We have made changes to our privacy policy in-line with General Data Protection Regulation (GDPR) which takes effect across the European Union from Friday, 25th May 2018. Designed to harmonise privacy laws across Europe, GDPR refines the transparency rules for how companies describe their data processing.

Rockschool Limited (“Rockschool”, “we”, “us”) is committed to protecting your privacy. At all times, we aim to respect any personal information you share with us or that we receive from others and keep it safe. This Privacy Notice (“Notice”) sets out our data processing practices and your rights and options regarding the ways in which your personal information is used and collected (including through our website rockschool.io).

This Notice contains important information about your personal rights to privacy. Please read it carefully to understand how we use your personal information.

The provision of your personal information to us is voluntary. However, without providing us with your personal information, your use of our services or your interaction with us may be impaired. For example, you will be unable to take an examination or receive a qualification.

Privacy policy outlines

The new Policy outlines the following:

• What Information we collect
• What we use information for
• How we protect your information
• Disclosure of your personal information
• Access to your personal information
• General information

You may opt-in to receive marketing communications and promotions from us.

If you’d like to unsubscribe from our newsletter you can do so in the footer of email communications from RSL Group

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

If you use cloud.rslawards.com to book examinations and purchase products, you may choose not to receive information about our activities and promotions when you enter online by simply not opting in for receiving marketing communications when we collect your personal information to process transactions.

How we collect personal information about you

We collect personal information about you:

When you give it to us directly

For example, personal information that you give to us when you communicate with us by email, phone or letter.

When we obtain it indirectly

For example, your personal information will be shared with us by training/learning providers after you enrol for a course in relation to which we provide the relevant qualification or schedule an exam. If you are based outside of the UK, your personal information may also be submitted to us by RSL Group representatives in your country for the purposes of scheduling exams.

When it is available publicly

Your personal information may be available to us from external publicly available sources. For example, depending on your privacy settings for social media services, we may access information from those accounts or services.

When you visit our website

When you visit our website, we automatically collect the following types of personal information:

(a) Technical information, including the internet protocol (IP) address used to connect your device to the internet, browser type and version, time zone setting, browser plug-in types and versions and operating systems and platforms.

(b) Information about your visit to the websites, including the uniform resource locator (URL) clickstream to, through and from the website (including date and time), services you viewed or searched for, page response times, download errors, length of visits to certain pages, referral sources, page interaction information (such as scrolling and clicks) and methods used to browse away from the page.

We collect and use your personal information by using cookies on our website – please see our Cookie Notice below.

In general, we may combine your personal information from these different sources set out in a-d above, for the purposes set out in this Notice.

What personal information do we use?

We may collect, store and otherwise process the following:

• Name and contact details (address, phone, email)
• Date of birth and gender
• Financial information (bank or card details)
• Computer/mobile device data including IP address and location
• Candidate/learner identifiers
• Details of qualifications and experience
• Any other personal data collected as per section 1

Do we process special categories of data?

Yes, such as data about health or ethnicity, but only where necessary (e.g. for reasonable adjustments in exams), and only where GDPR permits.

How and why will we use your personal information?

Your personal information may be used:

• To register you and allow exam participation
• For exam administration and assessment
• To issue results and certificates
• For appeals and reviews
• To facilitate purchases of books and materials
• To register or publish teacher profiles
• To provide requested services, information or products
• To communicate with training/learning providers
• To send you information (with your consent)
• To respond to queries
• To manage partner/service provider relationships
• To improve our work and services
• To keep facilities safe and secure
• To run and manage our website
• For auditing and accounts
• To comply with legal obligations
• To prevent fraud
• For legal claims

Lawful bases

Under GDPR, we rely on the following lawful bases:

• Consent – e.g. for marketing or special category data
• Legal obligation – e.g. for regulatory compliance
• Contract – e.g. to deliver services/products
• Legitimate interest – e.g. for organisational functioning and awarding qualifications

We assess the impact on your rights before relying on legitimate interests.

Candidate research

We may analyse your data to create a profile of your interests/preferences to improve communication and services.

Opt-out: If you’d prefer we don’t use your data this way, contact us using the details in Section 16.

Communications for marketing/promotional purposes

We may contact you (by email/SMS/phone) about relevant Rockschool services, only with your consent where required.

Opt-out anytime via the unsubscribe link in emails or by emailing info@rockschool.io.

Payments

For online payments, your financial information is processed by a secure third-party provider. We share only what’s necessary to complete the transaction.

Children’s personal information

Where we process children’s data, we obtain consent from the child or their guardian where required and apply additional safeguards.

How long do we keep your personal information?

We retain data for up to six years unless:

• It is no longer required;
• We are not legally permitted to keep it;
• You exercise your right to erasure.

We may retain basic data on a suppression list to avoid contacting you again.

Will we share your personal information?

We do not sell or rent your data for marketing. However, we may share your data with:

• Training/learning providers
• Individual examiners
• Education authorities (e.g. DfE, UCAS, ESFA)
• Local authorities and public bodies
• Educational institutions or prospective employers
• IT service providers (e.g. hosting, cloud storage)
• Accountants, lawyers
• Research partners
• Police (e.g. fraud investigations)
• Regulatory bodies (e.g. Ofqual, Ofsted)

We may also share data:

• In the event of a sale or acquisition of our business
• If legally required
• To protect our rights or safety

Security / storage of and access to your personal information

We employ appropriate security measures. Personal data is only accessible to trained personnel and stored on secure servers.

International Data Transfers

Data may be transferred outside the EEA (e.g. to the USA) where necessary. We will ensure appropriate safeguards are in place (e.g. standard contractual clauses).

Exercising your rights

You have the right to:

• Withdraw consent at any time
• Access your data
• Request erasure of your data
• Rectify inaccurate data
• Restrict processing
• Object to processing
• Data portability (machine-readable export)
• Not be subject to automated decision-making

Contact us to exercise these rights.

You may also lodge complaints with the ICO: www.ico.org.uk

Changes to this Notice

We may update this Notice. Significant changes will be communicated directly where possible and posted on our website.

Last updated: 22 May 2018

Links and third parties

Our website links to external sites. This Notice does not cover them. Please read their privacy policies.

Cookies