This Privacy Notice explains in detail the types of personal data we may collect about you when you interact with us. It also explains how we’ll store and handle that data, and keep it safe.
We know that there’s a lot of information here, but we want you to be fully informed about your rights, and how we use your data.
We hope the following sections will answer any questions you have but if not, please do get in touch with us.
Numberfit Limited is the data controller of any personal data collected from you when you on this website and for the purpose of delivering our services to you.
This Privacy Notice is effective from 22nd April 2021. It is reviewed annually but may be updated more frequently, so please ensure you check it regularly.
What is Numberfit?
Numberfit Limited provides maths and science support for 3-18 year olds, combining learning with sport, story, music and fun to create enjoyable learning experiences for all students.
For simplicity throughout this notice, ‘Numberfit’, ‘we’ and ‘us’ means Numberfit Limited, our staff and our volunteers.
What personal data do we collect?
Name, address and contact details of guardian/parent and their children
Images from our education visits
Details of your visits to our website
Payment card information
Certain categories of personal data have additional protection under the GDPR. The
categories include information about your health, racial or ethnic origin. Numberfit processes special category data where this is provided by you during the course of correspondence with us to inform us of any assistance requirements or tailoring of the services.
When do we collect your personal data?
When you visit our website
When you contact us and provide us with personal data (via email, website, paper
documents or telephone)
When you engage with us on social media
When your child takes part in our activity their image may be recorded
When you contact us by any means with queries, complaints etc.
When you enter prize draws or competitions
When you provide contact details to us at conferences
Explaining the legal bases we rely on
The UK GDPR sets out a number of different reasons for which a company may collect and process your personal data, including:
In specific situations, we can collect and process your data with your consent.
For example, when you tick a box to receive email newsletters.
In certain circumstances, we need your personal data to comply with our contractual obligations.
For example, if you purchase products from us we will use your personal data to send those items to you.
For example, if we are obliged to disclose personal data by law, or if the disclosure is necessary for purposes of national security, taxation and criminal investigation or to safeguard children.
In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests. We have conducted a legitimate interests assessment to ensure that your rights, freedom or interests are not materially impacted.
How and why do we use your personal data?
We use your personal data to deliver services to educators, you and your child. We want to give you and your child the best possible learning experience.
If you wish to change how we use your data, you’ll find details in the ‘What are my rights?’ section below.
Ways in which we use your personal data are:
To provide education settings with our services
To provide tutoring for your child or your students directly, via government or in an
To process any orders that you make by using our websites
To respond to your queries
To protect our business and your account from fraud and other illegal activities. We may
also use personal data to safeguard children
To administer any of our prize draws or competitions which you enter, based on your
consent given at the time of entering
To develop, test and improve the systems, services and products we provide to you. We’ll do
this on the basis of our legitimate business interests
To market our services and products
To comply with our contractual or legal obligations to share data with law enforcement
How do we protect your personal data?
We know how much data security matters to all our clients. Any personal data you provide to us is stored securely and confidentially and is processed in accordance with applicable legislation and this Privacy Notice. We take appropriate technical and organisational measures to protect this data against unauthorised or unlawful processing.
How long will we keep your personal data?
Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected.
In some circumstances, such as to meet our legal or regulatory obligations, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may hold on to your personal data after we’ve finished providing services to you, or for longer than our general retention policy.
Who do we share your personal data with?
We sometimes share your personal data with trusted third parties. These are companies that are processing the data collected on our behalf and therefore have to adhere to the same strict guidelines and rules in relation to your personal data. We work closely with them to ensure that your privacy is respected and protected at all times.
Examples of the kind of third parties we work with are:
IT companies who support our website and other business systems
Operational companies such as delivery couriers
The police, other law enforcement, regulatory or Government bodies
Educators and educations settings such as schools and nurseries
We do not share your data with third parties for their own purposes.
Where your personal data may be processed?
Sometimes we will need to share your personal data with third-party data processors and parties outside the European Economic Area (EEA). Where your data is processed outside the EEA, we will ensure that appropriate data transfer mechanisms are in place to protect that transfer.
Any transfer of your personal data will follow applicable laws and we will treat the information under the guiding principles of this Privacy Notice.
What are my rights?
You have the right to:
Be clearly informed about how we use your personal data (the right to be informed)
Ask for a copy of personal data that we hold about you (the right of access)
Ask us to update and amend any incorrect, out-of-date or incomplete personal data that we hold
about you (the right of rectification)
Request, in certain circumstances, that we delete personal data held on you (the right of erasure
or to be forgotten)
Ask us to ‘restrict processing of data’, in certain circumstances (the right to restrict processing)
Ask us to supply you with the personal data we hold about you in a structured machine-readable
format (where technically possible) and/or to provide a copy of the data in such a format to another organisation (the right to data portability)
Opt out of any marketing communications, withdraw your consent to us collecting and processing your data and object to us using / holding your personal data if we have no legitimate reasons to do so (the right to object)
If you wish to exercise any of the above rights, please contact us using our contact details below.
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the data protection authority of the United Kingdom using their website https://ico.org.uk/.
We hope this Privacy Notice has been helpful in clarifying the way we handle your personal data and your rights to control it. However we realise that it is a lot of information to digest.
If you have any questions, please contact us at firstname.lastname@example.org
This Privacy Notice was last updated on 22nd April 2021