COMPANY POLICIES

DATA PROTECTION POLICY

DATA PROTECTION POLICY

This policy outlines the privacy and data protection measures which need to be adhered to by all QA Associates Ltd. staff.

Policy statement

The policy sets out the different areas where user privacy is concerned and outlines the obligations & requirements of the users, the website and website owners. Furthermore the way this website processes, stores and protects user data and information will also be detailed within this policy.

Scope

This policy applies to all QA Associates Ltd. staff working with centres and individuals in the services provided.

 

All staff setting up and maintaining external communications are expected to comply with this policy at all times to protect the privacy, confidentiality, and interests of our company and our services, employees and customers.

Implementation

The Director responsible for Information has overall responsibility for the effective operation of this policy.

 

All QA Associates Ltd. Directors are responsible for monitoring and reviewing the operation of this policy and making recommendations for changes to minimise risks to our organisation.

 

All staff are responsible for their own compliance with this policy and for ensuring that it is consistently applied. All staff should ensure that they take the time to read and understand it. Any breach of this policy should be reported the Director responsible for Information.

 

Questions regarding the content or application of this policy should be directed to the Director responsible for Information.

Retaining and Managing Personal Data

If there is any suspicion that an QA Associates Ltd. account has been hacked/compromised, it must be reported to the Director responsible for Information. The incident will then be investigated and centres/individuals affected will be notified.

 

Only QA Associates Ltd. Directors are permitted to set up and maintain communication logs that contain personal data.

 

QA Associates Ltd. Directors have overall responsibility for the management of personal data.

 

All personal data provided via the QA Associates Ltd. consent forms must to be added to the appropriate granular consent record.

 

The consent form must contain the following information:

 

  • Name of teacher
  • Teacher’s email address (from an official centre email address)
  • Centre name
  • Centre postcode
  • Accompanying statements as detailed in sections 5.6 and 5.7 of this policy.

 

Only QA Associates Ltd. authorised users will have to access to data records. Records will not be made public.

 

The following statements must be read and acknowledged (using tick boxes) by the individual in order for their data to be added to QA Associates Ltd. records.

 

I give permission for my details (name and centre email address) to be added to QA Associates Ltd. records and I may be contacted with information regarding QA Associates Ltd. services in the future.

 

OR

 

I give permission for my details (name and centre email address) to be added to QA Associates Ltd. records for the duration of the work undertaken. I accept that I have provided my details voluntarily for inclusion in QA Associates Ltd. records. I understand that requests to remove contact information from QA Associates Ltd. records will be undertaken in a timely manner, although I still may receive communications whilst this request is being processed.

Monitoring and Review

The Director responsible for Information shall be responsible for reviewing this policy annually to ensure that it meets legal requirements and reflects best practice.

Data Owner

QA ASSOCIATES LIMITED

81 HICKTON ROAD

SWANWICK

DERBYSHIRE

DE55 1 AG

T: +44 (0)1773 748866

E: info@qa-associates.co.uk