Raising Resilience

Raising Resilience Privacy Policy

At Raising Resilience, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect data when you engage with us face to face, or with out website, or with our online Learn2BOUNCE Programme. By using our services, you agree to the terms outlined below. 

Raising Resilience is a partnership of two Clinical Psychologists. We take seriously our responsibility to protect information provided to us by schools, staff, parents and children, and are registered with the ICO (Information Commissioner’s Office). This policy aims to be compliant with the General Data Protection Regulation (GDPR) May 2018.

1. Data we collect.

We collect personal data to provide and improve our programme and website service. The information we collect includes:

• For programme registration: Name, email address, school name, and school staff job title (if applicable). 
• For needs assessment: A school profile questionnaire, this will include information regarding your school community (such age and number of pupils, number of classes, average number of pupils in a class), some information regarding your current emotional well-being support and need in school.
• To provide psychological advice and signposting: Information about individual children, such as their names, family members, specific emotional issues, extra support provided, and safeguarding information.
• Financial information: Information about direct payments will be logged in our bank account, securely stored, and held for as long as tax purposes require.
• Website usage data: IP address, browser type, and browsing activity on our site. 
• Social media usage: Social media details will be visible if you decide to follow us on social media platforms to share examples of good practice, developments in school mental health, and dates of future events or community parent master classes.
• Cookies:  Information to enhance user experience, such as remembering preferences (see Section 6).

2. How we use your data:

We use the collected data to:

• Register participants and manage programme delivery. 
• Communicate updates, resources, and information about the programme. 
• Improve the functionality, design, and content of our website. 
• Ensure security and monitor for misuse of our services. 

We do not use your data for any puposes beyond those listed without your explicit consent. 

3. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

• Consent: Provided during registration or through cookie preferences. 
• Contractual necessity: To deliver the programme and related services. 
• Legitimate interests: To improve our website and ensure security. 
• Contract: Where a school or institution purchases an institutional license on behalf of their parents, we process parent names and email addresses to fulfill our contractual obligation to provision and manage access to the online learning platform. 

4. Data Sharing

All information is treated confidentially and not shared with anyone else apart from the Raising Resilience team unless safeguarding issues are raised. When working in a school we adhere to the schools own safeguarding policy and procedures and liaise closely with your Safeguarding Officer should we become concerned. 

We do not sell or rent your data to third parties. We may share data only:

• With service providers supporting the programme or website (e.g., technical support), bound by confidentiality agreements. 
• As required by law or in response to legal requests. 

5. Data Security

We implement robust security measures to protect your data from unauthorised access, loss, or misuse, including encrypted storage, access controls, and regular security assessments. 

Our platform is securely hosted on Thinkific, a leading global learning management system. Thinkific runs a highly secure, enterprise-grade cloud environments utilizing Amazon Web Services (AWS). Data is encrypted both in transit (using TLS 1.2 or higher) and at rest (using AES-256 encryption).

Thinkific maintains robust security controls, undergoes regular independent vulnerability testing, and adheres to strict GDPR/UK-GDPR data protection standards through a global Data Processing Addendum (DPA). 

Raising Resilience is not responsible for how information is shared with them. However, they recommend that any sensitive information is either sent by encrypted email or a password protected document with the password sent by a separate means. 

6. Data Retention

We retain data only as long as necessary for the purposes outlined in this policy or to comply with legal obligations.

• Information about individual schools and staff details is held for 3 years after the end of the contract. 
• Information about individual pupils or families (from drop ins or safeguarding situations) is held until the child's 25th birthday in line with professional guidelines for the child to be able to query the service provided to them. 
• For access to Learn2BOUNCE@Home - parent support paid for by a school, individual parent user accounts and associated login data are retained for the duration of the school's contract and will be securely deleted and purged from our active databases within 30 days of the specified platform expiry date.
• All daya will not be held for longer than necessary or required and will be securely destroyed at the appropriate time. 

7. Data Correction

If at any time you are concerned that the data that we hold is incorrect, please alert us as soon as possible and corrective processes can be put into place quickly.

8. Cookies and Tracking Technologies

Our website does use cookies to improve user experience and track usage data:

• Types of cookies: Essential cookies for functionality, analytics cookies for performance monitoring, and preference cookies for user settings. 
• Managing cookies: You can disable cookies through your browser settings; however, some website features may not function properly.

9. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights as an individual regarding your personal data, which you can exercise in relation to the information we hold about you:

• Access: Request a copy of the data we hold about you. 
• Correction: Request corrections to inaccurate or incomplete data. 
• Deletion: Request the deletion of your data where applicable. 
• Objection: Object to processing based on legitimate interests. 
• Data portability: Request transfer of your data to another service. 

You can read more about these rights at https://ico.org.uk/for-the-public/ 

To exercise these rights, or if you wish to make a complaint about how we have handled your personal data, please contact our Data Protection Officer directly at [email protected]. We will acknowledge your request within 30 days and seek to resolve it directly. You retain the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you remain dissatisfied.

10. Third Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites, and we encourage you to review their policies.

11. Children's Privacy

We do not knowingly collect personal data from individuals under 18 without parental or school consent.If you believe we have collected such data, please contact us to ensure its removal.

12. Changes to this Policy

We may update this Privacy Policy periodically. Changes will be posted on our website, and where necessary, we will notify users via email.1

By using our online BOUNCE Programme and website you agree to the terms of this Privacy Policy.

Effective date: 1st September 2024