Who we are and contact details
- my-GCSEscience.com (the ‘Site’) is owned by Educational Resources Online Limited (‘EROL’).
- EROL is registered in England and Wales under company number 09070386.
- Our registered office address is New Derwent House, 69-73 Theobalds Road, London, England, WC1X 8TA.
- Our VAT number is 194954456.
We will not provide your personal information to any third parties for the purpose of direct marketing.
What information do we collect?
We may collect, store and use the following personal information: Email address, username, school, whether you are a student, parent or teacher, and (if a student) whether you are in Year 9, 10 or 11. We also collect information relating to any subscription transactions carried out on the Site.
We do not collect first name, family name, date of birth, gender, mobile phone number or address.
We collect activity data about you, including how often you log in to the Site, which videos you watch and whether you have labelled those videos red/amber/green.
A cookie is a small file sent by a web server to a web browser and then stored by the browser. This enables us to distinguish you from other users of the Site. Cookies help us to provide you with a smooth browsing experience.
How do we use your personal information?
Personal information submitted to us via the Site will be used to:
- administer the Site,
- improve your browsing experience by personalising the website,
- facilitate your use of the resources available on the website,
- provide you with access to a subscription purchased via the website,
- send you educational information, including blogs, relating to GCSE Science,
- send you marketing communications (from which you can unsubscribe at any time),
- provide third parties with anonymised statistical information: this information will not be used to identify any individual user,
- deal with enquiries made by or about you relating to the Site,
- keep the Site secure and stable and prevent fraud or cyber attacks,
- verify compliance with the terms and conditions governing the use of the website,
- assess compliance with applicable laws, rules and regulations, and
- manage and administer EROL.
Disclosure of personal information to third parties
We will not disclose your personal information to third parties, except:
- to the extent that we are required to do so by law,
- in connection with any ongoing or prospective legal proceedings,
- in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention),
- to the purchaser (or prospective purchaser) of any business or asset that we are (or are contemplating) selling, and
- to an individual or organisation that is obliged to comply with relevant privacy and confidentiality legislation. For example student usage data may be supplied to a teacher or school, or to a parent.
Where you submit personal information for publication on our website (for use as a testimonial, for example) we will publish and otherwise use that information in accordance with the licence you grant to us.
Email addresses provided as part of school subscriptions
Email addresses provided by users who have signed up via a school subscription are stored on the Site and used as follows:
- for the password recovery system (which will be only be initiated by the user),
- to deliver educational information, notably blogs, relating to GCSE Science, and
- to inform users of important notices regarding the website.
Email addresses provided via a school subscription will not be used for marketing communications or for gathering personal information.
Security and safeguarding of your personal information
As a condition of employment/engagement, EROL’s employees/consultants are required to follow all applicable laws and regulations, including in relation to data protection law. Access to personal information is limited to those employees/consultants who require access.
When you contact My GCSE Science, you may be asked for personal information, typically your username. This safeguard is designed to ensure that only you, or someone authorised by you, has access to your personal information.
SSL certificates encrypt all communications between Positive’s web servers and the user’s browser. This safeguards data communication between the Site and the user. The Site’s web servers can only be accessed by nominated engineers at Positive and nominated web developers at Redwire using SSH keys. Protections are in place to ensure third parties are unable to gain access to Positive’s servers.
Positive’s hosting environment is based in the EEA. Personal data is stored in a separate database server that can only be accessed via the web servers or web interface and is protected with two separate passwords. The website Content Management System (CMS) is continuously updated with security releases by Redwire. The web servers and database servers are kept up-to-date with security patches by Positive.
Positive’s data backup environment is based in the EEA. The database server is backed up nightly and saved on a dedicated drive which sits on the same box as the web servers. Backups are kept for 7 days and then automatically destroyed by deleting the backup data from the relevant databases.
How long is the information kept?
My GCSE Science resources are suitable for students in Year 9, Year 10 and Year 11. Student users can maintain the same user accounts through Year 9, Year 10 and Year 11 covering their entire GCSE course. Unless expressly requested by the student, all student user data is deleted at the end of a student’s Year 11. Consequently, data is kept for a maximum of three years before being destroyed.
You have the right to obtain the personal information we store on your behalf and, in addition, the following rights which you can exercise free of charge:
- The right to request that we delete your personal information from our database, unless we need to retain that information to comply with a legal obligation,
- The right to request that we amend your personal information if it is inaccurate or incomplete.
- The right to lodge a complaint with the relevant data protection regulator if you think that any of your rights have been infringed.
You can exercise your rights by contacting us at support@my-GSCEscience.com. In the UK, the data protection regulator is the Information Commissioner’s Office (“ICO”)
EROL has appointed a designated representative as Data Protection Officer (DPO). If you have any questions or concerns about EROL’s handling of your personal information, our DPO can be contacted via support@my-GCSEscience.com.