Challenge Partners provides collaborative school improvement services and networks for schools and school senior leaders in England. Our mission is to improve pupils’ outcomes and reduce educational inequality through effective collaboration, enabling every pupil to experience the combined wisdom of the education system.

Excellent communication and sharing of information are critical to what we do, as they facilitate collaboration and improvement across our network. We want you to be comfortable with how we store and use your personal data in the work we do. This privacy notice explains how we use any personal data we collect about you, the choices you have about what marketing you want us to send you, your privacy rights, and how the law protects you.

Data protection law from 25th May 2018 onward
From 25th May 2018 the General Data Protection Regulation gives you more control over how your data is used and how you’re contacted. This policy clarifies most of your rights under the new laws.

Our privacy promise
The charity needs to keep certain information about its employees, members, and suppliers for financial and commercial reasons and to enable us to monitor performance, to ensure legal compliance and for health and safety purposes. To comply with the law, your personal data must be collected and used fairly, stored safely and not disclosed to any other person unlawfully. In practice, this means that only those who have a necessary and lawful need to access your data will be able to do so.

Data Protection Officer
To ensure the implementation of data protection the charity has designated the Director of Finance and Operations as the charity’s Data Protection Officer (DPO).

How the law protects you
Challenge Partners understands that we must have a lawful basis in order to process your personal data, as outlined in Article 6 of the GDPR. At least one of these must apply whenever we process your personal data:

●Consent: you have given consent for us to process your personal data for a specific purpose

●Contract: the processing is necessary for a contract we have with you

●Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations)

●Public task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law

●Legitimate interests: the processing is necessary for our legitimate interests
 

What information we collect about you

Depending on our relationship with you, we may use your personal data in a number of ways:

Relationship with Challenge Partners	What data we collect about you	What we use your data for	Lawful basis
Current and former staff	Contact Financial Contractual and HR Consents	To manage our relationship with you To ensure we fulfill our obligations as part of our contract with you	Consent Legal basis
School staff	Contact Consents Programme assessment and evaluation Marketing preferences	To manage our relationship with you and deliver our services To ensure you receive information about your programme To provide you with support and guidance To respond to complaints and queries To collect money for services To provide you with insight and information on the education sector To promote our networks	Consent Legal basis Legitimate interest
Third party contractors	Contact Financial Contractual and HR Consents	To manage our relationship with you To contract you for your work To ensure we fulfill our obligations to you as part of our contract with you	Legal basis Consent Contract Legitimate interest

We will only process special categories of personal data where the data subject has given explicit consent to the processing of those personal data for one or more specified purposes as outlined in Article 9 of the GDPR.

Who we share your personal information with
We may share your data internally within Challenge Partners where it is necessary for a specific purpose. There may be some instances where we share your data with third parties such as Lead Reviewers, programme facilitators, our Data Processors and any third parties that require us to share your personal data to fulfil our legal obligations, such as auditors. We will never sell your information.

Marketing
We may contact you to ask your opinion, offer insight and research into the education sector and tell you about programme and service information, news and updates, events, case studies, impact reports, blogs, articles and other selected items of interest we think are relevant to you. For example, in our newsletter we will curate content for you that includes, but is not limited to, events and opportunities which support school improvement. This is what we mean when we talk about ‘marketing’.

The personal information we have for you is made up of what you tell us, and data we collect when you use our services. We use this information to decide what may be relevant and of interest to you.

We can only use your personal information to send you marketing messages if we have either your consent or a ‘legitimate interest’. That is when we have a business or commercial reason to use your information. It must not unfairly go against what is right and best for you.You can ask us to stop sending you marketing messages by contacting us at any time.

Whatever you choose, you’ll still receive information relating to the programmes and networks of which you are an existing member.
We may ask you to confirm or update your choices if you start any new programmes or use our services in future. We will also ask you to do this if there are changes in the law, regulation, or the structure of our charity. If you change your mind you can update your choices at any time by contacting us.

Keeping your personal data
We will keep your personal information for as long as your school or organisation is directly involved with Challenge Partners. After you cease to be involved, Challenge Partners may keep your data for one of these reasons:

●To respond to any questions or complaints

●To show that we treated you fairly

●To maintain records according to rules that apply to us

●To provide you with a reference for your engagement with Challenge Partners

You can ask to have your data removed by contacting us.

How to get a copy of your personal information
You can request details about the personal data we hold on you by contacting us here or by writing to Challenge Partners, John Keats Primary School, 391 Rotherhithe New Road, London, SE16 3FN.

Letting us know if your personal information is incorrect

You have the right to query the accuracy of any data we have about you that you think is incorrect or incomplete. Please contact us if you want to do this. If you do, we will take reasonable steps to check its accuracy and update it.

What if you want us to stop using your personal information?

As a data subject you have the right to object to our use of your personal data, or to ask us to remove or stop processing it if there is no need for us to do so. This is known as the ‘right to object’ and ‘right to erasure’, also known as the ‘right to be forgotten’.
We may sometimes be able to restrict the use of your data. This means that we are permitted to store your personal data, but not process it any further.

You can ask us to restrict the use of your personal information in the following circumstances:

●Where you contest the accuracy of the personal data, we will restrict the processing until you have verified the accuracy of the personal data

●Where you object to the processing

●When processing is unlawful and you oppose erasure and request restriction instead

●If we no longer need the personal data but you require the data to establish, exercise or defend a legal claim

Please contact us if you want to object to how we use your data, ask us to delete it, or restrict how we process it.

How to withdraw your consent for us to contact you
You can withdraw your consent for us to contact you at any time. Please contact us if you wish to do so. This may mean that we cannot provide you with relevant information regarding our products and services. We will notify you if this is the case.

Future formats for sharing data
From 25th May 2018, you have the ‘right to data portability’. This means that you can obtain and reuse your personal data for your own purposes across different services. We must provide the personal data in a structured, commonly used and machine-readable form. Machine readable means that the information is structured so that software can extract specific elements of the data, for example compiling data into an Excel CSV. This enables other organisations to use the data. This service will be free of charge.

Cookies

A cookie consists of information sent by a web browser, and stored by the browser. The information is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser.

We use Google Analytics to analyse the use of this website. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users' computers. The information generated relating to our website is used to create reports about the use of the website. Google will store this information. Google's privacy policy is available at: http://www.google.com/privacypolicy.html.

Most browsers allow yout to reject all cookies, whilst some browsers allow you to reject just third party cookies. For example, in Internet Explorer you can refuse all cookies by clicking "Tools", "Internet Options", "Privacy", and selecting "Block all cookies" using the sliding selector. Blocking all cookies will, however, have ae negative impact upon the usability of many websites.

Our website does contain links to other websites. We are not responsible for the privacy policies of practices of third party websites.

How to contact us
If you have any questions about the policy or how your data is stored and used by us, please contact us:
via the website here
or write to us at: Challenge Partners, John Keats Primary School, 391 Rotherhithe New Road, London, SE16 3FN ​

If you are not satisfied with the way we handle your data, you have the right to complain to the Information Commissioner’s Office. Find out on their website how to report a concern – https://ico.org.uk/concerns/