffic on our website without collecting any personal data or personally identifiable information. We track overall trends without tracking unique visitors, enabling us to respect the privacy of website visitors.

Changes to this Privacy Notice

This privacy policy may change from time to time in line with legislation or industry developments. We will not explicitly inform our clients or website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes.

Updated 21/08/2024