Privacy Policy / GDPR Policy
Identity and Contact Details
You can find out more about Grey Matter Learning on this website here. We are registered with the Information Commissioner’s Office; our registration number is Z1710421. Our designated statutory authority under the General Data Protection Regulation (GDPR) and UK data protection legislation is the Information Commissioner’s Office (ICO). We are based in England.
Data Protection Officer
The individual in charge of Data Protection at Grey Matter Learning is Eddie Stevens.
Contact Eddie by email at [email protected]. Call our main line (+44 1635 890373) to contact Eddie by telephone.
Is Grey Matter Learning a Data Controller or a Data Processor?
Grey Matter Learning works as a data processor for the majority of our work. Some products and services are delivered with Grey Matter Learning working as a data controller.
Where Grey Matter Learning is a Data Processor
Where we work under contract with the organisation that employs you, or work with a public body that makes our services available to organisations within its boundaries to provide our learning and competence recording products, we are working as data processors. We are processing your data under contract for the data controller at your organisation. Consequently, if you would like to exercise your GDPR rights regarding your data, you must make this request to your data controller.
Where Grey Matter Learning is a Data Controller
Where you as an individual have contracted directly with us through a licence to use our learning and competence recording, face-to-face training and consultancy products or you have requested that we send you information on our products, we are working as a data controller. To exercise your GDPR rights regarding your data, please contact our Data Protection Officer.
Data We Collect
For customers, business partners and prospective customers, we capture the following information:
Our competence recording systems collect:
● First name
● Last name
● Email address
● The organisation that you work for
● A portfolio of evidence of your learning and competence Our eLearning systems collect:
● First name
● Last name
● Email address
● The organisation that you work for
A record of any eLearning that you have completed or part-completed Our Customer Relationship Management System (CRM) collects:
● First name
● Last name
● Email address
● Organisation name
● Organisation address
● Telephone numbers
● Contract details (if applicable)
● Records of contact made between you and us
● Opt-ins for communication
We capture and audit when, where and how we communicate with the contacts.
Why We Collect Data
We collect information on existing customers and business partners so that we can manage contracts and carry out our business.
We collect personal data on prospective customers either through interactions with people, from information that is publicly available (including data on the web), or from face-to-face meetings.
We use the personal data on prospective customers to communicate how we can help the organisation to optimise the learning and development of their staff through the use of our products and services. Grey Matter Learning has a ‘legitimate interest’ in communicating information on Grey Matter Learning offerings to this prospective client base.
We send out regular sector-relevant content, including newsletters, whitepapers, sector updates and updates on our product and service offerings to prospective customers, existing customers and business partners. Where individuals receive this communication regularly, they have consented to receive it.
We collect information from individuals who exercise their various rights under the GDPR through profile pages and emails triggered by links on this website.
We do not collect special category data.
When We Delete Data
We retain data for as long as the prospective customer, existing customer or business partner has an active licence or we have a lawful reason to process data. Where people consent to receive information from us, we retain data for as long as the individual wishes plus we provide a mechanism to opt-out with each communication that we send.
We retain information on our business partners until a partnership ends.
Other Information on What We Do with Data
We store and process data for which we act as data controllers or data processors in the UK.
We do not carry out profiling or automated decision-making on data.
We do not provide information to any third parties without the express consent of the data subject where we act as a data controller, or the data controller where we process data on their behalf.
We may share your personal data with third parties to whom we may choose to sell, transfer or merge parts of our business or our assets (whether during the due-diligence exercise or following completion). Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Policy.
How We look after Data
We take reasonable technical and procedural precautions to prevent the loss, misuse or unauthorised alteration of personal data.
We store the personal data that we collect securely.
Your Rights
Grey Matter Learning recognises the rights of data subjects as defined in the GDPR.
We will always seek to uphold those rights; to exercise those rights, you can email us at [email protected], where relevant.
The Grey Matter Group recognises your right to lodge a complaint with a supervisory authority. For more information, you can access the ICO website at https://ico.org.uk.
Third Party Processors
Our carefully selected partners and service providers may process personal information about you on our behalf as described below:
Digital Marketing Service Providers
We periodically appoint digital marketing agents to conduct marketing activity on our behalf, such activity may result in the compliant processing of personal information. Our appointed data processors include:
(i)Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy policy here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 their Data Protection Officer can be emailed at: [email protected].
The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies.
Analytics
We may use third-party Service providers to monitor and analyse the use of our Service.
- Google Analytics
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity.For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy
