TeacherMatic Privacy Policy
https://teachermatic.com (the “Site”) is owned and operated by Innovative Learning Technology Ltd. Innovative Learning Technology Ltd is the data controller and can be contacted at:
dpo@teachermatic.com
28 City Road, London, EC1V 2NX
We provide an affiliate program for our partners and affiliates to help spread the word about our products and services. This utilises a cookie, which is saved to your local browser when following a link specific to the affiliate in question. This cookie only stores data to our system if a purchase is made. The data stored is fully anonymised and does not make personally identifiable information available to either the affiliate, or the administrators of our system.
Purpose
The purpose of this privacy policy (this “Privacy Policy”) is to inform users of our Site of the following:- The personal data we will collect;
- Use of collected data;
- Who has access to the data collected;
- The rights of Site users; and
- The Site’s cookie policy.
GDPR
For users in the European Union, we adhere to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (the “GDPR”). For users in the United Kingdom, we adhere to the GDPR as enshrined in the Data Protection Act 2018.Consent
By using our Site users agree that they consent to:-
- The conditions set out in this Privacy Policy.
Legal Basis for Processing
We collect and process personal data about users in the EU only when we have a legal basis for doing so under Article 6 of the GDPR. We rely on the following legal basis to collect and process the personal data of users in the EU:- Users have provided their consent to the processing of their data for one or more specific purposes.
Personal Data We Collect
We only collect data that helps us achieve the purpose set out in this Privacy Policy. We will not collect any additional data beyond the data listed below without notifying you first.Personally Identifying Information
End users
We may collect the following data when you perform certain functions on our Site:
- First and last name; and
- Email address
- Data input into our tools, and the resulting outputs
- Creating an account.
- Using our suite of tools
Affiliates
If you sign up to our affiliate program, you will be required to provide additional contact information as required by our onboarding and compliance procedures.
Payment information
We use Stripe and PayPal to process payments. When you make a purchase, you enter your payment information directly on Stripe or PayPal‘s secure platform, the information is then encrypted and is then sent to the respective payment processor. Your payment information is kept strictly confidential by both Stripe and PayPal and it is not shared with us. Your payment information is securely stored by Stripe or PayPal and not transferred back to us. Stripe and PayPal comply with the Payment Card Industry Data Security Standard (PCI–DSS), which sets minimum requirements for the security of cardholder data.
We do not use any of your personal information or payment information for any other purpose other than processing payments. Stripe and PayPal use your information only to complete transactions, to verify billing information and to detect and prevent fraud. We do not store payment information on our servers.
Anonymous Data
Google Analytics
we use Google Analytics to collect anonymous demographic and usage information about our users in order to monitor the success of our website and provide a better user experience.
The anonymous data collected by Google Analytics includes but is not limited to: Search terms users typed into search engines that resulted in them visiting our website, average time spent on our website, average number of pages on our website visited, approximate location of users based on their IP address, and type of device used to access our website.
We use this anonymous data collected by Google Analytics to better understand how our users use our site, which allows us to improve our website experience and marketing efforts. More specifically, we use this data to track page views, conversions, form submissions, and user behavior. We also use it to optimize our website‘s speed, which leads to a better user experience when using our website.
Finally, we use this anonymous data to assess marketing efforts to help ensure that all of our marketing is targeted towards the right people. We may use the data collected to identify which marketing campaigns and channels are the most successful at bringing in visitors and converting them to customers.
We never collect any personally identifiable information about our users and Google Analytics does not store PII either.
Read more on how google uses information from sites or apps that use their services.
Affiliate links
How We Use Personal Data
Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy. The data we collect when the user performs certain functions may be used for the following purposes:- For users to log in to our platform.
- For email personalisation.
- For features such as autocompletion and sharing outputs (only where users have willingly chosen to do so).
- For resolving support enquiries.
Who We Share Personal Data With
Employees and Directors We may disclose user data to any member of our organisation who reasonably needs access to user data to achieve the purposes set out in this Privacy Policy.Service providers
We work with partner organisations to who provide services which may involve directly or indirectly having access to personal information of our users. These include:- Hosting providers
- Development and support service providers
- OpenAI (for data potentially input into our generators)
Other Disclosures
We will not sell or share your data with other third parties, except in the following cases:- If the law requires it;
- If it is required for any legal proceeding;
- To prove or protect our legal rights; and
- To buyers or potential buyers of this company in the event that we seek to sell the company.
Where we store your data
We store all data on servers located in the UK and are fully compliant with applicable UK laws and guidance on the processing of personal data. Our data storage services are provided by a reputable third–party provider and are subject to relevant security and confidentiality agreements. All data collected will remain within the UK at locations that provide a sufficient level of protection for the personal information that we process. We regularly review and audit our data storage locations to ensure the highest levels of security.
Where your data is processed
Where possible we always ensure data is kept and processed in the UK. Some services are provided by third party service providers who may have access to your personal data. These are specified below, along with the relevant policies related to these service providers.
OpenAI (United States)
We are reliant on OpenAI to enhance our experience. In the unlikely event that personally identifiable information is submitted to one of our tools, there is a chance that this may be transmitted through the OpenAI API for processing by their AI engine.
Read about how OpenAI uses data submitted through the api.
Highlights:
- OpenAI will not use this data to train or improve it’s AI models.
- OpenAI will retain this data for abuse and misuse monitoring for 30 days.
Terus Technology Ltd
We contract certain development and support services from Terus Technology Ltd, which is a UK based education technology company. Through providing these services, employees and contractors of this organisation may have access to user data on our systems. We understand that certain employees and contractors of Terus Technology Ltd are occassionally or entirely based outside the UK. As such we have taken certain measures to ensure that transfers to these juristictions are justified and secure.- A data processing agreement is in place between the two organisations
- Terus Technology Ltd has conducted a thorough International Data Transfer Risk Assessment (validated by Innovative Learning Technologies Ltd).
How Long We Store Personal Data
User data will be stored until the purpose the data was collected for has been achieved. You will be notified if your data is kept for longer than this period.How We Protect Your Personal Data
All access to our platforms are SSL encrypted, and best practice is used for maintaining and securing our server software. Only minimal data is collected as necessary for providing the services users have signed up to use. While we take all reasonable precautions to ensure that user data is secure and that users are protected, there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is possible using best practice.Highlights of our data security policies
To protect data, all administrator accounts are secured using multi–factor authentication (MFA) to prevent unauthorized access. In addition, all server and platform software remains up to date with automatic updates to patch any newly discovered security issues. Access to physical servers is restricted to approved employees, and is conducted through encrypted key pairs, as well as being IP restricted to a specific UK IP address. In addition, we store all company data in firewalled data centers, and use house protocols to institute further data security. These protocols include robust password protocols, individual–session monitoring, and encryption for all traffic. Your Rights as a User Under the GDPR, you have the following rights:- Right to be informed;
- Right of access;
- Right to rectification;
- Right to erasure;
- Right to restrict processing;
- Right to data portability; and
- Right to object.
Children
We do not knowingly collect or use personal data from children under 16 years of age. If we learn that we have collected personal data from a child under 16 years of age, the personal data will be deleted as soon as possible. If a child under 16 years of age has provided us with personal data their parent or guardian may contact our data protection officer.How to Access, Modify, Delete, or Challenge the Data Collected
Data removal
You can at any time delete your own account from our system. This can be done via My Account -> Delete account. This will remove all PII from our system.
Please note that due to our backup procedures, your data may be stored on our systems for up to 30 days prior to being fully removed.
Further information
If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to who we disclosed your personal data, if you would like your data to be deleted or modified in any way, or if you would like to exercise any of your other rights under the GDPR, please contact our data protection officer here: Data Protection Officer dpo@teachermatic.com 128 City Road, London, EC1V 2NXDo Not Track Notice
Do Not Track (“DNT”) is a privacy preference that you can set in certain web browsers. We do not track the users of our Site over time and across third party websites and therefore do not respond to browser-initiated DNT signals.Cookie Policy
A cookie is a small file, stored on a user’s hard drive by a website. Its purpose is to collect data relating to the user’s browsing habits. You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your internet browser, but this may decrease the quality of your user experience. We use the following types of cookies on our Site:- Functional cookies Functional cookies are used to remember the selections you make on our Site so that your selections are saved for your next visits, or when following affiliate links.
- Analytical and Third Party cookies Analytical cookies allow us to improve the design and functionality of our Site by collecting data on how you access our Site, for example data on the content you access, how long you stay on our Site, etc
Please note that when accepting our cookie policy (upon accessing our site) you can disable analytical and third party cookies.
Notification of breaches
In the event of a data breach, we will notify our customers and users in a timely manner. We will also notify the relevant supervisory authority of such a breach within 72 hours of our first becoming aware of the breach. In cases where the breach is likely to result in a high risk to the rights and freedoms of our customers or users, we will also notify affected individuals without undue delay. We will also keep an up–to–date register of all data breaches, including the nature of the personal data breach, the categories of data subjects affected and the measures taken to remediate the issue.
