Privacy Notice

We recommend that you read this Privacy Notice in full to ensure you are completely informed about your personal data. However, if you only want to access a particular section of this Privacy Notice, then you can click on the relevant link above to jump to that section.

MyEdSpace respects your right to privacy. This Privacy Notice explains who we are, how we collect, share and use personal data about you and how you can exercise your privacy rights. This Privacy Notice only applies to personal data that we collect through our website at www.myedspace.co.uk and all subdomains ("Website"). We are the controller of the data.

If you are aged under 18 years of age, or are a parent or guardian of someone aged under 18 years of age please also refer to our children's online privacy notice which can be found at https://myedspace.co.uk/childrens-privacy-notice

If you have any questions or concerns about our use of your personal data, then please contact us using the contact details under the "How to contact us" (section 13) heading below.

1. What does MyEdSpace do?

MyEdSpace is an online education provider headquartered in the UK. For more information, please see the "About Us" section of our Website at https://myedspace.co.uk/about-us

2. Personal data we collect and process

a) The personal data we collect from you, either directly or indirectly, will depend on how you interact with us and with our website. We collect personal data about you from the following different sources:

Information that we collect directly

We collect personal data directly from you when you choose to provide us with this information online and through your other interactions with us (such as data collected via social media and any surveys, customer service communications, competitions or other promotional programmes in which you may participate). Certain parts of our website ask you to provide personal data when you engage with the following services: Account creation, customer service information, purchase of goods / services, returns processing and product reviews.

Information that we collect indirectly

We collect your personal data indirectly, including through automated means from your device when you use our website. Some of the information we collect indirectly is captured using cookies and other tracking technologies, as explained further in the "Cookies and similar tracking technology" section (section 5) below.

Information from third parties

We also collect your personal data from third party sources, i.e. our service providers that provide operational assistance, email, marketing and analytics services, as well as financial and credit related services, payment services and social media platforms. Information received from third parties will be checked to ensure that the third party either has your consent or are otherwise legally permitted or required to disclose your personal data to us.

If you choose to register for a website account with us via a social media account you hold, we will collect your email from your social media account to set up your account with us and to confirm whether you logged into our website using your social media account. We do not access your personal account settings on your social media account.

In general, we will use the personal data we collect from you only for the purposes described in this Privacy Notice or for purposes that we explain to you at the time we collect your personal data. However, we will also use your personal data for other purposes that are compatible with the purposes we have disclosed to you (such as archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes) if and where this is permitted by applicable data protection laws.

b) The table below describes the categories of personal data we collect from and about you through our online services and activities on our website:

Some of the personal data that you provide includes sensitive personal data, such as health-related information or information about your race or ethnicity, which we need for providing our educational services and surveys to improve our services.

The provision of account data and education history is necessary for the performance of our contract with you and/or to enter into a contract with you. If you do not provide this data, then we will not be able to perform a contract with you.

3. How we use your personal data (our purposes) and our legal basis for processing it

We use the personal data that we collect from and about you only for the purposes described in this Privacy Notice or for purposes that we explain to you at the time we collect your information. Depending on our purpose for collecting your information, we rely on one of the following legal bases:

• Contract - we require certain personal data in order to provide the goods and support the services you purchase or request from us;
• Consent - in certain circumstances, we may ask for your consent before we collect, use, or disclose your personal data;
• Legitimate interests - we will use or disclose your personal data for the legitimate interests of either MyEdSpace or a third party, but only when we are confident that your privacy rights will remain appropriately protected;
• Legal obligation - there are instances where we must process and retain your personal data to comply with laws or to fulfil certain legal obligations;
• Research - for scientific or historical research purposes, or statistical purposes.

4. Who we share your personal data with

We share your personal data with the following categories of recipients:

• Our current or future affiliates and group companies
• Messages you send to mentors will be shared with those mentors
• Homework and coursework responses are shared with teachers providing the relevant course
• Third party service providers and partners who provide data processing services to us
• Third party services when you use third party services linked through our website
• Any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary
• A buyer in connection with any actual or proposed purchase, merger or acquisition of any part of our business
• Any other person with your consent to the disclosure

We do not share your mobile opt-in data or consent with any third parties for marketing/promotional purposes.

5. Cookies and similar tracking technology

We use cookies and similar tracking technology (collectively, "Cookies") to collect and use personal data about you, including to serve interest based advertising. For further information about the types of Cookies we use, why, and how you can control Cookies, please see our Cookie Notice at https://myedspace.co.uk/cookies-notice

6. How we keep your personal data secure

We use appropriate technical and organisational measures to protect the personal data that we collect and process about you. The measures are designed to provide a level of security appropriate to the risk of processing.

7. International data transfers

In some cases, where your personal data is transferred to or third parties, it is processed in countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).

Where we transfer your personal data to countries or organisations outside of the European Economic Area and the UK, which have been formally recognised as providing an adequate level of protection for personal data, we rely on the relevant "adequacy decisions" from the European Commission and "adequacy regulations" (data bridges) from the Secretary of State in the UK.

Where the transfer is not subject to an adequacy decision or regulations, we have taken appropriate safeguards to ensure that your personal data will remain protected in accordance with this Privacy Notice and applicable laws.

8. Data retention

We retain the personal data we collect from you where we have an ongoing legitimate need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements). In certain circumstances, we will need to keep your information for legal reasons after our contractual relationship has ended.

When we have no ongoing legitimate need or legal reason to process your personal data, we will either delete or anonymise it or, if this is not possible, then we will securely store your personal data and isolate it from any further processing until deletion is possible.

9. Automated decision-making

In some instances, our use of your personal data will result in automated decisions being taken (including profiling). These are unlikely to be decisions that legally affect you or similarly significantly affect you.

When we make an automated decision about you, you have the right to contest the decision, to express your point of view, and to require a human review of the decision. You can exercise this right by contacting us using the contact details provided under the "How to contact us" (section 13) heading below.

10. Your data protection rights

Individuals located in the UK and EEA have the following data protection rights:

• You may access, correct, update or request deletion of your personal data.
• You can object to processing of your personal data, ask us to restrict processing of your personal data or request portability of your personal data.
• You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in our marketing e-mails.
• If we have collected and processed your personal data with your consent, then you can withdraw your consent at any time.
• You may have the right to complain to a supervisory authority about our collection and use of your personal data.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

11. Third Parties

Our services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Notice does not apply to your activities on those third party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.

12. Updates to this Privacy Notice

We may update this Privacy Notice from time to time in response to changing legal, regulatory, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

You can see when this Privacy Notice was last updated by checking the "last updated" date displayed at the top of this Privacy Notice.

13. How to contact us

If you have any questions or concerns about our use of your personal data, please contact our data protection officer using the following details: