We are Whetstone Education Ltd T/As Whetstone Oxbridge. Registered in England & Wales No. 11596562 at Mill Green House, Mill Green Road, Haywards Heath, RH16 1XJ.
For the data we collect and subsequently process, we are the “Data Controller”. This is a legal term which means that we make decisions about how and why we use your personal data. As the Data Controller, we are responsible for making sure that your personal data is used in accordance with applicable data protection laws and this Policy. When you provide your personal data to another party such as a finance broker who then discloses this information to us for the sole purpose of reviewing your finance application, we will process that data in accordance with this Policy. In these circumstances we are acting as the “Data Processor”.
Data protection laws state that we are only able to process personal data if we have valid reasons to do so. The reasons we process your personal data are:
Calls to our offices may be recorded and the recordings are used for quality and training purposes.
We may assemble information about your common internet use with a cookie file. When used, the cookies are downloaded to your computer automatically. The cookie is stored on the hard drive, with transferred information. The data sought by the cookie helps us improve our website and any service offered to you. Your browser has the ability to decline cookies. This is done by setting your browser options to decline all cookies. Note: if you do decline the download of cookies, some aspects of our site may not work or allow you access.
We retain records of your queries and correspondence, in the event you contact us. The personal data that we may collect from you includes but is not limited to:
No personal data will be stored for longer than is necessary and all documents containing personal and sensitive data will be disposed of securely in accordance with Data Protection principles. In essence, we keep it as long as we need to, for the purposes it was collected in the first place. We do so in order to deliver a full and high quality service. We may have to retain information for longer when there is a legal reason to do so (for example to comply with Child Protection laws).
We will retain your personal information for up to seven years where you do not object or opt-out of receiving email marketing communication from us about similar products and services. In this case we will store your personal information until you object or opt-out.
Video recorded is treated differently and will be stored by Whetstone Education Ltd. for a maximum of five days after the completion of the service for quality monitoring purposes. After this time it will be deleted from our records, although the copy sent to the client will remain intact.
In order to use the services offered by Whetstone Education Ltd. you must be over the age of 16. If we find that personal data has been submitted to us by anyone under the age of 16 we will remove it as soon as possible.
Under data protections laws you have a number of rights in relation to the collection and use of your personal data. These are:
The majority of ways we process your personal data are not based on your consent and is instead based on other legal reasons (as set out above). Where our processing is based solely on your consent you have the right to withdraw your consent for future processing at any time. You should be aware that preventing the use or processing of your personal data may mean that we are unable to provide our services to you. If we are acting as the Data Processor for the data you provided to another Data Controller you should also contact them to withdraw your consent.
You can exercise your rights by writing to us at the email address below stating what information you require and we will respond to you within a month. Please bare in mind that if you require copies that may incur a fee.
You should notify us of any changes to your status, contact and payment details without delay in order that the data we hold for you is kept up to date at all times.
The transmission of information via the email and the internet is not completely secure, we cannot guarantee the security of your data transmitted to us and any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
All personal data you provide to us is stored on our encrypted servers.
You can lodge a complaint about the use of your personal data directly with us or with the Information Commissioner’s Office (ICO). The ICO are the regulator who makes sure that we use your personal information in a lawful way. You can do this at www://ico.org.uk/concerns/ or by calling 0303 123 1113.
Occasionally we may need to amend parts of this policy to comply with changes in legal and regulatory requirements. For any large alterations we will notify you via email, however we also recommend that you periodically review this policy for any changes.
Please feel free to contact us via email on firstname.lastname@example.org.