Privacy Policy
1. Introduction
We, National Numeracy, take the protection of your personal data very seriously and strictly adhere to the rules laid out by data protection laws and General Data Personal Regulation (GDPR).
This privacy notice aims to give you information on how National Numeracy collects and processes your personal data through your interaction with our websites under the domain https://www.nationalnumeracy.org.uk/, including engaging with the National Numeracy Challenge, our various Programs, or by entering into a relationship with us, for the delivery of our services and comply with legal requirements.
We have appointed a Data Protection Officer (DPO) who is responsible for monitoring and providing guidance with our GDPR status. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the DPO using the contact information laid out in section 9 of this privacy notice.
2. Who you are
The types of personal data we process, our purpose and the lawful basis for processing as well as how we make use of the data depends upon the relationship you have with us.
In the sections that follow we have outlined the type of personal data we collect and how we collect it, the purposes for which we process personal data and our lawful bases for our different relationships. Please select the relevant section for you from the list below, based on the relationship you have with us:
A. Website Visitors
B. Programme Participants
C. Case Studies
D. Ambassadors
E. Competition Participants
F. National Numeracy Challenge
G. Volunteers
H. Teachers
I. Parents and Pupils
J. Our Business Partners, Customers and Their Employees
K. Our Contractors, Suppliers and Their Employees
L. Events, Campaigns and promotion activity
M. Our Employee Candidates (Recruitment)
N. Third Party Databases
A) Website visitors
1. Why we collect your personal information
- For operational purposes such as operating our website and ensuring it is presented in the most effective manner for you and for your computer or device
- For the purpose of managing our relationships, communicating with you (excluding communicating for the purposes of direct marketing) by email, providing support services and complaint handling
- Where you have consented to be contacted for such purposes, for the purposes of creating, targeting and sending communications by email, including sending of our newsletter or to provide you with information, resources or services to help support you in your numeracy improvement journey
- For the purpose of researching and analysing the use of our websites and services so we can improve the offer for our beneficiaries
- For the purpose of allowing you to participate in interactive features of our service, when you choose to do so
- For the purposes of creating and maintaining our databases, back-up copies of our databases and our business records generally
- For ensuring the safe operation and monitoring the performance of our website.
- For notifying you about the changes to our service
2. Lawful basis of processing personal information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- The data subject (you) has given consent to the processing activity taking place.
- If the processing is necessary for the performance of a contract.
- If the processing is necessary for compliance with a legal obligation to which the controller is subject.
- If the processing in necessary for the purpose of the legitimate interest pursed by us or our partners.
Where legitimate interest is identified as a lawful basis, we will undertake a legitimate interest assessment which is a three-part test covering:
The purpose test – to identify the legitimate interest
Necessity test – to consider if the processing is necessary for the purpose identified
Balancing test – considering the individual’s interests, rights or freedoms and whether these override the legitimate interests identified.
3. What information do we collect and where from?
We collect personal information from you, when you interact with our websites under the under the domain https://www.nationalnumeracy.org.uk/, including engaging with the National Numeracy Challenge or any other programme page, subscribe, or enquire about any of our services. The categories of personal information that we may collect, store and use about you include:
Information about your activity on our site including Information that you provide by filling in forms on our website, this includes information provided at the time of registering to use our site, subscribing to receive one of our newsletters or requesting further services. We may also ask you for information when you report a problem with our site.
- Your details for sending out newsletters
- Records of your correspondence with us
- School / Company Name
- Contact information such as email addresses
- System Information, such as IP Address, Browser type & version, operating system
For more information please see Section 3
B) Programme participants
1. Why we collect your personal information
As a participant in National Numeracy programmes, your personal data will be processed in accordance with the explicit purposes determined under each programme. Specifically:
- For facilitating your sign up to and participation in the activities of the Parental Engagement Programme including delivery of Family Maths scrapbooks
- For facilitating your sign up to the Becoming a Numeracy Champion programme
- For facilitating your sign up to Confidence with Numbers and Parents sessions.
- The charity National Numeracy receives government funding, via local authorities, to support adults with improving their numeracy. We may share data with your local authority, the Department for Education (England) or the Department for Levelling Up, Housing & Communities (Scotland and Wales), so that the Department for Education and the Department for Levelling Up, Housing & Communities are able to monitor the impact of their funding. See the Department for Education’s Personal Information Charter and Department for Levelling Up, Housing & Communities Personal Information Charter the for more detail about how your personal data will be used.
- For informing organisations and /or business partners who fund programmes, to allow them to monitor the impact of funding.
- For the recording of Becoming a Numeracy Champion sessions and sharing with project founders and the public on social media for the purposes of celebration and promotion
- For generating statistical data and reports on the participation of numeracy programmes so that we can effectively monitor and evaluate all our programmes and constantly improve them
- For collecting your feedback and opinions for the purposes of research and evaluating the impact of the programmes such as through feedback forms or surveys
- For the facilitation of reasonable adjustments in accordance with your needs to participate in the programmes and/or attend in person or online workshops and trainings
- For the purpose of managing our relationships, communicating with you (), providing support services and complaint handling
- For the purposes of capturing photographs of activities in schools and community settings to increase engagement and promotion
2. Lawful basis of processing personal information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- The data subject (you) or your parental guardian has given consent to the processing activity taking place.
- If the processing is necessary for the performance of a contract.
- If the processing is necessary to carry out a public task.
- If the processing in necessary for the purpose of the legitimate interest pursed by us or our partners.
Where legitimate interest is identified as a lawful basis, we will undertake a legitimate interest assessment which is a three-part test covering:
The purpose test – to identify the legitimate interest
Necessity test – to consider if the processing is necessary for the purpose identified
Balancing test – considering the individual’s interests, rights or freedoms and whether these override the legitimate interests identified.
3. What information do we collect and where from?
- Identification information such as name, surname, demographic such as date of birth, gender
- Contact information such as email addresses, postal address, town, city, county, location.
- Information about numeracy levels such as whether you have a maths qualification, skills level, and confidence with numbers
- Information about the name of school, organisation, job role
- Information about your opinion about the programme such as your survey responses or feedback
- Your photographs as taken by yourselves for the provision of our training sessions
- Your videos as may be recorded when delivering some of the programs
We may also collect your data through Third Parties such as your School or Local Authorities for the purposes of registering you in one of the above-listed programmes. This data collection will include your name, email, job role, organisation/school. In the case of our Parental Engagement Programme, we may obtain the participant's i.e. the pupil’s name, class, school and numeracy level from their teacher.
3.1 Special category data
Depending on what is requested from our partners, local authorities we may also collect some special category data from you. These may include:
- Health information such as accessibility needs, disability information, other health related problems
- Ethnicity information for producing diversity statistics
We will only process special category data where we have an Article 9 exception allowing us to do so, in this case, Explicit Consent which is collected via the consent forms. Where you have given consent for processing, or explicit consent in relation to the processing of special category data, you have the right to withdraw this consent at any time by contacting enquiries@nationalnumeracy.org.uk, but this will not affect the lawfulness of processing based on consent before its withdrawal.
For more information please see Section 3
C) Case studies
1. Why we collect your personal information
As a beneficiary or participant of National Numeracy’s works, your personal data will be processed in accordance with the below purposes, and to celebrate the impact National Numeracy had in supporting hundreds of thousands of people across the country to improve their number confidence and skills, based on your consent.
- For the promotion and celebration of National Numeracy and our work by using your story and images on the National Numeracy website, leaflets, social media and publications.
- For the purpose of managing our relationships, communicating with you (excluding communicating for the purposes of direct marketing), providing support services and complaint handling
2. Lawful basis of processing personal information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- The data subject (you) has given consent to the processing activity taking place.
3. What information do we collect and where from?
- Identification information such as name, surname, date of birth
- Contact information such as email addresses, telephone numbers
- Information about topics covered, material gathered and willingness to talk to the media
- Information about the name of school, organisation
- Your images as taken by yourselves or National Numeracy for the promotion of your case study
3.1 Special category data
We ask for your health data such as learning difficulties and preferred pronouns. We will only process special category data where we have an Article 9 exception allowing us to do so, in this case, Explicit Consent which is collected via the consent forms communicated to you through the Case Study Permission form.
Where you have given consent for processing, or explicit consent in relation to the processing of special category data, you have the right to withdraw this consent at any time but this will not affect the lawfulness of processing based on consent before its withdrawal. If you would like us to stop using the material gathered at any time please let us know by emailing enquiries@nationalnumeracy.org.uk or phoning the office on 01273 915044.
For more information please see Section 3
D) Ambassadors
1. Why we collect your personal information
- For the promotion and celebration of National Numeracy and our work by using your story and images on the National Numeracy website, leaflets, social media and publications.
- For the purpose of managing our relationships such as by sending gifts to you, communicating with you (excluding communicating for the purposes of direct marketing) by email, SMS, post, fax and/or telephone, providing support services
2. Lawful basis of processing personal information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- The data subject (you) has given consent to the processing activity taking place.
3. What information do we collect and where from?
- Identification information such as name, surname
- Contact information such as email addresses, telephone numbers, home address
- Information about your background
- Your photographs
For more information please see Section 3
E) Competition participants
1. Why we collect your personal information
- For the running of various national numeracy competitions and facilitating your sign up to competitions
- For the purpose of managing our relationships such as by sending your competition prize, communicating with you (excluding communicating for the purposes of direct marketing) by email, SMS, post, fax and/or telephone, providing support services
- When a prize draw is run in conjunction with your employer or local authority to facilitate prizes or celebration
2. Lawful basis of procession personal information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- The data subject (you) or your parental guardian has given consent to the processing activity taking place.
3. What information do we collect and where from?
- Identification information such as name and age
- Contact information such as email addresses
- Additional information as required by the competition, your employer or local authority
- Your photographs/videos
For more information please see Section 3
F) National Numeracy Challenge
1. Why we collect your personal information
- For facilitating your sign up to and participation in the National Numeracy Challenge
- The charity National Numeracy receives government funding, via local authorities, to support adults with improving their numeracy. We may share data with your local authority, the Department for Education (England) or the Department for Levelling Up, Housing & Communities (Scotland and Wales), so that the Department for Education and the Department for Levelling Up, Housing & Communities are able to monitor the impact of their funding. See the Department for Education’s Personal Information Charter and Department for Levelling Up, Housing & Communities Personal Information Charter the for more detail about how your personal data will be used.
- For informing organisations, educational institutions, business partners, your employer of your progress on the website so that they can provide support as needed or monitor participation.
- For the creation and management of your user accounts including for tracking and supporting you through your journey
- For the issuance of your certificates after successful completion of the National Numeracy Challenge and for the completion of check of numeracy skills
- For collecting your feedback and opinions for the purposes of research and evaluating the impact of the programs such as through feedback forms or surveys
- For the purpose of managing our relationships, communicating with you (excluding communicating for the purposes of direct marketing) by email for example about your progress on the National Numeracy Challenge.
- Where you have consented to be contacted for such purposes, for the purposes of creating, targeting and sending communications by email, including sending of our newsletter or to provide you with information, resources or services that you request from us or which we feel may interest you and help you in your numeracy improvement journey
- For the purpose of researching and analysing the statistics of the National Numeracy Challenge, improve our understanding of numeracy in the UK and how it changes with time. This will sometimes include linking the information you provide to other data held about you elsewhere, so that we can understand how numeracy relates to other demographic factors across the UK including diversity. This research will be published as anonymous summaries.
2. Lawful basis of processing personal information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- The data subject (you) has given consent to the processing activity taking place.
- If the processing is necessary for the performance of a contract.
- If the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Where data is shared with local authorities, the Department for Education (England) or Department for Levelling Up, Housing & Communities (Scotland and Wales), the Department for Education (England) or Department for Levelling Up, Housing & Communities (Scotland and Wales) is the data controller for your personal data.
- If the processing in necessary for the purpose of the legitimate interest pursed by us.
Where legitimate interest is identified as a lawful basis, we will undertake a legitimate interest assessment which is a three-part test covering:
The purpose test – to identify the legitimate interest
Necessity test – to consider if the processing is necessary for the purpose identified
Balancing test – considering the individual’s interests, rights or freedoms and whether these override the legitimate interests identified.
3. What information do we collect and where from?
We collect your personal data when you register for and use the National Numeracy Challenge. The types of data we collect may differ based on the requirements of our partners such as local authorities. Generally, we may collect and process the following information about you.
- User account information such as name, surname, email address, user ID
- Demographic information such as gender, year of birth or date of birth, postcode, local authority area
- Records of activities and data from assessments taken in the National Numeracy Challenge
- Information about correspondence between you and us
- Level of math qualification information
- Other information from your interaction with the NN Challenge, services, content and advertising, including computer and connection information, statistics on page views, traffic to and from the NN Challenge, ad data, IP address and web log information
We may also collect your data through Third Parties such as our Business Partners for the purpose of registering you in the National Numeracy Challenge. This data collection will include your name and email address.
If you create an account on the National Numeracy Challenge using a third party service ie Google or Facebook, that third party sends us - National Numeracy - the information we need to create an online account for you. We will obtain your name and your email address which will be stored securely. The third party will then be able to see that you have created an account with us and may use this information in the ways described in their own privacy statements. Following registration, we may use this email address to send you emails to encourage you to improve your numeracy on our site. We may also collect and process other information as described in elsewhere in this policy.
For more information please see Section 3
G) Our volunteers
As a volunteer of National Numeracy, you have already been provided with the Volunteering Privacy Notice and the Consent form upon the launch of our volunteering program. This privacy notice gives you information on how we collect and process your personal data at during the course of the volunteering process.
You can find this document here
H) Teachers
As a teacher in one of our partnered institutions, your personal data will be processed in accordance with the below purposes, during the course of your participation in a National Numeracy Programme.
1. Why we collect your personal information
- For facilitating your sign up to and participation in a National Numeracy Programme
- For collecting your feedback and opinions for the purposes of research and evaluating the impact of the programs such as through feedback forms or surveys for a National Numeracy Programme
- For the purpose of managing our relationships, communicating with you (excluding communicating for the purposes of direct marketing) by email
2. Lawful basis of processing personal information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- The data subject (you) has given consent to the processing activity taking place.
- If the processing in necessary for the purpose of the legitimate interest pursed by us.
Where legitimate interest is identified as a lawful basis, we will undertake a legitimate interest assessment which is a three-part test covering:
The purpose test – to identify the legitimate interest
Necessity test – to consider if the processing is necessary for the purpose identified
Balancing test – considering the individual’s interests, rights or freedoms and whether these override the legitimate interests identified.
3. What information do we collect and where from?
We collect your personal data when you sign up to and within the course of the Parental Engagement and Volunteering programmes. We may collect and process the following information about you:
- Identification information such as name and surname
- Contact information such as email
- Name of school
- Feedback about the programme
3.1 Special category data
We collect health data such as your allergies and dietary requirements. We will only process special category data where we have an Article 9 exception allowing us to do so, in this case, Explicit Consent which is collected via the consent forms.
Where you have given consent for processing, or explicit consent in relation to the processing of special category data, you have the right to withdraw this consent at any time by contacting enquiries@nationalnumeracy.org.uk, but this will not affect the lawfulness of processing based on consent before its withdrawal.
For more information please see Section 3
I) Parents and pupils
1. Why we collect your personal information
- For facilitating your attendance to National Numeracy events such as by managing our communications with you
- For the promotion of National Numeracy events and workshops such as through the publication of photographs
- For adjusting to your dietary requirements and allergies to ensure your safety and well-being
- For collecting your feedback and opinions for the purposes of research and evaluating the impact of the programmes such as through feedback forms or surveys.
2. Lawful basis of processing personal information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- The data subject (you) or your parental guardian has given consent to the processing activity taking place.
3. What information do we collect and where from?
We collect your personal data when you sign up to and within the course of the Parental Engagement and programmes or via referrals. We may collect and process the following information about you:
- Identification information such as name and surname
- Contact information such as email, telephone number
- Name of school
- Photographs taken during the events
- Feedback about the programme
For more information please see Section 3
J) Our business partners, customers and their employees
1. Why we collect your personal information
- For the purpose of looking for new prospects such as becoming partners in the future
- For the purpose of managing sales processes
- For the purpose of managing our relationships, communicating with you (excluding communicating for the purposes of direct marketing)
- For the promotion of National Numeracy events and workshops such as through the publication of photographs
- For adjusting to your dietary requirements and allergies to ensure your safety and well-being
- For facilitating your participation in the National Numeracy Day Campaign
2. Lawful basis of processing personal information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- The data subject (you) has given consent to the processing activity taking place.
- If the processing is necessary for the performance of a contract.
- If the processing in necessary for the purpose of the legitimate interest pursed by us.
Where legitimate interest is identified as a lawful basis, we will undertake a legitimate interest assessment which is a three-part test covering:
The purpose test – to identify the legitimate interest
Necessity test – to consider if the processing is necessary for the purpose identified
Balancing test – considering the individual’s interests, rights or freedoms and whether these override the legitimate interests identified.
3. What information do we collect and where from?
We collect your personal data when you sign up to our programs or events , through publicly available sources, referral or Hopscotch Consulting. We may collect and process the following information about you:
- Identification information such as name and surname
- Contact information such as email, telephone number
- Job Title
- Organisation
- Photographs taken during the events
3.1 Special category data
We collect health data such as your allergies and dietary requirements. We will only process special category data where we have an Article 9 exception allowing us to do so, in this case, Explicit Consent which is collected via the consent forms communicated to you by email or Typeform.
Where you have given consent for processing, or explicit consent in relation to the processing of special category data, you have the right to withdraw this consent at any time by contacting enquiries@nationalnumeracy.org.uk, but this will not affect the lawfulness of processing based on consent before its withdrawal.
For more information please see Section 3
K) Our contractors, suppliers and their employees
1. Why we collect your personal information
- For the issuing and tracking and invoices and where we need to perform the contract we have entered with you such as by making payments.
- For the purpose of managing our relationships, communicating with you (excluding communicating for the purposes of direct marketing)
2. Lawful basis of processing personal information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- If the processing is necessary for compliance with a legal obligation to which the controller is subject.
- If the processing is necessary for the performance of a contract.
3. What information do we collect and where from?
We collect your personal data when you sign up to our programmes or events, through publicly available sources or referrals. We may collect and process the following information about you:
- Identification information such as name and surname
- Contact information such as email, telephone number
- Job Title, company address
For more information please see Section 3
L) Events, Campaigns and promotion activity
1. Why we collect your personal information
- Where you have consented to be contacted for such purposes, for the purposes of creating, targeting and sending communications by email for purposes relating to events, campaigns and competitions designed to encourage engagement with numeracy improvement, including sending of our newsletter or to provide you with information, resources or services that you request from us or which we feel may interest you For the purpose of researching and analysing the use of our websites and services, as well as researching and analysing other interactions with our business.
- To support and promote numeracy improvement across the country, the charity National Numeracy works with partner organisations that serve different parts of the UK. We may ask for your permission to share your data with local, regional or national organisations and government agencies, so that they can contact you about your involvement in our work and campaigns and can continue conversations with you about numeracy improvement for yourself and others.
- For the purpose of researching and analysing the use of our websites and services, as well as researching and analysing other interactions with our business.
- To carry out marketing on social media such as via promotion of competitions, events etc.
2. Lawful basis of processing personal information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- The data subject (you) has given consent to the processing activity taking place.
- If the processing in necessary for the purpose of the legitimate interest pursed by us.
Where legitimate interest is identified as a lawful basis, we will undertake a legitimate interest assessment which is a three-part test covering:
The purpose test – to identify the legitimate interest
Necessity test – to consider if the processing is necessary for the purpose identified
Balancing test – considering the individual’s interests, rights or freedoms and whether these override the legitimate interests identified.
3. What information do we collect and where from?
We collect your personal data when you sign up to our programmes or events, through publicly available sources or referrals. We may collect and process the following information about you:
- Identification information such as name and surname
- Contact information such as email
- Information about your use of our websites and services such as your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths as well as information about timing, frequency and pattern of your service use.
For more information please see Section 3
M) Our employee candidates (recruitment)
1. Why we collect your personal information
- For the purpose of managing our relationships, communicating with you (excluding communicating for the purposes of direct marketing) by email, SMS, post, fax and/or telephone, providing support services and complaint handling.
- For the purpose of carrying out our recruitment process and determine eligibility for the advertised role.
2. Lawful basis of process personal information
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- If the processing is necessary for the performance of a contract.
- If the processing is necessary for compliance with a legal obligation to which the controller is subject.
3. What information do we collect and where from?
- Identification information such as name and surname including any other listed on the CVs such as nationality
- Information available on CV or cover letters
- Contact information such as email addresses, postal address & telephone numbers
- Education history such as establishments attended and qualifications.
- Employment history
Where your job application with National Numeracy is unsuccessful, we will delete your personal data after 6 months following the end of campaign.
For more information please see Section 3
N) Third party mailing lists
1. WHY WE COLLECT YOUR PERSONAL INFORMATION
- For the purpose of looking for new prospects such as becoming partners in the future
- For the purpose of managing sales processes
- For the purpose of managing our relationships, communicating with you (excluding communicating for the purposes of direct marketing)
- Where you have consented to be contacted for such purposes, for the purposes of creating, targeting and sending communications by email, including sending of our newsletter or to provide you with information, resources or services to help support you in your numeracy improvement journey
- For the purpose of allowing you to participate in interactive features of our services, when you choose to do so
- For the purposes of creating and maintaining our databases, back-up copies of our databases and our business records generally
- For notifying you about the changes to our service
2. LAWFUL BASIS OF PROCESSING PERSONAL INFORMATION
We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:
- The data subject (you) has given consent to the processing activity taking place.
- If the processing is necessary for the performance of a contract.
- If the processing in necessary for the purpose of the legitimate interest pursed by us.
Where legitimate interest is identified as a lawful basis, we will undertake a legitimate interest assessment which is a three-part test covering:
The purpose test – to identify the legitimate interest
Necessity test – to consider if the processing is necessary for the purpose identified
Balancing test – considering the individual’s interests, rights or freedoms and whether these override the legitimate interests identified.
3. WHAT INFORMATION DO WE COLLECT AND WHERE FROM?
We collect your personal data when you sign up to our programs or events, through publicly available sources or referrals. We may also collect your personal data through purchased third party databases. We may collect and process the following information about you:
- Identification information such as name and surname
- Contact information such as email, telephone number
- Job Title, company/organisation address
For more information please see Section 3
3. For how long do we keep information
Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes. We will review your personal information regularly to establish whether we are still entitled to process it. If we decided that we are not entitled to do so, we will stop processing your personal information to the extent that it is appropriate to do so and securely delete or anonymise it. To determine the appropriate retention period, we will consider the amount, nature and sensitivity of that information, the potential risk of harm from unauthorised use or disclosure, and whether we can achieve the purposes for which we process that personal information through other means.
Where data is shared with the Department for Education or the Ministry of Housing, Communities and Local Government, they will keep your personal information for up to 7 years, so that they can evaluate the success of funding programmes. It will then be securely destroyed.
If you would like to find out how long your information is being retained, please see "additional information", section 9 of this policy.
4. Security of personal information
National Numeracy takes the responsibility for protecting your privacy very seriously and we will ensure your data is secured in accordance with our obligations under the Data Protection laws. We have in place technical and organisational measures to ensure personal information is secured and to prevent your personal data from being accessed in an unauthorised way, altered or disclosed. We use computer safeguards such as firewalls and data encryption, we enforce access controls to our files, and authorise access to personal information only for those employees who require it to fulfil their job responsibilities. National Numeracy is also Cyber Essentials certified.
We have policies and procedures to handle any potential data security breaches and data subjects, third parties and any applicable regulators will be notified where we are legally required to do so.
We have ensured that all employees have had information security and data protection training. If you would like more details of the security we have in place, please see "additional information", section 9 of this policy.
5. Your individual rights
In this section 6, we have listed the rights that you have under data protection law.
Your principal rights under data protection law are:
- the right to access - you can ask for copies of your personal data; you or any third party acting on your behalf with your authority may request a copy of the personal data we hold about you without charge. We, National Numeracy will ask to verify your identity or request evidence from the third party that they are acting on your behalf before releasing any personal data we hold about you.
- the right to rectification - you can ask us to rectify inaccurate personal data and to complete incomplete personal data.
- the right to erasure - you can ask us to erase your personal data.
- the right to restrict processing - you can ask us to restrict the processing of your personal data.
- the right to object to processing - you can object to the processing of your personal data if, processing relies on legitimate interests, processing is for scientific or historical research, processing includes automated decision making and profiling, processing is for direct marketing purposes.
- the right to data portability - you can ask that we transfer your personal data to another organisation or to you.
- the right to withdraw consent - to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent.
- rights relating to complaints and remedies.
These rights are subject to certain limitations and exceptions. You can learn more about the rights of data subjects by visiting: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
You ask any questions about these rights or exercise any of your rights in relation to your personal data by using the contact details set under section 10.
6. Data transfers/third parties
6.1 Transfers to third parties
National Numeracy may disclose your personal data, listed under the relevant section to some third parties insofar as reasonably necessary for the purposes, and on the legal bases, set out in this policy. Third parties that we use are listed below:
- Business partners, suppliers, contractors for the performance of any contract we enter into with them or you
- Educational institutions and organisations we work with
- Third parties that support us to provide products and services e.g. IT support, cloud-based software services, providers of telecommunications equipment) (e.g. Insightly, Trello, AWS, Microsoft 365)
- Marketing services providers (E.g. Mailchimp)
- Local authorities, Employer organisations, and other partners
- Banks for the purposes of making payments
- Professional advisors e.g. lawyers, auditors, DPO services
- Web analytics and search engine provider to ensure the continued improvement and optimisation of our website.
- Website and social media for the purposes of promotion of National Numeracy
If you want to find out in detail who your personal data is shared with, please see "additional information", section 10 of this policy.
6.2 Transfers outside of the UK
We may share personal information to third parties outside of the United Kingdom. Likewise, the hosting facilities for our website and/or data centres may be located outside the United Kingdom. Any personal information transferred will only be processed on our instruction and we ensure that information security at the highest standard would be used to protect any personal information as required by the Data Protection laws.
If personal data is transferred outside of the UK to a country without an adequacy decision, we will ensure appropriate safeguards are in place prior to the transfer. These could include:
Standard Contractual Clauses with the published ICO Addendum
International Data Transfer Agreement
An exception as defined in Article 49 of the GDPR
For more information about transfers and safeguarding measures, please contact us using the information in section 9.
7. Cookies
Our website uses cookies. Please see our Cookie Policy here for full details of the cookies used.
8. Right to complaint
We take any complaints about our collection and use of personal information very seriously.
If you think that our collection or use of personal information is unfair, misleading or inappropriate, or have any other concern about our data processing, please raise this with us in the first instance.
To make a complaint, please contact us via email on dpo@nationalnumeracy.org.uk.
Alternatively, you can make a complaint to the Information Commissioner’s Office:
By Post:
Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
By Website: Click Here
By Email: Click Here
By Phone: 0303 123 1113 (Local rate) or 01625 545 745 (National rate)
9. Additional information
Your trust is important to us. That is why we are always available to talk with you at any time and answer any questions concerning how your data is processed. If you have any questions that could not be answered by this privacy policy or if you wish to receive more in -depth information about any topic within it, please contact our DPO via email on dpo@nationalnumeracy.org.uk. Alternatively, may also contact us by post at our principal office at Unit 54/5, Sussex Innovation Centre, Science Park Square, Brighton, BN1 9SB or reach us by phone on 01273 915 044.
10. Review of this policy
We keep this Privacy Notice under regular review. This Privacy Notice was last updated on 13/09/2023.
11. Amendments
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
