Privacy Policy

Resource our Schools is operated by the British Educational Suppliers Association (BESA) on behalf of a coalition of partners. BESA is committed to protecting your data and its privacy policy is detailed below.

The British Educational Suppliers Association (BESA) was incorporated on 19^th February 1973.

Our registered address is: 20 Beaufort Court, Admirals Way, London, E14 9XL.

This privacy notice was updated in March 2020 and explains what to expect when BESA collects and processes your personal and sensitive data. This privacy statement will be updated at intervals to ensure compliance with legislations such as the EU General Data Protection Regulation 2016 (GDPR) and the UK’s Data Protection Act 2018.

An individual’s personal information, including name, email address and telephone number, will not be sold, rented or otherwise transferred to a third party without that individual’s explicit consent.

BESA complies with its obligation under relevant legislations by keeping personal data up to date; by secure storage and destruction; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal and sensitive data.

Personal data will be processed in accordance with the BESA’s data protection policy. The Policy guides how we collect, store and use information about you and will be periodically assessed against new technologies, business practices and your changing needs. BESA may, from time to time, modify the Policy to reflect legal, technological and other developments. In that event the changes will appear at this location. We recommend you regularly check the Policy in order to remain aware of the contents of the latest version.

Data subjects can request that all data relating to them be removed. We cannot guarantee that every list containing information about the data subject can be identified. Removing a name from all lists does not guarantee that the individual will not be contacted again, if, for example, a new mailing list contains the deleted name. The only solution to this problem is to maintain an exclusion list that contact lists can be vetted against when used. In order that having an exclusion list does not contravene the Act, we will ask permission from the individual to hold their name on an exclusion list.

Your personal data: We are committed to protecting the data you have provided and respecting your rights and privacy in line with current legislations. Subject to appropriate internal authorisations, some of your data will be available to BESA employees, contractors and/or volunteers as necessary for the performance of our contract with you.

Data Retention – We will only keep your personal data for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, auditing, or reporting requirements.

At the end of the retention period, data that is required for research or statistical purposes, will either be archived to restrict access or anonymised so that it can no longer be associated with you.

Your rights

As a data subject, you have a number of rights:

Right to be informed – We must inform you about our collection and use of your personal data and we do this through our privacy notice as well as at the point of collection.

Right of access – You have the right to access personal data that we hold and we are required to respond to your subject access request with 30 days, in line with relevant legislation. To request a copy of the data we hold about you, please send your request to the data controller at the above address, and include the following information: your full name and address, and a description of the data required, including the date range.

Right to erasure – You have the right to request deletion of all or some of the data we hold on you where it is no longer necessary for the data controller to retain such data. We will always seek to comply with your request, unless we are required to retain data for legal, accounting, or reporting requirements. However, where appropriate data will be anonymised.

Right to rectification – You have the right to request that we correct any personal data if it is found to be inaccurate. You can do this by contacting mark@besa.org.uk

Right to restrict processing – Where there is a dispute in relation to the accuracy or processing of your personal data, you have the right to request a restriction is placed on further processing.

Right to data portability – If you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can request a copy of that personal data to transfer to another data controller where technically feasible.

Monitoring – We monitor all emails sent to us for viruses and malicious software. In order to make sure we follow your instructions correctly and to improve our service to you through proper training of our staff, we may monitor or record communications.

Transfers overseas – It may sometimes be necessary to transfer personal information outside the EEA. Any transfers made will be in full compliance with all aspects of data protection legislations.

Cookies, website, social media, automated decision making, tracking – Resource our Schools uses web data tracking services including Google Analytics to help us improve our service and fix usability problems. We do not combine this tracking data with other data or to identify our users other than by IP address and behaviour.

BESA are committed to upholding your rights as a data subject. If you have any concerns with our processing of your data, please email mark@besa.org.uk or write to our data controller, Mark Rosser, at the above address.

You also have the right to complain to the Information Commissioner’s Office (ICO) who may be contacted at https://ico.org.uk