Privacy Policy for Cirencester College Mobile Application

Effective Date: 22/7/2025

Cirencester College is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is:

Cirencester College
Stroud Rd, Cirencester GL7 1XA
dpo@cirencester.ac.uk

2. What Data We Collect

We may collect and process the following types of personal data:
– Identity Data: Name, username, or similar identifier
– Contact Data: Email address, phone number
– Technical Data: IP address, device type, operating system, app usage data
– Location Data: If you grant permission
– Usage Data: Information about how you use our app
– Marketing and Communications Data: Your preferences in receiving marketing

3. Legal Basis for Processing

We process your data under one or more of the following lawful bases:
– Consent: Where you have given clear consent for processing
– Contract: Where processing is necessary for a contract with you
– Legal Obligation: Where we must comply with a legal obligation
– Legitimate Interests: Where it is necessary for our legitimate interests and your rights do not override those interests

4. How We Use Your Data

We use your data to:
– Provide and maintain the app
– Improve app performance and user experience
– Communicate with you
– Comply with legal obligations
– Send marketing communications (only with your consent)

5. Data Sharing

We may share your data with:
– Service providers who support our operations (e.g., hosting, analytics)
– Regulatory authorities if required by law
– Third parties with your explicit consent

We ensure all third parties respect the security of your data and comply with data protection laws.

6. International Transfers

If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as:
– Adequacy decisions
– Standard contractual clauses approved by the ICO

7. Data Retention

We retain your personal data only as long as necessary for the purposes we collected it for, including legal, accounting, or reporting requirements.

8. Your Rights

Under the UK GDPR, you have the right to:
– Access your personal data
– Correct inaccurate data
– Request erasure (“right to be forgotten”)
– Restrict or object to processing
– Data portability
– Withdraw consent at any time

To exercise your rights, contact us at: dpo@cirencester.ac.uk

9. Data Security

We implement appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access.

10. Children’s Privacy

Our app is not intended for children under 13. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or email.

12. Contact Us

If you have questions about this policy or your data, contact: dpo@cirencester.ac.uk