Privacy & Cookie Policy

Please read this cookie policy carefully as it contains important information on who we are and how we use cookies on our website. This policy should be read together with our Privacy Policy found on this page, which sets out how and why we collect, store, use and share personal information generally, as well as your rights in relation to your personal information and details of how to contact us and supervisory authorities if you have a complaint.

Our website

This website is operated by Computeam Limited. This cookie policy relates to your use of our website.

Throughout our website we may link to other websites owned and operated by certain trusted third parties to provide further information or link to other services that may be of interest to you. These other third-party websites may also use cookies or similar technologies in accordance with their own separate policies. For privacy information relating to these other third-party websites, please consult their policies as appropriate.

Cookies

A cookie is a small text file which is placed onto your device (eg computer, smartphone or other electronic device) when you use our website. We use cookies on our website. These help us recognise you and your device and store some information about your preferences or past actions.

For example, we may monitor how many times you visit the website, which pages you go to, traffic data, location data and the originating domain name of your internet service provider. This information helps us to facilitate and improve your experience of Our Site and to provide and improve Our products and services. Some of this data will be aggregated or statistical, which means that we will not be able to identify you individually.

For further information on our use of cookies, including a detailed list of your information which we and others may collect through cookies, please see below.

For further information on cookies generally, including how to control and manage them, visit the guidance on cookies published by the UK Information Commissioner’s Office, or www.allaboutcookies.org.

Consent to use cookies and changing settings

We will ask for your consent to place cookies or other similar technologies on your device, except where they are essential for us to provide you with a service that you have requested (e.g. to enable you to put items in your shopping basket on our web shop and use our check-out process).

You can withdraw any consent to the use of cookies or manage any other cookie preferences using your internet browser. Most internet browsers also enable you to choose whether you wish to disable all cookies or only third-party Cookies. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device. It may be necessary to refresh the page for the updated settings to take effect.

You can choose to delete Cookies on your computer or device at any time, however you may lose any information that enables you to access Our Site more quickly and efficiently including, but not limited to, login and personalisation settings.

It is recommended that you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy settings.

Due to changes by Third Party services which are beyond Our control the specific cookies stored may change without prior warning. We will update this privacy policy whenever We are notified of such changes.

Our use of cookies

The table below provides more information about the cookies we use and why:

The cookies we use	Name	Purpose	Whether cookie is essential for us to provide you with a service that you have requested and whether we will seek your consent before we place the cookie
First party Cookie	HPSESSID	Maintaining your PHP session	Yes, essential we will therefore not request your consent before placing this cookie.
Analytics Cookie	_ga	Used to distinguish users, expires after 2 years.	No, we will therefore request your consent before placing this cookie
Analytics Cookie	_gid	Used to distinguish users, expires after 24 hours.	No, we will therefore request your consent before placing this cookie
Analytics Cookie	_gat	Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_<property-id>. expires after 1 minute.	No, we will therefore request your consent before placing this cookie
Analytics Cookie	AMP_TOKEN	Contains a token that can be used to retrieve a Client ID from AMP Client ID service. Other possible values indicate opt-out, inflight request or an error retrieving a Client ID from AMP Client ID service. Expires after 30 seconds to 1 year
Analytics Cookie	_gac_<property-id>	Contains campaign related information. AdWords website conversion tags will read this cookie.n Expires after 90 Days

Third party access to the cookies

The cookies we use will only be accessed by us and those third parties named in the table above for the purposes referred to in this cookie policy.

How to turn off all cookies and the consequences of doing so

If you do not want to accept any cookies, you may be able to change your browser settings so that cookies (including those which are essential to the services requested) are not accepted. If you do this, please be aware that you may lose some of the functionality of our website.

For further information about cookies and how to disable them please go to the guidance on cookies published by the UK Information Commissioner’s Office, or www.allaboutcookies.org.

How to contact us

Please contact our Data Protection Officer, if you have any questions about this cookie policy or the information we hold about you.

If you wish to contact our Data Protection Officer, please send an email to please email us at dpo@computeam.co.uk, write to Data Protection Officer, Computeam, Suite 443 Broadstone Mill, Broadstone Road, Stockport, Cheshire, SK5 7DL

Changes to this policy

This policy was published on 11th July 2024. We may change this policy from time to time (for example, if the law changes). Any changes will be immediately posted on Our Site, and you will be deemed to have accepted the terms of the Policy on your first use of Our Site following the alterations. We recommend that you check this page regularly to keep up-to-date.

Privacy Policy

1. Introduction

1.1 We, Computeam Limited (we, us, our) take privacy, and the security of personal data, very seriously, and we are committed to ensuring that we safeguard your personal data at all times and in the best way possible.

1.2 This privacy policy contains important information for you. It explains:

1.2.1 who we are;

1.2.2 what personal information we collect about you;

1.2.3 how, when and why we collect, store, use and share your personal data;

1.2.4 how we keep your personal data secure;

1.2.5 how long we keep your personal data;

1.2.6 your rights in relation to your personal data; and

1.2.7 how to contact us, or the relevant supervisory authorities, should you have a complaint.

1.3 In order that we can provide our services, we need to collect, use, and process or deal with, certain personal information about our employees, customers, suppliers and service users. When we do so we are subject to the provisions of the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and we are responsible as what is described as a ‘controller’ of that personal information for the purposes of those laws. In other words, we are primarily responsible for that data, and are the ‘natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data’.

1.4 If you have any questions about the use to which we put your data, please email us at dpo@computeam.co.uk or write to Data Protection Officer, Computeam, Suite 443 Broadstone Mill, Broadstone Road, Stockport, Cheshire, SK5 7DL

1.5 This policy applies in all circumstances where we are acting as a data controller in relation to the personal data of our customers, suppliers, employees and agents, website visitors and service users. That is to say, it applies where we have a supervisory role in relation to how personal data is collected, stored, used and shared.

1.6 We are committed to preserving the privacy of your data so that we can:

1.6.1 supply products and deliver services of a high quality to our customers;

1.6.2 at all times comply with the law and the various regulations that we are subject to;

1.6.3 meet the expectations of our customers, employees and third parties; and

1.6.4 protect our reputation.

1.7 In this policy, please note the use of the following terms:

Client System	any information technology system or systems owned or operated by any of our customers from which personal is received by us;
personal data	has the meaning given to it by the UK GDPR and means any information relating to an identified or identifiable individual (known as a ‘data subject’);
processing	means any operation or actions performed on personal data; for example collection, recording, organisation, structuring, storing, altering, deleting or otherwise using personal data;
you and your	refers to the person whose data is processed.

2. Your personal data

2.1 We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

2.1.1 Identity Data includes first name, last name, any previous names, username or similar identifier, marital status, title, date of birth and gender.

2.1.2 Contact Data includes billing address, delivery address, email address and telephone numbers.

2.1.3 Financial Data includes payment card details.

2.1.4 Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.

2.1.5 Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.

2.1.6 Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.

2.1.7 Usage Data includes information about how you interact with and use our website, products and services.

2.1.8 Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

2.2 We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' Usage Data to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.

2.3 We use different methods to collect data from and about you including through:

2.3.1 Your interactions with us. You may give us your personal data by filling in online forms, through our client portal, web support portal, or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

a) apply for our products or services;

b) create an account on our website, client portal or web support portal;

c) subscribe to our service or publications;

d) request marketing to be sent to you;

e) enter a competition, promotion or survey; or

f) give us feedback or contact us.

2.4 Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please see our Cookie Policy below for further details.

2.5 Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:

2.5.1 Technical Data is collected from the following parties:

a) analytics providers such as Google based outside the UK whose privacy policy is here https://policies.google.com/privacy?hl=en-Uk;

b) advertising networks such as Facebook based outside the UK whose privacy policy is here: https://www.facebook.com/privacy/policy/; and

c) search information providers such as Google based outside the UK.

2.5.2 Contact, Financial and Transaction Data is collected from providers of technical, payment and delivery services such as GoCardless based inside the UK, whose privacy policy is here: https://gocardless.com/privacy/.

2.5.3 Identity and Contact Data is collected from publicly available sources such as Companies House and the Electoral Register based inside the UK.

2.6 Please note that it is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

3. The purposes for which your information is used

3.1 Data protection law requires that we only use your personal data for the purposes for which it was acquired, or where we have a proper reason for using it. Those reasons may include the following:

3.1.1 Where you have given consent to the use of your personal data for one or more specific purposes.

3.1.2 Where the use is necessary for the performance of a contract to which you are party, or in order to take steps at your request prior to entering into a contract.

3.1.3 Where the use is necessary for compliance with a legal obligation that we are subject to.

3.1.4 Where the use is necessary in order to protect your vital interests or those of another person.

3.1.5 Where the use is necessary for the performance of a task carried out in the public interest, or in the exercise of official authority vested in us.

3.1.6 Where the use is necessary for the purposes of our legitimate interests or those of a third party, except where those interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data, in particular where you or the relevant person is a child.

3.2 The reasons set out above represent the general position as to the purposes for which data may be used. The specific position in relation to your personal data, however, is that we may use it for the following purposes, depending on your client relationship with Computeam:

Purpose:	Description and Types of Client Data:	Category of Data Subject:	Description of Processing:
Technical support services to be provided by us utilising remote access to the Client System	All information stored electronically that constitutes personal data (including personal details, family and lifestyle details, education and training details, medical details, employment details. financial details and contractual details.)	Pupils, former pupils, and prospective pupils at Computeam client sites Employees, former employees and prospective employees at Computeam client sites Parents of pupils, former pupils and prospective pupils at Computeam client sites Governors and former governors at Computeam client sites Named individual contacts of individuals and organisations that deal with Computeam client sites (e.g. suppliers, charitable organisations, consultants etc)	The use, alteration, recording, storage, and retrieval, of personal data by us (as part of all of the data on the Client System) via remote access to the Client System via third party software as part of the access to the Client System required by us in order to provide the technical support services
Cloud based data storage and back-up of client files to be provided by us	All information stored electronically that constitutes personal data (including personal details, family and lifestyle details, education and training details, medical details, employment details. financial details and contractual details.)	Pupils, former pupils, and prospective pupils at Computeam client sites Employees, former employees and prospective employees at Computeam client sites Parents of pupils, former pupils and prospective pupils at Computeam client sites Governors and former governors at Computeam client sites Named individual contacts of individuals and organisations that deal with Computeam client sites (e.g. suppliers, charitable organisations, consultants etc)	The copying, recording, storage and encryption of personal data as part of a back-up of all data held on the Client System and the transfer and/or retrieval of such data to/from cloud based data storage provided by third parties
Lease of server(s) and associated equipment by us to our client to be located at the client’s premises and (where applicable) the replacement, renewal, and/or decommissioning of such equipment	All information stored electronically that constitutes personal data (including personal details, family and lifestyle details, education and training details, medical details, employment details. financial details and contractual details.)	Pupils, former pupils, and prospective pupils at Computeam client sites Employees, former employees and prospective employees at Computeam client sites Parents of pupils, former pupils and prospective pupils at Computeam client sites Governors and former governors at Computeam client sites Named individual contacts of individuals and organisations that deal with Computeam client sites (e.g. suppliers, charitable organisations, consultants etc)	The collection, recording, storage, adaptation and retrieval of personal data (as part of all of the data held on the server(s)) and the transfer and/or erasure and/or destruction of the personal data in the event of the removal of the sever(s) from the Client’s premises or renewal, replacement and/or decommissioning of the server(s)
The provision of online or app-based training services for teachers	All information submitted by our clients electronically that constitutes personal data (including personal details, family and lifestyle details, education and training details, medical details, employment details. financial details and contractual details.)	Employees, former employees and prospective employees at Computeam client sites	The use, alteration, recording, storage, and retrieval, of personal data by us via our online or app-based training platform as is required by us in order to provide the servicesd

3.2.1 To provide our services to you so that we can comply with our contract with you or take any steps that it is necessary for us to take before entering into a contract with you.

3.2.2 To comply with our internal business policies, and for operational reasons such as security, confidentiality, competency and efficiency control, training and client care. This will help us to deliver the best services to you.

3.2.3 For statistical analysis to enable us better to manage our business; for example in relation to our financial performance, customer base, or product range.

3.2.4 For maintaining and updating records to ensure accuracy of processing.

3.2.5 To comply with legal and regulatory obligations to make information returns to regulators and legally-constituted bodies.

3.2.6 To ensure safe working practices, and for staff administration and assessment purposes.

3.2.7 For marketing our services and those of selected third parties; including the use of photographs and video (if agreed to by you) to existing and former clients and third parties.

3.2.8 For credit control and credit reference checks in relation to the services we perform.

3.3 The purposes set out above will not apply to what is termed ‘special category personal information’. This includes personal information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic and biometric data capable of identifying you, and data concerning health, sex life or sexual orientation. We will only ever process information of that nature with your explicit consent.

4. Contacting you

4.1 We may also need to send you updates concerning our services, and about relevant developments in relation to you, our services, or other related matters which might concern you or be of interest to you. This may be by post, telephone, email or text, and may include information about the services we offer, and information relating to changes in those services.

4.2 We regard ourselves as having a legitimate interest in processing your personal data for these purposes, and we take the view that we do not require your consent in order to do so. From time to time we undertake what are known as ‘legitimate interest assessments’ in order to balance our interests in contacting you with your interests in relation to your data. Where we believe that consent is required, we will contact you specifically for this, and will do so in a clear and transparent manner.

4.3 Where you have agreed to us doing so we may also send you information about third party services in which you have expressed an interest, or which are relevant to any services that we have supplied.

4.4 Be assured that we treat your personal data with the utmost respect and will never share it with others for marketing or promotional purposes. You have, at all times, the right to request that we do not contact you for any purpose other than providing our services. We may however require that you confirm your marketing preferences from time to time so that we can be sure that your views remain the same, especially in relation to issues such as legal and regulatory updates.

5. Sharing your data with others

5.1 Notwithstanding the fact that we will not share your personal data for marketing purposes, it may be necessary for us to share your personal data with others in order to perform our services for you, to comply with our contractual obligations to you, to comply with our legal or regulatory obligations to you, or to comply with any contractual, legal or regulatory obligations that we are subject to. These may include:

5.1.1 Professional advisers used in connection with services in relation to which we are instructed (e.g. accountants, advisors, experts, barristers, medical professionals, designers, printers, manufacturers, installers, and delivery companies).

5.1.2 Third parties involved in the matter which we are dealing with, such as financial services providers, banks, building societies, registrars.

5.1.3 Government and similar organisations such as HM Land Registry, Companies House, HM Revenue and Customs.

5.1.4 Others within our business.

5.1.5 Your/our regulator(s).

5.1.6 Credit reference agencies in connection with our contract with you.

5.1.7 Our bank, insurers and insurance brokers.

5.1.8 External auditors in relation to the audits and external quality reviews referred to above.

5.1.9 Suppliers of services required in relation to our services.

5.2 When sharing your personal data, we will ensure at all times that those with whom it is shared process it in an appropriate manner, and take all necessary measures in order to protect it. In doing so we impose contractual obligations on all providers of services to ensure that your personal data is kept secure. We will only ever allow others to handle your personal data if we are satisfied that their measures to protect your personal data are satisfactory.

5.3 Please be aware that, from time to time, we may be required to disclose your personal data to, and exchange information about you or relating to you with, government, law enforcement and regulatory bodies and agencies in order to comply with our own legal and regulatory obligations.

5.4 During the course of, and sometimes following the conclusion of, our provision of services to you we may need to share your personal data with other third parties, for example those involved in a relevant or related transaction. We will only share that information which it is necessary and relevant to share.

5.5 We may also need to share some personal information with other parties, such as potential buyers of some or all of our business, or during a re-structuring. Usually, information will be anonymised, but this may not always be possible. The recipient of the information will be bound by confidentiality obligations.

5.6 From time to time it may be necessary for us to share data for statistical purposes (for example with our regulatory body). We will always take steps to try to ensure that information shared is anonymised, but where this is not possible we will require that the recipient of the information keeps it confidential at all times.

6. How your personal data is kept

6.1 Your personal data will be kept secure at all times.

6.2 Some of your data may be held on secure, cloud-based servers operated by our supply chain partners including but not limited to ConnectWise, Google and Microsoft. In all cases personal data such as this is encrypted, and login access is protected by multi-factor authentication. Where this takes place outside the EEA then the provisions set out in Paragraph 7 below apply.

6.3 We operate various security measures in order to prevent the loss of, or unauthorised access to, your personal data. We restrict access to your personal data to those with a genuine business need to access it, and we have procedures in place to deal with any suspected data security breach. We will notify you, and any applicable regulator, of a suspected data security breach where we are legally required to do so.

6.4 Personal data that is processed by us will not be retained for any longer than is necessary for that processing, or for purposes relating to or arising from that processing.

6.5 Where your personal data is retained after we have finished providing our services to you, or where the contract with you has ended in any other way, then this will generally be for one of the following reasons:

6.5.1 So that we can respond to any questions, complaints or claims made by you or on your behalf.

6.5.2 So that we are able to demonstrate that your matter was dealt with adequately, and that you were treated fairly.

6.5.3 In order to comply with legal and regulatory requirements.

6.6 In general, we will only retain your data for so long as is necessary for the various objectives and purposes contained in this policy. Please note, however, that different periods for keeping your personal data will apply depending upon the type of data being retained and the purpose of its retention.

6.7 We will retain your personal data as follows:

6.7.1 For as long as we believe you remain employed by a client organisation of Computeam except where a specific request to delete your data has been received; or for up to 2 years after your organisation has ceased to be a client.

6.7.2 Contact details are retained so that we can inform you of updates concerning our services, and about relevant developments in relation to you, our services or other related matters which might concern you, or be of interest to you.

6.7.3 For such time as is necessary for compliance with a legal obligation that we are subject to, or in order to protect your vital interests, or the vital interests of another natural person.

7. Transferring your data outside the EEA

7.1 In order for us to provide you with the services for which we have been instructed, it may be necessary for us to share your personal data with those who are outside the EEA where, for example, those persons have offices outside the EEA are based outside the EEA where electronic services and resources are based outside the EEA or where there is an international element to the instructions we have received from you. Where this is the case, special rules apply to the protection of your data.

7.2 It may be necessary, during the course of your transaction, for us to transfer personal data relating to you to one or more of the following countries which have been assessed by the European Commission as providing an adequate level of protection for personal data: United States of America.

7.3 Other than countries listed above we may also need to transfer your personal data to non-EEA countries that have not been assessed by the European Commission as providing adequate protection. In such cases we will always take steps to ensure that, wherever possible, the transfer complies with data protection law, and that your personal data will be secure. We use standard data protection contract clauses which have been approved by the European Commission in such circumstances.

7.4 For further information please contact us at dpo@computeam.co.uk.

8. Your rights in relation to your data

8.1 Data protection legislation gives you, the data subject, various rights in relation to your personal data that we hold and process. These rights are exercisable without charge, and we are subject to specific time limits in terms of how quickly we must respond to you. Those rights are, in the main, set out in Articles 12–23 of the UK GDPR. They are as follows:

8.1.1 Right of access—the right to obtain, from us, confirmation as to whether or not personal data concerning you is being processed and, where that is the case, access to that personal data and various other information, including the purpose for the processing, with whom the data is shared, how long the data will be retained, and the existence of various other rights (see below).

8.1.2 Right to rectification—the right, without undue delay, to have inaccurate personal data concerning you put right.

8.1.3 Right to erasure—sometimes referred to as the ‘right to be forgotten’, this is the right for you to request that, in certain circumstances, we delete data relating to you.

8.1.4 Right to restrict processing—the right to request that, in certain circumstances, we restrict the processing of your data.

8.1.5 Right to data portability—the right, in certain circumstances, to receive the personal data which you have provided to us in a structured, commonly used and machine-readable format, and the right to have that personal data transmitted to another controller.

8.1.6 Right to object—the right, in certain circumstances, to object to personal data being processed by us where it is in relation to direct marketing, or in relation to processing supported by the argument of legitimate interest.

8.1.7 Right not to be subject to automated decision making—a right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

8.2 Full details of these rights can be found in the UK GDPR or by reference to guidance produced by the Information Commissioner’s Office.

8.3 In the event that you wish to exercise any of these rights you may do so by:

8.3.1 Contacting us using any medium you wish, including in writing, by telephone, by text, electronically, or using such social media as we employ for communication purposes.

8.3.2 By completing a form which we can supply to you for this purpose.

8.3.3 Through a third-party whom you have authorised for this purpose.

9. Keeping your data secure

9.1 In order to ensure that data is kept secure, and to prevent there being any breach of confidentiality, we have put in place security measures which are intended to prevent your personal data from being accidentally lost or used or accessed unlawfully. Access to your personal data is restricted to those with a need to access it, and regard will be had to the need for confidentiality when that personal data is processed.

9.2 Our systems are subject to rigorous testing, and we are Cyber Essentials Certified and ISO 9001:2015 certified, meaning that we observe industry standards for information security.

9.3 In the event that there is a suspected data security breach you will be notified. We will also inform the appropriate regulator (including the Information Commissioner’s Office) of a suspected data security breach, where we are legally required to do so.

10. Making a complaint

10.1 If you have any queries as to the acquisition, use, storage or disposal of your personal data, we can be contacted at dpo@computeam.co.uk or write to Data Protection Officer, Computeam, Suite 443 Broadstone Mill, Broadstone Road, Stockport, Cheshire, SK5 7DL.

10.2 Notwithstanding our best efforts, inevitably sometimes things do go wrong. If you are unhappy with any aspect of the use and/or protection of your personal data, you have the right to make a complaint to the Information Commissioner’s Office, who may be contacted in writing at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; by telephone on 0303 123 1113; by fax on 01625 524510 or online at www.ico.org.uk.

11. This policy

11.1 This privacy policy was published on 29th July 2024 and last updated on 29th July 2024.

11.2 The terms and provisions of this privacy policy may be changed, updated and amended from time to time. If we do so during the time when we are providing you with services we will inform you of those changes.