Best Practice Network and Outstanding Leaders Partnership provide professional development programmes for individuals working in the education sector in partnership with Schools, Early Years providers, Universities and Colleges. This privacy notice explains how we use any personal data we collect about you, the choices you have about what marketing you want us to send you, and your privacy rights and how the law protects you.

Data protection changed on 25 May 2018

On the 25 May 2018, the General Data Protection Regulation (2016) came into effect, giving you more control over how your data is used and how you’re contacted. This notice sets out most of your rights under the new laws. We will update this if any changes to our policies occur.

Our privacy promise

The company needs to keep certain information about its employees, clients, and suppliers for financial and commercial reasons and to enable us to monitor performance, to ensure legal compliance and for health and safety purposes. To comply with the law, your personal data must be collected and used fairly, stored safely and not disclosed to any other person unlawfully. In practice, this means that only those who have a necessary and lawful need to access your data will be able to do so.

Data protection controller

For the purposes of the Data Protection Act (2018), we confirm that the data controller is Best Practice Network Limited, a limited liability company based in England, with its registered office address at Newminster House, 27-29 Baldwin Street, Bristol, BS1 1LT.

We also contract a number of ‘data processors’ who process or store personal data on behalf of Best Practice Network for example suppliers of IT and other systems. We ensure that our contracts with these processors are compliant with the Data Protection Act (2018) and that your data is kept safe by these companies.

How the law protects you

Best Practice Network understands that we must have a lawful basis in order to process your personal data, as outlined in Article 6 of the GDPR (2016). At least one of these must apply whenever we process your personal data:          

• Consent: you have given clear consent for us to process your personal data for a specific purpose.
• Contract: the processing is necessary for a contract we have with you.
• Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
• Public task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
• Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party.

What information we collect about you

Depending on our relationship with you, we may use your personal data in a number of ways:

Categories of personal data

We may collect a number of different categories of personal data from you, which are explained in more detail below:

 

We will only process special categories of personal data where the data subject has given explicit consent to the processing of those personal data for one or more specified purposes as outlined in Article 9 of the GDPR (2016).

Who we share your personal information with

We may share your data internally within Best Practice Network where it is necessary for a specific purpose.

There may be some instances where we share your data with third parties such as delivery partners, programme facilitators and assessors, funding or government bodies such as the Department for Education and Ofsted, our Data processors and any third parties which require us to share your personal data to fulfil our legal obligations such as auditors.

Please note that if a participant moves schools and continues their training programme, then under DfE requirements we may need to share their name and contact details, participation and progress data with the new school or provider.

Marketing

We may contact you to ask your opinion, offer insight and research into the education sector and tell you about policy, funding and programmes we think are relevant to you. This is what we mean when we talk about ‘marketing’.

The personal information we have for you is made up of what you tell us, data we collect when you use our services, or from third parties, we work with. We use this information to decide what may be relevant and of interest to you.

We can only use your personal information to send you marketing messages if we have either your consent or a ‘legitimate interest’. That is when we have a business or commercial reason to use your information. It must not unfairly go against what is right and best for you.

Whatever you choose, you'll still receive information relating to your existing programmes and services.

We may ask you to confirm or update your choices if you start any new programmes or use our services in future. We will also ask you to do this if there are changes in the law, regulation, or the structure of our business.

If you change your mind you can update your choices at any time by contacting us.

Cookies

We use cookies to temporarily remember your location and device type so we can provide you with a better user experience when visiting our website.

Cookies help us to use remarketing to show you adverts across different google platforms based on the content you searched during past visits to our website. You can opt-out of our remarketing campaign by visiting your web browser’s Settings page.

How long we keep your personal data

We will keep your personal information for as long as you are a service user or subscriber with Best Practice Network.

After you stop your contract with BPN, we may keep your data for up to 7 years for one of these reasons:

• To respond to any questions or complaints
• To show that we treated you fairly
• To maintain records according to rules that apply to us
• To provide you with a reference for your work with BPN

You can ask to have your data removed earlier by contacting us.

If you make an ‘Expression of Interest’ or submit an application but do not engage in a contract with Best Practice Network, we are required to delete your personal data after 18 months.

How to get a copy of your personal information

You can request details about the personal data we hold on you by filling in a data request form and sending it to us at Best Practice Network, Newminster House, 27-29 Baldwin St, Bristol, BS1 1LT.

You will be required to make a written request with sufficient information to enable us to identify who you are; we will then supply you with a copy of the personal data held about you within one month. We may charge a ‘reasonable fee’ where a request is manifestly unfounded or excessive.

Letting us know if your personal information is incorrect

You have the right to query the accuracy of any personal data we have about you that you think is incorrect or incomplete. Please contact us if you want to do this. In the event that your personal data changes, please contact us as soon as possible so we can update our records.

If you do, we will take reasonable steps to check its accuracy and update it.

What if you want us to stop using your personal information?

As a data subject, you have the right to object to our use of your personal data, or to ask us to remove or stop processing it if there is no need for us to do so. This is known as the ‘right to object’ and ‘right to erasure’, also known as the ‘right to be forgotten’.

We may sometimes be able to restrict the use of your data. This means that we are permitted to store your personal data, but not process it any further.

You can ask us to restrict the use of your personal information in the following circumstances:

• Where you contest the accuracy of the personal data, we will restrict the processing until you have verified the accuracy of the personal data
• Where you object to the processing
• When processing is unlawful and you oppose erasure and requests restriction instead
• If we no longer need the personal data but you require the data to establish, exercise or defend a legal claim

Please contact us if you want to object to how we use your data, or ask us to delete it or restrict how we process it.

How to withdraw your consent

You can withdraw your consent at any time. Please contact us if you want to do so.

This may mean that we cannot provide you with relevant information regarding our products and services. We will notify you if this is the case.

Future formats for sharing data

Data Privacy laws changed on 25 May 2018. You now have the ‘right to data portability’.

This means that you can obtain and reuse your personal data for your own purposes across different services. We must provide the personal data in a structured, commonly used and machine-readable form. Open formats include CSV files. Machine-readable means that the information is structured so that software can extract specific elements of the data. This enables other organisations to use the data.

This service will be free of charge.

How to contact us

For further information on how your information is used, how we maintain the security of your information, and your rights to access the information we hold on you, please contact our Data Protection Officer:

• by email: joannahawkins@bestpracticenet.co.uk
• by telephone: 0117 920 9421
• or write to us at: Best Practice Network, Newminster House, 27-29 Baldwin St, Bristol, BS1 1LT

You also have the right to complain to the Information Commissioner’s Office. Find out on their website how to report a concern- https://ico.org.uk/concerns/

You can find the print version of our Privacy Notice here.